Skip to content

Commit afb384c

Browse files
committed
minor #14798 [HttpFoundation] Mention that trusted proxies are not compatible with nginx realip (javiereguiluz)
This PR was merged into the 4.4 branch. Discussion ---------- [HttpFoundation] Mention that trusted proxies are not compatible with nginx realip Fixes #14718. Commits ------- f7f80af Mention that trusted proxies are not compatible with nginx realip
2 parents a061054 + f7f80af commit afb384c

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

deployment/proxies.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,11 @@ The Request object has several ``Request::HEADER_*`` constants that control exac
4848
*which* headers from your reverse proxy are trusted. The argument is a bit field,
4949
so you can also pass your own value (e.g. ``0b00110``).
5050

51+
.. caution::
52+
53+
The "trusted proxies" feature does not work as expected when using the
54+
`nginx realip module`_. Disable that module when serving Symfony applications.
55+
5156
But what if the IP of my Reverse Proxy Changes Constantly!
5257
----------------------------------------------------------
5358

@@ -118,3 +123,4 @@ In this case, you'll need to set the header ``X-Forwarded-Proto`` with the value
118123
.. _`security groups`: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-groups.html
119124
.. _`CloudFront`: https://en.wikipedia.org/wiki/Amazon_CloudFront
120125
.. _`CloudFront IP ranges`: https://ip-ranges.amazonaws.com/ip-ranges.json
126+
.. _`nginx realip module`: http://nginx.org/en/docs/http/ngx_http_realip_module.html

0 commit comments

Comments
 (0)