| HTTP proxy (CDN) settings: $wgUsePrivateIPs | |
|---|---|
| Whether private X-Forwarded-For IPs should be accepted |
|
| Introduced in version: | 1.14.0 (r43784) |
| Removed in version: | still in use |
| Allowed values: | (boolean) |
| Default value: | false |
| Other settings: Alphabetical | By function | |
Details
Determines whether MediaWiki will trust an X-Forwarded-For (XFF) header specifying a private IP in requests from a trusted forwarding proxy.
If set to false, private IP addresses in the XFF header will be ignored.
A trusted forwarding proxy is any proxy listed in either $wgCdnServers ($wgSquidServers prior to 1.34) or $wgCdnServersNoPurge ($wgSquidServersNoPurge prior to 1.34).
Extensions can also mark proxies as trusted via the IsTrustedProxy hook.
So if you have two traffic managers (Might be Zeus or F5) sending requests to your webservers, forwarding from an internal network, the config might be this:
$wgUsePrivateIPs = true;
$wgCdnServersNoPurge = array( '172.1.1.1', '172.1.1.2' );
See also
- Manual:$wgCdnServers
- Manual:$wgCdnServersNoPurge
- Manual:Hooks/IsTrustedProxy
This article is issued from Mediawiki. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.