From 05f83896bf997bdf105cf2a9e9cb6b24202ac0bb Mon Sep 17 00:00:00 2001 From: Vladimir Dubrovin <3proxy@3proxy.ru> Date: Sat, 1 Aug 2026 11:15:53 +0300 Subject: [PATCH] Update 3proxy.cfg.5.html --- doc/html/man5/3proxy.cfg.5.html | 38 +++++++++++++++++++++++++++------ 1 file changed, 31 insertions(+), 7 deletions(-) diff --git a/doc/html/man5/3proxy.cfg.5.html b/doc/html/man5/3proxy.cfg.5.html index dc18074..b91fdb2 100644 --- a/doc/html/man5/3proxy.cfg.5.html +++ b/doc/html/man5/3proxy.cfg.5.html @@ -192,9 +192,16 @@ or hostname, useful in case of dynamic DNS.
(-ol), connect back client (-or), connect back listening (-oR) sockets. Options like TCP_CORK, TCP_NODELAY, TCP_DEFER_ACCEPT, TCP_QUICKACK, TCP_TIMESTAMPS, -USE_TCP_FASTOPEN, SO_REUSEADDR, SO_REUSEPORT, -SO_PORT_SCALABILITY, SO_REUSE_UNICASTPORT, SO_KEEPALIVE, -SO_DONTROUTE may be supported depending on OS.
+TCP_FASTOPEN, SO_REUSEADDR, SO_REUSEPORT, +SO_EXCLUSIVEADDRUSE, SO_PORT_SCALABILITY, +SO_REUSE_UNICASTPORT, SO_KEEPALIVE, SO_DONTROUTE may be +supported depending on OS. SO_REUSEADDR and SO_REUSEPORT are +set on the listening socket by default on Unix. On Windows +SO_REUSEADDR is not set: it is not required to rebind a +listening port and it only lets another local process bind +the same address and port. Use SO_EXCLUSIVEADDRUSE (Windows) +on the listening socket (-ol) to prevent that. +
-H (for all services) Expect HAProxy PROXY protocol v1 header on incoming connection. This allows the proxy to receive real client IP address from HAProxy or other load @@ -205,9 +212,16 @@ be sent before any protocol-specific data.
delay GRACE_DELAY milliseconds before polling if average polling size is below GRACE_TRAFF bytes and GRACE_NUM read operations in a single direction are detected within 1 -second. Useful to minimize polling -s
+second. Useful to minimize polling
+-s
(for admin) secure, allow only secure operations, currently only traffic counters view without ability to reset.
+(for TCP services, Linux) enable splice(). splice() is not +built by default and is disabled even when built, because +current Linux does not implement SPLICE_F_MOVE, so no real +zero-copy takes place and the read/write path is faster for +most traffic. Rebuild with -DWITHSPLICE to make -s +available, -s0 disables it explicitly.
(for dnspr) simple, do not use resolver and 3proxy cache, always use external DNS server.
(for udppm) singlepacket, expect only one packet from both @@ -762,8 +776,8 @@ service (with -s parameter).
ha send HAProxy PROXY protocol v1 header to the next parent proxy (or to the destination if ha is used alone). Place ha before the parent that should -receive the header; after the header is sent, negotiation -of that parent protocol continues (SOCKS, CONNECT, etc.). +receive the header; after the header is sent, negotiation of +that parent protocol continues (SOCKS, CONNECT, etc.). Useful for passing client IP information to the parent proxy. Example:
parent 1000 ha 0.0.0.0 0
@@ -1048,7 +1062,17 @@ experience 3proxy crash on request processing, try to set some positive value. You may start with stacksize 65536 and then find the minimal value for the service to work. If you experience memory shortage, you can try to experiment with -negative values.

+negative values.
+With SQL logging (log &ODBC_string) the value is +automatically raised to 32768 if it is smaller, because ODBC +drivers require more stack. A stacksize command +placed after the log command overrides this.
+The base stack size the value is added to is 49152. On +FreeBSD, NetBSD, OpenBSD and DragonFly it is 65536, because +libc functions such as vfprintf() called by syslog() use +significantly more stack there. The result is never lowered +below PTHREAD_STACK_MIN, so a large negative value can not +disable the thread stack.

PLUGINS