summaryrefslogtreecommitdiff
path: root/caddytest/integration
diff options
context:
space:
mode:
authorFrancis Lavoie <lavofr@gmail.com>2022-03-06 18:51:55 -0500
committerGitHub <noreply@github.com>2022-03-06 18:51:55 -0500
commitc50094fc9d34099efd705700e6d2efa2fa065412 (patch)
treeffa916e82f197d0d067d7cbc01c1a4f4e703b55f /caddytest/integration
parentd058dee11d7cfcf0b711f0378d10c9e5cabc8982 (diff)
reverseproxy: Implement trusted proxies for `X-Forwarded-*` headers (#4507)
Diffstat (limited to 'caddytest/integration')
-rw-r--r--caddytest/integration/caddyfile_adapt/reverse_proxy_trusted_proxies.txt56
1 files changed, 56 insertions, 0 deletions
diff --git a/caddytest/integration/caddyfile_adapt/reverse_proxy_trusted_proxies.txt b/caddytest/integration/caddyfile_adapt/reverse_proxy_trusted_proxies.txt
new file mode 100644
index 0000000..5e11284
--- /dev/null
+++ b/caddytest/integration/caddyfile_adapt/reverse_proxy_trusted_proxies.txt
@@ -0,0 +1,56 @@
+:8884
+
+reverse_proxy 127.0.0.1:65535 {
+ trusted_proxies 127.0.0.1
+}
+
+reverse_proxy 127.0.0.1:65535 {
+ trusted_proxies private_ranges
+}
+----------
+{
+ "apps": {
+ "http": {
+ "servers": {
+ "srv0": {
+ "listen": [
+ ":8884"
+ ],
+ "routes": [
+ {
+ "handle": [
+ {
+ "handler": "reverse_proxy",
+ "trusted_proxies": [
+ "127.0.0.1"
+ ],
+ "upstreams": [
+ {
+ "dial": "127.0.0.1:65535"
+ }
+ ]
+ },
+ {
+ "handler": "reverse_proxy",
+ "trusted_proxies": [
+ "192.168.0.0/16",
+ "172.16.0.0/12",
+ "10.0.0.0/8",
+ "127.0.0.1/8",
+ "fd00::/8",
+ "::1"
+ ],
+ "upstreams": [
+ {
+ "dial": "127.0.0.1:65535"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ }
+ }
+ }
+ }
+}