allow a PROXY line in front of a TLS connection

[slingamn]

https://blog.digitalocean.com/load-balancers-now-support-proxy-protocol/

People are using this for load balancing at the TCP level and doing TLS termination after the load balancer, so you get a PROXY line and then the TLS handshake. Let's see if we can support this.

[RyanSquared]

@daurnimator @drGrove @Aagat

[DanielOaks]

Iiiinteresting. Cool, sounds good!

[slingamn]

There was some confusion about this in #oragono, so to clarify, we currently have full support for Digital Ocean's "SSL termination" option. This ticket is to add support for the "SSL passthrough" option.

[slingamn]

Unrelated: @RyanSquared any update from your side? <3

[slingamn]

We got a report that DO's "SSL termination" does not work with non-HTTPS traffic; this needs confirmation.

[RyanSquared]

Sorry for being so late, I can confirm that DigitalOcean's "SSL Termination" option only works with HTTPS traffic. It will not work with traffic that is not HTTPS, such as IRC.

[slingamn]

Any interest from @hashbang in adopting Oragono if we add this functionality?

[RyanSquared]

I'm interested in Oragono as an option overall, so I might just put it up on a single server just to get an IRC server running (we're a stone's throw away from our current single-node UnrealIRCd 3 server dying), but this would help consolidate all of our services behind DigitalOcean's Kubernetes setup.