Function proxyProtoTLSConfig

caddytest/integration/proxyprotocol_test.go:228–273

proxyProtoTLSConfig builds a Caddy JSON configuration that proxies to a TLS upstream with PROXY protocol. The transport uses insecure_skip_verify so the self-signed certificate generated by httptest.Server is accepted.

(listenPort int, backendAddr, ppVersion string, transportVersions []string)

// upstream with PROXY protocol.  The transport uses insecure_skip_verify so
// the self-signed certificate generated by httptest.Server is accepted.
func proxyProtoTLSConfig(listenPort int, backendAddr, ppVersion string, transportVersions []string) string {
	versionsJSON, _ := json.Marshal(transportVersions)
	return fmt.Sprintf(`{
		"admin": {
			"listen": "localhost:2999"
		},
		"apps": {
			"pki": {
				"certificate_authorities": {
					"local": {
						"install_trust": false
					}
				}
			},
			"http": {
				"grace_period": 1,
				"servers": {
					"proxy": {
						"listen": [":%d"],
						"automatic_https": {
							"disable": true
						},
						"routes": [
							{
								"handle": [
									{
										"handler": "reverse_proxy",
										"upstreams": [{"dial": "%s"}],
										"transport": {
											"protocol": "http",
											"proxy_protocol": "%s",
											"versions": %s,
											"tls": {
												"insecure_skip_verify": true
											}
										}
									}
								]
							}
						]
					}
				}
			}
		}
	}`, listenPort, backendAddr, ppVersion, string(versionsJSON))
}

// testTLSProxyProtocolMatrix is the shared implementation for TLS-based proxy
// protocol tests.  It mirrors testProxyProtocolMatrix but uses a TLS backend.