XFF original IP detection extension

This extension allows for the original downstream remote IP to be detected by reading the x-forwarded-for header.

This extension may be referenced by the qualified name

This extension is intended to be robust against untrusted downstream traffic. It assumes that the upstream is trusted.

Tip

xff_num_trusted_hops

() The number of additional ingress proxy hops from the right side of the x-forwarded-for HTTP header to trust when determining the origin client’s IP address. The default is zero if this option is not specified. See the documentation for for more information.