search

crowdsecurity / cs-nginx-bouncer

CrowdSec bouncer for Nginx
MIT License
50 stars 9 forks source link

Add support for http_x_forwarded_for #8

Closed northdakota closed 3 years ago

buixor commented 3 years ago

Hello,

If mod_realip is already setup, the real ip is going to end up in ngx.var.remote_addr. Plus, we shouldn't blindly trust the x-forwarded-for header :)