Impact

Incorrect log content. May affect network level RBAC for non-HTTP network connections.

Description

When using proxy-protocol as a listener filter, tcp-proxy as the network filter, and access logging, the wrong downstream address is logged. The logged address should be the one from the proxy protocol header on the connection, but the direct peer address is logged instead.

Patches

1.16.1

Workarounds

None.

References

#14087
#14131