From 993226aae605cc46b74781c18769ae3eddd62fac Mon Sep 17 00:00:00 2001 From: Ran Date: Mon, 3 Jul 2023 09:47:12 +0800 Subject: [PATCH] Update command-line-flags-for-tidb-configuration.md (#14038) --- command-line-flags-for-tidb-configuration.md | 2 +- tidb-configuration-file.md | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/command-line-flags-for-tidb-configuration.md b/command-line-flags-for-tidb-configuration.md index 947cb58eefa4a..e4b5b936f2e7e 100644 --- a/command-line-flags-for-tidb-configuration.md +++ b/command-line-flags-for-tidb-configuration.md @@ -114,7 +114,7 @@ When you start the TiDB cluster, you can use command-line options or environment ## `--proxy-protocol-fallbackable` -- Controls whether to enable PROXY protocol fallback mode. When this parameter is set to `true`, TiDB accepts PROXY client connections and client connections without any PROXY protocol header. By default, TiDB only accepts client connections with a PROXY protocol header. +- Controls whether to enable PROXY protocol fallback mode. When this parameter is set to `true`, TiDB accepts client connections that belong to `--proxy-protocol-networks` without using the PROXY protocol specification or without sending a PROXY protocol header. By default, TiDB only accepts client connections that belong to `--proxy-protocol-networks` and send a PROXY protocol header. - Default value: `false` ## `--proxy-protocol-networks` diff --git a/tidb-configuration-file.md b/tidb-configuration-file.md index 0f5525bb20982..74ba6c4bd7785 100644 --- a/tidb-configuration-file.md +++ b/tidb-configuration-file.md @@ -929,6 +929,11 @@ Configuration items related to the PROXY protocol. > > Use `*` with caution because it might introduce security risks by allowing a client of any IP address to report its IP address. In addition, using `*` might also cause the internal component that directly connects to TiDB (such as TiDB Dashboard) to be unavailable. +### `fallbackable` New in v6.5.1 + ++ Controls whether to enable the PROXY protocol fallback mode. If this configuration item is set to `true`, TiDB can accept clients that belong to `proxy-protocol.networks` to connect to TiDB without using the PROXY protocol specification or without sending the PROXY protocol header. By default, TiDB only accepts client connections that belong to `proxy-protocol.networks` and send a PROXY protocol header. ++ Default value: `false` + ## experimental The `experimental` section, introduced in v3.1.0, describes the configurations related to the experimental features of TiDB.