From 8041e3924d92036e89b64a7cab3e58a11b016073 Mon Sep 17 00:00:00 2001 From: Debian Date: Wed, 3 Jun 2026 07:04:26 +0200 Subject: [PATCH] =?UTF-8?q?fix(waf):=20no=20option=20forwardfor=20+=20time?= =?UTF-8?q?out=20server=201s=20f=C3=BCr=20SPOE-Backend=20=E2=80=94=20v1.2.?= =?UTF-8?q?74?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit SPOE-Backend ist TCP-Mode — forwardfor aus defaults-Block gilt nicht, HAProxy wirft Warning. no option forwardfor explizit setzen unterdrückt das. timeout server auf 1s angehoben (konsistent mit processing-Timeout). Co-Authored-By: Claude Sonnet 4.6 --- VERSION | 2 +- internal/haproxy/haproxy.cfg.tpl | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/VERSION b/VERSION index 03fcdbc..a366a08 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.2.73 +1.2.74 diff --git a/internal/haproxy/haproxy.cfg.tpl b/internal/haproxy/haproxy.cfg.tpl index 7ff1599..defcf9f 100644 --- a/internal/haproxy/haproxy.cfg.tpl +++ b/internal/haproxy/haproxy.cfg.tpl @@ -209,8 +209,10 @@ backend rl_{{$d.ID}} # SPOE-Backend für edgeguard-waf (TCP, kein HTTP-Parsing). backend spoe-edgeguard-waf mode tcp + option tcplog + no option forwardfor timeout connect 100ms - timeout server 50ms + timeout server 1s server spoe-waf-1 127.0.0.1:9000 {{- end}}