nginx preserve upstream header values, fix ip #2847
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Type of change
Objective
Resolves #2500
Fix improper protocol and host header from persisting across proxy jumps.
Also, remove
X-Real-IP
header from being evaluated forGetIpAddress
since it will always be the value of the last connecting client, which could be a proxy whenever there is a chain of multiple proxies.X-Forwarded-For
will properly chain proxy IP addresses in a CSV string, and ASP.NET Core will load the correct value inhttpContext.Connection.RemoteIpAddress
.Code changes
X-Real-IP
from being evaluated from self hosted servers for client ip address.Before you submit
dotnet format --verify-no-changes
) (required)