Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 2 down vote favorite

Is it possible to make Nginx HttpGeoIPModule use the X_Forwarded IP that is sent via HAProxy? It is currently just using the incorrect server IP, but unsure how I can make Nginx use the X_Forwarded IP.

Any ideas?

share|improve this question
James, just for clarification, are you seeing the X-Forwarded-For ip address in nginx's access log and the geoip module still uses the proxy's address ? – Ochoto Feb 14 '11 at 23:38

3 Answers

up vote 1 down vote

Have you tried using the RealIPModule and setting the X-Real-IP to X-Forwarded-For

You have to pass --with-http_realip_module during compile time to build the module because it is not built by default.

http://wiki.nginx.org/HttpRealIpModule

share|improve this answer
If you read my question, I am already doing this and I am asking whether I can make HttpGeoIPModule obey this. It does not at the moment. – James Feb 14 '11 at 0:21
James, is this working for you? I see the expected working behavior with my install of nginx (1.0.5) with RealIPModule and GeoIPModule. – spazm Sep 19 '12 at 20:22
James, you want to you the X-forwarded-for IP to do a Geo lookup right? When you get the X-Real-ip to X-forwarded-for IP geoIP will work. You can refer to this forum post. Similar question. forum.nginx.org/read.php?10,220550,220550 – Sameer Dec 7 '12 at 2:07
up vote 1 down vote

Sameer's answer is correct.

You'll need to configure and compile Nginx with the --with-http_realip_module option.

Then set the following option in the Nginx configuration:

set_real_ip_from 1.2.3.4;

real_ip_header X-Forwarded-For;

Where 1.2.3.4 is the IP Address of HAProxy

In HAProxy you'll need the following options:

option httpclose

option forwardfor

I found this website helpful: http://www.somerorbay.com/vps-and-dedicated/nginx-behind-haproxy-x-forwarded-for-getting-real-client-ip

share|improve this answer
If you read my question, I am already doing this and I am asking whether I can make HttpGeoIPModule obey this. It does not at the moment. – James Feb 14 '11 at 0:21
up vote 1 down vote

Another option is to run HA Proxy in transparent mode, then all IPs will display correctly. Usually a little IP Tables 'mangling' is needed to make it work, but well worth the effort.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.