django-best-practices icon indicating copy to clipboard operation
django-best-practices copied to clipboard

X-Real-IP is not needed

Open collinanderson opened this issue 10 years ago • 1 comments

gunicorn and apache-mod-rpaf both use X-Forwarded-For instead

collinanderson avatar Sep 09 '14 12:09 collinanderson

This article explains why you need both X-Real-IP and X-Forwarded-For, http://distinctplace.com/infrastructure/2014/04/23/story-behind-x-forwarded-for-and-x-real-ip-headers/.

epicserve avatar Sep 09 '14 14:09 epicserve