151 reputation
16
bio website
location Seattle, WA
age
visits member for 2 years, 1 month
seen 2 days ago

Nov
7
awarded  Notable Question
Sep
22
awarded  Supporter
Dec
16
awarded  Popular Question
Apr
9
awarded  Tumbleweed
Apr
2
asked What's the best way to run HAProxy backup as another HAProxy server and avoid cyclical issues
Jan
31
answered nginx alias using php5-fpm response 404
Nov
1
comment Haproxy not properly passing on X-Forwarded-For header
Willy, the problem is that I used to ser multiple addresses in the header and wrote code in my application to pull out the first non-private IP in the chain and use it, which worked great. A some point something changed and now I only ever receive a single address in the header at my application level, which seems like haproxy is applying that reqidel logic by default or something. Do you see any reason that would be overwriting the chain instead of appending, based on my config?
Nov
1
awarded  Student
Oct
15
awarded  Teacher
Oct
14
comment Haproxy not properly passing on X-Forwarded-For header
Also, just to clarify you say: "The client's IP is sent in the XFF header to the server" Are you saying that HAProxy intentionally only adds a single IP to the XFF header, for the clients actual IP address? (even if there were already one or more XFF IP addresses in the header) If this is the case, what I want to be able to extract on my server side is the first public IP in the chain from the client, so I can use it for GeoIP resolution. Is there a way to do this? My current implementation sometimes returns a private ip.
Oct
14
comment Haproxy not properly passing on X-Forwarded-For header
Is there a way to put the clients public ip in the header instead of their private, if they are passing through a proxy on the way? I see a good handful of 10., 192., etc (private ips) in the header the today, which I'm of course unable to geo-locate.
Oct
14
comment Haproxy not properly passing on X-Forwarded-For header
Also,thanks for the suggestion around keep alive. I'll be sure to give that a shot for our website and client dashboard to see how it improves load times. :). Or service,where we use geoip most, is usually just single requests, so we chose to disable keep alive there.
Oct
14
comment Haproxy not properly passing on X-Forwarded-For header
Is there a better way (at least with >= haproxy 1.4.21) to determine the clients IP for geolocation purposes (not their private IP incase they are running through a proxy)?
Oct
14
comment Haproxy not properly passing on X-Forwarded-For header
Willy, thanks for the response. while I did have something in front of haproxy at one point, I am pretty sure that haproxy frequently sent on XFF headers with a chain of IPs in the past. Did this used to happen in older versions, where the newer versions just send on the just one IP? At some point i wrote code in my app to pull the proper IP from the XFF chain, instead of the request IP, if the XFF header was present (at least my haproxy in the request path) so i didn't geo-target the user to the location of my load balancer.
Oct
12
answered Upstart job (haproxy)
Oct
12
answered Compare HTTP load balacing using HAProxy & Nginx
Oct
12
answered HAProxy — pause/queue all traffic without losing requests
Oct
12
answered Load Balancer & Set up- 600k users per day
Oct
12
answered Zero downtime deployment (Tomcat), Nginx or HAProxy, behind hardware LB - how to “starve” old server?
Oct
12
answered DNS failover across multiple datacenters?