proxyproto

Overview ¶

Package proxyproto provides a net.Listener that reads an optional PROXY-protocol v1 header (the text format Xray emits with xver=1) from each accepted connection and exposes the real client address via RemoteAddr.

The panel's HTTP server sits behind Xray, which terminates TLS and forwards the decrypted request over loopback — so without this the panel only ever sees 127.0.0.1. Connections that arrive WITHOUT a PROXY header (anything not routed through the xver fallback) pass through unchanged, keeping their real transport address, so the wrapper is safe to install unconditionally.