Hello! With "option forwardfor", haproxy adds X-Forwarded-For header at the end of header list.
But according to wikipedia: http://en.wikipedia.org/wiki/X-Forwarded-For and other HTTP proxies (say, nginx) there is standard format to specify several intermediate IP addresses: X-Forwarded-For: client1, proxy1, proxy2 Why don't you use these standard procedure to add client IP? (I mean if X-Forwarded-For already exists in request headers, modify its value with client IP and do not create another header with the same name). Thanks!