I'm running nginx beyind a L7 proxy (haproxy), I have haproxy setting the X-Forwarded-For header and I'm using this to log the real IP of the client and pass it to other processes that I'm proxying with nginx (mongrels, apache, etc.). This works just great but I would like to be able to use nginx directives to control access (allow, deny, etc.). These don't work since nginx itself sees the remote_addr as the IP of the haproxy server.

Any suggestions? I would think a solution like mod_rpaf for apache would be ideal.

Thanks, Paul