Lofesa commented on issue #1749:
URL: 
https://github.com/apache/incubator-pagespeed-ngx/issues/1749#issuecomment-1168892281

   @jmarantz 
   Is a know trick when you have
   
   user -> 443 -> Proxy -> 80 -> Backend
   
   w/o pagespeed RespectXForwardedProto on; pagespeed respond with the protocol 
that the proxy request..
   
   Other software have similar issues with this, like Fail2ban.
   Fail2ban is a software to ban ip for bad actors and ir works reading log 
files, so must run in the backend server, but w/o apropiate headers, the log 
file only record the proxy ip.
   In this case headers like X-Real-IP and/or X-Forwarded-For must be inplace 
and then the real user ip gets recorden in the backend server.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to