You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the use case of kubernetes, where the reverse proxy pods can have any IP address looking like 192.168.*.*. Therefore it would make sense to allow adding IP addresses with wildcards in the forwarded_allow_ips list, instead of specifying * to trust everything, or passing in a list of 254^2 (~65000) addresses.
All that would be required is a little tweaking in the ProxyHeadersMiddleware.get_trusted_client_host method
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
In the use case of kubernetes, where the reverse proxy pods can have any IP address looking like
192.168.*.*
. Therefore it would make sense to allow adding IP addresses with wildcards in theforwarded_allow_ips
list, instead of specifying*
to trust everything, or passing in a list of 254^2 (~65000) addresses.All that would be required is a little tweaking in the
ProxyHeadersMiddleware.get_trusted_client_host
methodBeta Was this translation helpful? Give feedback.
All reactions