> Hi. Nginx 1.0.8 proxying to Apache 2. My version of PHP is 5.3.8, but
> that's irrelevant I suppose.
>
> Nginx is with Real IP module. I have the following in my conf file:
>
>
> [code]
> set_real_ip_from 192.168.1.0/24;
> set_real_ip_from 192.168.2.1;
> set_real_ip_from 127.0.0.1;
> set_real_ip_from [..my server ip..];
> real_ip_header X-Real-IP;
> [/code]
>
>
> Apache is also with module RPAF. And there's this bit in httpd.conf:
>
>
> [code]
> LoadModule rpaf_module /usr/lib64/httpd/modules/mod_rpaf-2.0.so
> <IfModule mod_rpaf.c>
> RPAFenable On
> RPAFproxy_ips 0.0.0.0 127.0.0.1 [...my server IPs...]
> RPAFsethostname On
> RPAFheader X-Real-IP
> </IfModule>
> [/code]
>
>
> Yet, in Apache log, the client IPs are not shown. All the IPs in the log
> are my own server's IP!
>
> How can I make sure that Apache shows the end user's IP?

You shouldn't use ngx_http_realip_module for issues like this.
Just set X-Real-IP header to $remote_addr variable value
in your location section with 'proxy_pass' directive
(or 'fastcgi_pass' or whatever you use).

Like the following:

location / {
....
proxy_pass http://<backend_ip>:<backend_port>;
proxy_set_header Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
....
}

Your mod_rpaf config have already correctly set up to handle X-Real-IP header
and consider it as the end user's IP.

Also, you shouldn't use the RPAFsethostname option turned 'On' unless you
set X-Host header in the nginx config before passing request to backend. Just turn it 'Off'.

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx