[PR #1510] Extract peer real IP from Load Balancer when possible #3139

Open
opened 2025-11-20 08:05:04 -05:00 by saavagebueno · 0 comments
Owner

Original Pull Request: https://github.com/netbirdio/netbird/pull/1510

State: closed
Merged: Yes


Otherwise, get it from the GRPC peer address.

This PR extends management config with a new TrustedHTTPProxies option that accepts a list of network prefixes ex: "192.168.1.1/32", "10.0.0.0/16" that is used for evaluation of client real ip according to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For#selecting_an_ip_address

Describe your changes

Checklist

  • Is it a bug fix
  • Is a typo/documentation fix
  • Is a feature enhancement
  • It is a refactor
  • Created tests that fail without the change (if possible)
  • Extended the README / documentation, if necessary
**Original Pull Request:** https://github.com/netbirdio/netbird/pull/1510 **State:** closed **Merged:** Yes --- Otherwise, get it from the GRPC peer address. This PR extends management config with a new `TrustedHTTPProxies` option that accepts a list of network prefixes ex: `"192.168.1.1/32", "10.0.0.0/16"` that is used for evaluation of client real ip according to https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For#selecting_an_ip_address ## Describe your changes ## Issue ticket number and link ### Checklist - [ ] Is it a bug fix - [ ] Is a typo/documentation fix - [x] Is a feature enhancement - [ ] It is a refactor - [ ] Created tests that fail without the change (if possible) - [ ] Extended the README / documentation, if necessary
saavagebueno added the pull-request label 2025-11-20 08:05:04 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#3139