GitHub user zap51 added a comment to the discussion: Preserve Client Source IP in Virtual Router
@senthilnathan-am, Thanks for the update. Ignoring `proxy_set_header` in your backend server at the moment, I see that `$http_x_forwarded_for` is still being read as only one address. So, please make sure the XFF configuration is properly configured at Istio. You should try increasing `numTrustedProxies`, which ideally adds the request with what's that is actually coming with "X-Forwarded-For` to the first and then appends the SNAT IP separated by a comma like the below ``` <ip_in_xff_req_header>, 10.40.0.0 10.40.0.0 ... ``` Also, VR is **not** considered a proxy, hence the amount in `numTrustedProxies` makes less sense unless there are more number of http-parsing proxies which add XFF request headers in front of the VR. GitHub link: https://github.com/apache/cloudstack/discussions/9529#discussioncomment-10357760 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
