https://bugs.openldap.org/show_bug.cgi?id=10549
--- Comment #2 from Tim tim.wagner@freenet.de --- I think it's not a violation of the PROXY protocol happen here (e.g. fragmented header). The PROXY protocol header is received in one chunk right after the 3-wy handshake, but "too late" - the buffer is read slightly before.
From PROXY Protocol specs: ``` The receiver may apply a short timeout and decide to abort the connection if the protocol header is not seen within a few seconds (at least 3 seconds to cover a TCP retransmit). ```
An example out of a tcpdump with relative timings: 11.201180 C->S SYN 11.201208 S->C SYN,ACK 11.201424 C->S ACK <- bare ACK completes handshake, carries NO data 11.201524 S->C FIN <- lloadd closes 100us later, before any data arrives 11.201546 C->S 28 bytes <- PROXY v2 PROXY/TCPv4 header arrives -- too late 11.201581 S->C RST 11.201618 C->S 31 bytes <- LDAP StartTLS ExtendedRequest (1.3.6.1.4.1.1466.20037) 11.201626 S->C RST
I can provide the tcpdump/pcap anonymized if necessary.