Custom Query (2297 matches)
Results (40 - 42 of 2297)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #2 | fixed | HttpRealIpModule only seems to work with one trusted proxy, you can't build a list of trusted proxies as only the first one will work | ||
| Description |
HttpRealIpModule only seems to work with the first trusted proxy set via set_real_ip_from. Any additional trusted proxies are ignored which contradicts the example at http://wiki.nginx.org/HttpRealIpModule Example 1: If you only supply one trusted proxy everything works as expected. set_real_ip_from proxy_1_IP; real_ip_header X-Forwarded-For; X-Forwarded-For: client1, proxy_1_IP $remote_addr = client1 (which is expected) Example 2: However if you provide a list of trusted proxies, only the first one is applied. set_real_ip_from proxy_1_IP; set_real_ip_from proxy_2_IP; real_ip_header X-Forwarded-For; X-Forwarded-For: client1, proxy_2_IP, proxy_1_IP $remote_addr = proxy_2_IP (which is unexpected) It looks like I'm not the only person to encounter this issue: http://forum.nginx.org/read.php?2,154968,154996 The poster of that thread has supplied a patch (which I have not tested) http://treehou.se/~omar/nginx-0.8.53-xff.patch Thanks, Ciaran |
|||
| #40 | fixed | proxy_bind inheritance | ||
| Description |
Директивы (proxy|fastcgi|uwsgi|memcache)_bind не наследуется в контекст location. |
|||
| #44 | fixed | IPv6 support for HTTP realip module | ||
| Description |
The attached patch, based on r4232, implements IPv6 support for the realip HTTP module (set_real_ip_from). |
|||
