HTTP_X_FORWARDED_FOR handling

[Thiago Figueiro]

Ø  in vcl_recv put following.

remove req.http.X-Forwarded-For;
set    req.http.X-Forwarded-For = client.ip;



Note that this doesn’t handle existing XFF headers so there’s a chance multiple clients can be identified as coming from the same IP (which they are, technically).  

If all you’re doing is timing-out based on source IP and you’re happy to pack a few clients in the same group you should be good.

 


______________________________________________________
    CONFIDENTIALITY NOTICE    
This electronic mail message, including any and/or all attachments, is for the sole use of the intended recipient(s), and may contain confidential and/or privileged information, pertaining to business conducted under the direction and supervision of the sending organization. All electronic mail messages, which may have been established as expressed views and/or opinions (stated either within the electronic mail message or any of its attachments), are left to the sole responsibility of that of the sender, and are not necessarily attributed to the sending organization. Unauthorized interception, review, use, disclosure or distribution of any such information contained within this electronic mail message and/or its attachment(s), is (are) strictly prohibited. If you are not the intended recipient, please contact the sender by replying to this electronic mail message, along with the destruction all copies of the original electronic mail message (along with any attachments).
______________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.varnish-cache.org/lists/pipermail/varnish-misc/attachments/20110117/383a3f49/attachment-0003.html>