breken ba5c55f1a9 fix(proxy): keep bytes after PROXY UNKNOWN header ...

When a trusted upstream sends "PROXY UNKNOWN\r\n", parseProxyProtocolHeader
returned the raw connection and discarded whatever followed the header in
the same read. The TLS ClientHello usually arrives in that same segment, so
it was lost, the SNI extraction failed on the truncated stream, and the
connection was dropped. The 5s parsing read deadline was also left set on
this path.

Wrap the connection so the remaining buffered bytes are replayed ahead of
the socket, and clear the read deadline, matching the other header
branches.

2026-09-13 19:28:18 -07:00

..

proxy_test.go

fix(proxy): keep bytes after PROXY UNKNOWN header

2026-09-13 19:28:18 -07:00

proxy.go

fix(proxy): keep bytes after PROXY UNKNOWN header

2026-09-13 19:28:18 -07:00