jpillora / ipfilter

A package for IP Filtering in Go (golang)
MIT License
387 stars 47 forks source link

Support for the webapp behind a proxy #8

Closed liut closed 6 years ago

jpillora commented 6 years ago

Unfortunately silently swapping X-Forwarded-For is insecure. Maybe an option TrustProxy and also using https://github.com/tomasen/realip?

liut commented 6 years ago

OK, tomasen/realip is better solution!

jpillora commented 6 years ago

Will close for now, though happy to discuss any proposed API, the important part is that its opt-in