From 4ab6a2cf74ce548a33b9ba33a9bee6417fbba234 Mon Sep 17 00:00:00 2001
From: George Melikov <mail@gmelikov.ru>
Date: Fri, 24 Apr 2026 10:22:45 +0300
Subject: [PATCH 1/2] LB: document proxy_protocol_from and external_sources

---
 docs/network/load_balancer.md | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/docs/network/load_balancer.md b/docs/network/load_balancer.md
index 1d93bfc9..905dff31 100644
--- a/docs/network/load_balancer.md
+++ b/docs/network/load_balancer.md
@@ -123,6 +123,21 @@ Routing rules that define how traffic is handled:
   "protocol": "http",
   "port": 80,
   "domains": ["example.com", "www.example.com"],
+}
+```
+
+#### External sources
+
+You may use external sources to forward traffic from LB to remote systems (use `proxy_protocol_from` to enable proxy protocol and pass real client IP to backend, nginx will be started on remote system):
+
+```json
+{
+  "name": "web-vhost",
+  "description": "Web server vhost",
+  "protocol": "http",
+  "port": 80,
+  "domains": ["example.com", "www.example.com"],
+  "proxy_protocol_from": "127.0.0.1/32",
   "external_sources": [
     {
       "kind": "ssh_forward",
@@ -135,9 +150,9 @@ Routing rules that define how traffic is handled:
 }
 ```
 
-#### External sources requirements
+##### Requirements
 
-##### SSH
+###### SSH
 
 Tested on Ubuntu 24, prepare remote system:
 

From a5c676c601735ba617e37ba6353c9aa747946b6c Mon Sep 17 00:00:00 2001
From: George Melikov <mail@gmelikov.ru>
Date: Fri, 24 Apr 2026 12:05:18 +0300
Subject: [PATCH 2/2] Update docs/network/load_balancer.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---
 docs/network/load_balancer.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/network/load_balancer.md b/docs/network/load_balancer.md
index 905dff31..cf8d4421 100644
--- a/docs/network/load_balancer.md
+++ b/docs/network/load_balancer.md
@@ -128,7 +128,7 @@ Routing rules that define how traffic is handled:
 
 #### External sources
 
-You may use external sources to forward traffic from LB to remote systems (use `proxy_protocol_from` to enable proxy protocol and pass real client IP to backend, nginx will be started on remote system):
+You may use external sources to forward traffic from LB to remote systems (use proxy_protocol_from to enable the PROXY protocol and pass the real client IP to the backend; Nginx will be started on the remote system):
 
 ```json
 {