Uploaded image for project: 'Blesta Core'
  1. Blesta Core
  2. CORE-2916

Allow proxy IP addresses to be set to allow the x-forwarded-for header from

        Details

        • Type: Improvement
        • Status: Open
        • Priority: Major
        • Resolution: Unresolved
        • Affects Version/s: 4.5.0-b1
        • Fix Version/s: Long Term
        • Component/s: None
        • Labels:
          None

          Description

          We added a setting, behind_proxy, in CORE-2349 that sets whether or not Blesta is behind a proxy/load balancer. In such cases, we cannot rely on php's _$SERVER['REMOTE_ADDR'] IP address because it is the IP address of the proxy, not the user. Instead, the proxy should be passing an x-forwarded-for header to identify the user's IP address.

          We could update the settings to allow a white-list of IP addresses to be set representing the proxy IP addresses that are trusted, and only interpret x-forwarded-for IPs from those IPs.

            Activity

            Ascending order - Click to sort in descending order
            tyson Tyson Phillips (Inactive) created issue -
            tyson Tyson Phillips (Inactive) made changes -
            Field Original Value New Value
            Rank Ranked higher
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked lower
            tyson Tyson Phillips (Inactive) made changes -
            Fix Version/s Long Term [ 10801 ]
            tyson Tyson Phillips (Inactive) made changes -
            Story Points 3
            tyson Tyson Phillips (Inactive) made changes -
            Rank Ranked higher

              People

              • Assignee:
                Unassigned
                Reporter:
                tyson Tyson Phillips (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: