Re: Behavior of realip module with this config

2017-02-10 Thread Paul Nickerson
On Fri, Feb 10, 2017 at 11:05 AM, Maxim Dounin wrote: > Note that my answer ("with the configuration in question nginx > will use the first address in X-Forwarded-For provided") only > applies to the particular configuration with "set_real_ip_from > 0.0.0.0/0", and it is incorrect to assume it can

Re: Behavior of realip module with this config

2017-02-10 Thread Maxim Dounin
Hello! On Fri, Feb 10, 2017 at 10:20:01AM -0500, Paul Nickerson wrote: > On Fri, Feb 10, 2017 at 7:33 AM, Maxim Dounin wrote: > > And real_ip_recursive switched on means that this happens > > recursively. As a result, with the configuration in question > > nginx will use the first address in X-F

Re: Behavior of realip module with this config

2017-02-10 Thread Paul Nickerson
On Fri, Feb 10, 2017 at 7:33 AM, Maxim Dounin wrote: > And real_ip_recursive switched on means that this happens > recursively. As a result, with the configuration in question > nginx will use the first address in X-Forwarded-For provided, if > any (assuming all addresses are valid). > Note that "

Re: Behavior of realip module with this config

2017-02-10 Thread Maxim Dounin
Hello! On Thu, Feb 09, 2017 at 05:49:13PM -0500, Paul Nickerson wrote: > I've got the config below. I don't have these settings reconfigured > anywhere else. My understanding is that no matter anything else at all > anywhere else, and no matter whether the X-Forwarded-For field in the HTTP > head

Behavior of realip module with this config

2017-02-09 Thread Paul Nickerson
I've got the config below. I don't have these settings reconfigured anywhere else. My understanding is that no matter anything else at all anywhere else, and no matter whether the X-Forwarded-For field in the HTTP header has one or multiple IP addresses, or isn't even present, $remote_addr will not