ingress-nginx icon indicating copy to clipboard operation
ingress-nginx copied to clipboard

broken header error

Open ahaj-98 opened this issue 6 months ago • 1 comments

hello all, i have a 5 ingress-nginx controllers installed in my EKS cluster that have load balancer all installed as helm charts. however only one ingress-nginx controller and only on PROD environment is producing below error continuously but affecting nothing in any of the services:

[error] 32#32: *10068 broken header: "" while reading PROXY protocol, client: 10.19.1.128, server: 0.0.0.0:443

EKS version: 1.31 ingress-nginx helm chart version: 4.12.0 application load balancer controller helm chart version: 1.11.0

in the values file, controller.service.external.annotations:

      service.beta.kubernetes.io/aws-load-balancer-type: external
      service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "ip"
      service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
      service.beta.kubernetes.io/aws-load-balancer-attributes: "load_balancing.cross_zone.enabled=true"
      service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: '*'
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: "2"
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: "2"
      service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "<ssl-certificate-arn>"
      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "tcp"
      service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "https"
      service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "3600"
      service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06

In the attributes of the target group of the load balancer in the EKS console i see Proxy protocol v2 On

P.S: The error is happening even before upgrading to all of above helm charts versions.

ahaj-98 avatar Apr 01 '25 13:04 ahaj-98