From 00feaf2d1a8e52c1edb907ad96af737c25703166 Mon Sep 17 00:00:00 2001
From: Anton Miniailo <anton@goteleport.com>
Date: Tue, 3 Oct 2023 19:36:17 -0400
Subject: [PATCH] Fix desktop listener PROXY mode setting (#32922)

---
 lib/service/desktop.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/service/desktop.go b/lib/service/desktop.go
index 90b5fc9d52d6..7c9473784c66 100644
--- a/lib/service/desktop.go
+++ b/lib/service/desktop.go
@@ -253,7 +253,7 @@ func (process *TeleportProcess) initWindowsDesktopServiceRegistered(log *logrus.
 		mux, err := multiplexer.New(multiplexer.Config{
 			Context:             process.ExitContext(),
 			Listener:            listener,
-			PROXYProtocolMode:   cfg.Proxy.PROXYProtocolMode,
+			PROXYProtocolMode:   multiplexer.PROXYProtocolOff, // Desktop service never should process unsigned PROXY headers.
 			ID:                  teleport.Component(teleport.ComponentWindowsDesktop),
 			CertAuthorityGetter: accessPoint.GetCertAuthority,
 			LocalClusterName:    clusterName,