On Wed, Jun 6, 2012 at 3:50 AM, David Coulson <da...@davidcoulson.net> wrote: > you might also want to look at having varnish prepend the haproxy IP to the > X-Forwarded-For line, rather than just pass it along - Most proxies seem to > comma delimit a list of IPs of all the devices the request has passed > through. > >
Hey David, Having a "single" line with values separated by commas or having multiple lines, one per value are both ways allowed by RFC to write headers in HTTP. So any HTTP processing tool should make no difference whatever way headers are written. Saying that, it is usually recommended to chain proxies like this: Varnish -> HAProxy -> server. Now, if you can't and must let Varnish behind HAProxy, it should be not complicated to do the X-Forwarded-For clean up (untill Varnish can understand proxy-protocol). cheers
