Thiago Figueiro TFigueiro at
Sun Jan 16 22:32:54 CET 2011

Ø  in vcl_recv put following.

remove req.http.X-Forwarded-For;
set    req.http.X-Forwarded-For = client.ip;

Note that this doesn’t handle existing XFF headers so there’s a chance multiple clients can be identified as coming from the same IP (which they are, technically).  

If all you’re doing is timing-out based on source IP and you’re happy to pack a few clients in the same group you should be good.


This electronic mail message, including any and/or all attachments, is for the sole use of the intended recipient(s), and may contain confidential and/or privileged information, pertaining to business conducted under the direction and supervision of the sending organization. All electronic mail messages, which may have been established as expressed views and/or opinions (stated either within the electronic mail message or any of its attachments), are left to the sole responsibility of that of the sender, and are not necessarily attributed to the sending organization. Unauthorized interception, review, use, disclosure or distribution of any such information contained within this electronic mail message and/or its attachment(s), is (are) strictly prohibited. If you are not the intended recipient, please contact the sender by replying to this electronic mail message, along with the destruction all copies of the original electronic mail message (along with any attachments).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the varnish-misc mailing list