Getting the Client's Real IP Address

The real user's IP address has to be properly extracted from a request if your Wallarm node sits behind a load balancer or a CDN. For the Wallarm NGINX module to process the origin IP correctly, you have to add the set_real_ip_from and real_ip_header NGINX directives in your NGINX configuration file. This will ensure the connecting IP is being properly derived from an X-Forwarded-For header.

Configuration example:

set_real_ip_from 171.0.0.0/8;
set_real_ip_from 101.101.0.0/16;
real_ip_header X-Forwarded-For;

More info: ngx_http_realip_module.

results matching ""

    No results matching ""