Open
Description
Hello,
Would it be possible to have the header X-Real-IP when sozu requests the backend ?
Relying on X-Forwarded-For is unsecure as it may be forged by the client.
A typical request would look like :
GET / HTTP/1.1
X-Real-IP: xxxx:xxxxx:xx:x::xxxx:xxxx
X-Forwarded-Proto: https
accept: */*
user-agent: Python/3.10 aiohttp/3.9.3
X-Forwarded-For: xxxx:xxx:xxxx:x::xxxx:xxxx, 127.0.0.1
Host: example.com
Accept-Encoding: gzip
Typical nginx configuration to declare X-Real-IP:
proxy_set_header X-Real-IP $remote_addr;
If the header already exists in the request, the field should be overwritten.
Metadata
Metadata
Assignees
Labels
No labels