I am seeing (with option forwardfor) that HAProxy is replacing X-Fowarded-For instead of chaining the proxy chain. I know it's not an RFC but the defacto standard is to chain the proxies by appending to the header. For my usage it is not necessary but thought I'd point it out (Varnish also doesn't handle the header properly but there's a workaround in VCL for it).
Is there a setting for this that I am missing? -- Miguel Pilar
