Radiator Server Documentation — v10.34.0

Rejecting proxied TACACS+ TCP connection due to PROXY header error

A proxied TACACS+ TCP connection has an invalid or late PROXY header.

Emission

Log level: DEBUG

Per-request tracing: No

Promotion: WARN

Logged when a TACACS+ TCP listener rejects a connection because its PROXY protocol header is invalid or does not arrive before the connection timeout. The event has an associated counter.

Check that the connecting proxy sends the configured proxy-protocol version and investigate malformed traffic reaching the listener. If valid headers arrive too slowly, check proxy capacity and the listener timeout.