News for hackers. Stuff that matters.

A comment on Show HN: Kuberentes – The client source IP preservation dilemma. Parent comment

Re:Show HN: Kuberentes – The client source IP preservation d... by tylergetsay on Wednesday October 14, 2020 @08:05AM (#24775583)
Depends, some load balancers may think they are behind another load balancer, and forward the header. This is default behavior iirc.
[ Parent | on HN ]
Re:Show HN: Kuberentes – The client source IP preservation d... by shreyansh_k on Wednesday October 14, 2020 @12:28PM (#24778463)
A well behaving reverse proxy or load balancer would not cause security issues. The header contains both 'for' and 'by' parameters. If they are properly filled by the proxies, then it's not a security issue.

source: author of django-forwarded middleware, finds client IP from XFF header.

[ Parent | on HN ]