[wp-trac] [WordPress Trac] #9235: Extract real IP behind a load balancer

[WordPress Trac]

#9235: Extract real IP behind a load balancer
-------------------------------------------+--------------------------------
 Reporter:  Denis-de-Bernardy              |        Owner:          
     Type:  enhancement                    |       Status:  reopened
 Priority:  normal                         |    Milestone:          
Component:  Optimization                   |      Version:  2.7     
 Severity:  normal                         |   Resolution:          
 Keywords:  has-patch tested commit early  |  
-------------------------------------------+--------------------------------
Changes (by checkers):

  * status:  closed => reopened
  * resolution:  wontfix =>


Comment:

 I'd like to see support for this (probably as commented out code in wp-
 config.php) . Doing this at the application level is a Good Thing. An
 example of another webapp that does this is MediaWiki, which uses a
 [http://www.mediawiki.org/wiki/Manual:$wgSquidServers somewhat obscure
 setting] to control what source IPs are considered 'trusted proxies'.

 I don't think this is a good thing to hand off to the http layer. mod_rpaf
 obliterates the real source IP, so while you can see what the client's
 address is, it's no longer possible to tell which of your upstream servers
 a request came from. It's possible some web servers don't even support
 this, I know Apache & nginx do but unsure about IIS.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9235#comment:28>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software