cloud-hosting-platform/haproxy-manager-base
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(haproxy): set X-CLIENT-IP instead of adding it #11

Merged
jknapp merged 2 commits from fix/x-client-ip-set-not-add into main 2026-09-18 23:33:05 +00:00
Conversation 0 Commits 2 Files Changed 5
+7 -7
4 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit ab3ad42625 - Show all commits
templates/hap_backend.tpl
+2 -2
View File
@@ -4,7 +4,7 @@ backend {{ name }}-backend
option forwardfor option forwardfor
# Pass the real client IP to backend (from proxy headers or direct connection) # Pass the real client IP to backend (from proxy headers or direct connection)
# This is crucial for container-level logging and security tools # This is crucial for container-level logging and security tools
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
@@ -29,7 +29,7 @@ backend {{ name }}-sse-backend
option forwardfor option forwardfor
# Pass the real client IP to backend (from proxy headers or direct connection) # Pass the real client IP to backend (from proxy headers or direct connection)
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
templates/hap_backend_http_check.tpl
+1 -1
View File
@@ -4,7 +4,7 @@ backend {{ name }}-backend
option httpchk option httpchk
# Pass the real client IP to backend (from proxy headers or direct connection) # Pass the real client IP to backend (from proxy headers or direct connection)
# This is crucial for container-level logging and security tools # This is crucial for container-level logging and security tools
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
{% if ssl_enabled %}http-request set-header X-Forwarded-Proto https if { ssl_fc }{% endif %} {% if ssl_enabled %}http-request set-header X-Forwarded-Proto https if { ssl_fc }{% endif %}
templates/hap_backend_longlived.tpl
+2 -2
View File
@@ -14,7 +14,7 @@ backend {{ name }}-backend
timeout tunnel 6h timeout tunnel 6h
timeout http-keep-alive 6h timeout http-keep-alive 6h
option forwardfor option forwardfor
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
@@ -31,7 +31,7 @@ backend {{ name }}-sse-backend
timeout tunnel 6h timeout tunnel 6h
timeout http-keep-alive 6h timeout http-keep-alive 6h
option forwardfor option forwardfor
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
templates/hap_backend_websocket.tpl
+2 -2
View File
@@ -7,7 +7,7 @@ backend {{ name }}-backend
timeout tunnel 6h timeout tunnel 6h
timeout http-keep-alive 6h timeout http-keep-alive 6h
option forwardfor option forwardfor
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
@@ -24,7 +24,7 @@ backend {{ name }}-sse-backend
timeout tunnel 6h timeout tunnel 6h
timeout http-keep-alive 6h timeout http-keep-alive 6h
option forwardfor option forwardfor
http-request add-header X-CLIENT-IP %[var(txn.real_ip)] http-request set-header X-CLIENT-IP %[var(txn.real_ip)]
http-request set-header X-Real-IP %[var(txn.real_ip)] http-request set-header X-Real-IP %[var(txn.real_ip)]
http-request set-header X-Forwarded-For %[var(txn.real_ip)] http-request set-header X-Forwarded-For %[var(txn.real_ip)]
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }