On Jan 16, 2007, at 3:17 PM, Igor Sysoev wrote:
Of course, a client "X-Forwarded-For" is not reliable,
but you may log the header for some reason.
I usually pass a client address in "X-Real-IP" header and
the "X-Forwarded-For" header is passed as is.
in the past, I've done this:
Proxy in:
strip all x-* headers
insert x-forwarded-for / x-real-ip info
insert x-internal-passkey , which is just a simple string that is
known only to proxy and backend apps. this gives a little more
assurance to the backend app that the request came through the
expected proxy server
Proxy out:
strip all x-* headers
would that be difficult to do in nginx ?
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - -
| FindMeOn.com - The cure for Multiple Web Personality Disorder
| Web Identity Management and 3D Social Networking
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - -
| RoadSound.com - Tools For Bands, Stuff For Fans
| Collaborative Online Management And Syndication Tools
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - -