Hello!

On Mon, Jul 03, 2017 at 04:57:31AM -0400, foxgab wrote:

> Thinks for you reply.
> i got a problem on http_realip_module, as what you said, duplicate addresses
> occurred in that header.
> if i want to get the real ip for access limiting, and append the last hop
> proxy address in X-Forwarded-Fro header at the same time, what should i do?

There are two basic options:

1. Avoid using the realip module. You can still do access checks
using the "if" directive - and, for example, appropriate geo
blocks.

2. Avoid using $proxy_add_x_forwarded_for. You may add the
original address yourself, using the $realip_remote_addr variable
and appropriate map{} blocks.

Alternatively, you may want to rethink your setup to simply avoid
one or the another.

--
Maxim Dounin
http://nginx.org/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx