haproxy移除x-forwarded-for头
默认haproxy如果开启option forwardfor的参数的话,如果客户端自定义x-forwarded-for也会传过去,干扰程序获取客户真实IP,所以需要在禁区haproxy代理时候删除x-forwarded-for头
backend forward_real_ip
mode http
reqidel ^X-Forwarded-For:.*
option forwardfor
运维 kubernetes docker ELK 安全 Nginx Mysql
默认haproxy如果开启option forwardfor的参数的话,如果客户端自定义x-forwarded-for也会传过去,干扰程序获取客户真实IP,所以需要在禁区haproxy代理时候删除x-forwarded-for头
backend forward_real_ip
mode http
reqidel ^X-Forwarded-For:.*
option forwardfor