Skip to content

Commit 6c6323d

Browse files
committed
Merge branch '5.1' into 5.2
* 5.1: Mention that trusted proxies are not compatible with nginx realip
2 parents a7e4664 + 9fca26f commit 6c6323d

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

deployment/proxies.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,11 @@ so you can also pass your own value (e.g. ``0b00110``).
109109
Symfony versions you needed to use the ``Request::setTrustedProxies()``
110110
method in the ``public/index.php`` file.
111111

112+
.. caution::
113+
114+
The "trusted proxies" feature does not work as expected when using the
115+
`nginx realip module`_. Disable that module when serving Symfony applications.
116+
112117
But what if the IP of my Reverse Proxy Changes Constantly!
113118
----------------------------------------------------------
114119

@@ -184,3 +189,4 @@ handling the request::
184189
.. _`CloudFront`: https://en.wikipedia.org/wiki/Amazon_CloudFront
185190
.. _`CloudFront IP ranges`: https://ip-ranges.amazonaws.com/ip-ranges.json
186191
.. _`HTTP Host header attacks`: https://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html
192+
.. _`nginx realip module`: http://nginx.org/en/docs/http/ngx_http_realip_module.html

0 commit comments

Comments
 (0)