Skip to content

Commit 4ec85a0

Browse files
committed
fixed documentation of proxy_connect_bind directive
1 parent 059f9d9 commit 4ec85a0

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -232,7 +232,7 @@ If the proxied server does not receive anything within this time, the connection
232232
proxy_connect_address
233233
---------------------
234234

235-
Syntax: **proxy_connect_address `address [transparent] | off`**
235+
Syntax: **proxy_connect_address `address | off`**
236236
Default: `none`
237237
Context: `server`
238238

@@ -244,7 +244,7 @@ NOTE: If using `set $<nginx variable>` and `proxy_connect_address $<nginx variab
244244
proxy_connect_bind
245245
------------------
246246

247-
Syntax: **proxy_connect_bind `address | off`**
247+
Syntax: **proxy_connect_bind `address [transparent] | off`**
248248
Default: `none`
249249
Context: `server`
250250

@@ -258,6 +258,8 @@ proxy_connect_bind $remote_addr transparent;
258258
259259
```
260260

261+
In order for this parameter to work, it is usually necessary to run nginx worker processes with the [superuser](http://nginx.org/en/docs/ngx_core_module.html#user) privileges. On Linux it is not required (1.13.8) as if the transparent parameter is specified, worker processes inherit the CAP_NET_RAW capability from the master process. It is also necessary to configure kernel routing table to intercept network traffic from the proxied server.
262+
261263
NOTE: If using `set $<nginx variable>` and `proxy_connect_bind $<nginx variable>` together, you should use `proxy_connect_rewrite.patch` instead, see [Install](#install) for more details.
262264

263265
Variables

0 commit comments

Comments
 (0)