If you use HAProxy as the load balancer then all of the backend servers see the traffic coming from the IP address of the load balancer. TPROXY allows you to make sure the backend servers see the true client IP address in the logs. NB. Standard Kernel builds didn't support TPROXY but as of 2.6.28 they all now do support it. Ps. A MUCH easier alternative is inserting the clients ip in the x-forward
{{#tags}}- {{label}}
{{/tags}}