Re: NginX SSL reverse mode, client ip address problem

2015-12-06 Thread Aleksandar Lazic
Hi WANJUNE. Am 06-12-2015 07:14, schrieb WANJUNE: In NginX reverse mode, There is a problem that can't get real client's Ip address. [snipp] I don't want to use http ssl listen becase of SSL handshaking burden on NginX. I decided to use stream codec like below. stream { upstream aa34

Re: NginX SSL reverse mode, client ip address problem

2015-12-06 Thread WANJUNE
Aleks, I'm really thank you for your timely response. I checked "proxy_protocol on;" option is working fine and watched the L4 machine send proxy protocol header like "PROXY TCP4 [Ip1] [Ip2] [Port1] [Port2]". Really thank you. Posted at Nginx Forum:

NginX SSL reverse mode, client ip address problem

2015-12-05 Thread WANJUNE
In NginX reverse mode, There is a problem that can't get real client's Ip address. If I use Http protocol, I can simply handle this problem with below http configuration. http { server { listen 80; location / { proxy_set_header X-forwarded-for;