[PATCH] Improve X-Forwarded-For handling in realip

[Michael Shadle]

On Wed, Dec 1, 2010 at 7:23 PM, Omar Kilani <omar.kilani at gmail.com> wrote:

> The problem is that nginx doesn't do the "first IP in the header which
> is not trusted" part -- it always returns the last IP in the
> X-Forwarded-For header, no matter what.

we have an issue where our CDN gives us the reverse XFF header - we
really want the LAST ip, not the first one (or vice versa) and nginx
gives us the first one which doesn't help :(

making the realip behavior more configurable gets a big +1 from me.
not sure if this is as configurable as it could be though.