diff --git a/deployment/proxies.rst b/deployment/proxies.rst
index 95d1ddfd0c9..9b6821e3f79 100644
--- a/deployment/proxies.rst
+++ b/deployment/proxies.rst
@@ -33,13 +33,13 @@ and what headers your reverse proxy uses to send information:
# ...
// the IP address (or range) of your proxy
trusted_proxies: '192.0.0.1,10.0.0.0/8'
- // trust *all* "X-Forwarded-*" headers (the ! prefix means to not trust those headers)
- trusted_headers: ['x-forwarded-all', '!x-forwarded-host', '!x-forwarded-prefix']
+ // trust *all* "X-Forwarded-*" headers
+ trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']
// or, if your proxy instead uses the "Forwarded" header
- trusted_headers: ['forwarded', '!x-forwarded-host', '!x-forwarded-prefix']
+ trusted_headers: ['forwarded']
// or, if you're using a wellknown proxy
- trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_AWS_ELB, '!x-forwarded-host', '!x-forwarded-prefix']
- trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_TRAEFIK, '!x-forwarded-host', '!x-forwarded-prefix']
+ trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_AWS_ELB]
+ trusted_headers: [!php/const Symfony\\Component\\HttpFoundation\\Request::HEADER_X_FORWARDED_TRAEFIK]
.. code-block:: xml
@@ -57,15 +57,14 @@ and what headers your reverse proxy uses to send information:
192.0.0.1,10.0.0.0/8
-
- x-forwarded-all
- !x-forwarded-host
- !x-forwarded-prefix
+
+ x-forwarded-for
+ x-forwarded-host
+ x-forwarded-proto
+ x-forwarded-port
forwarded
- !x-forwarded-host
- !x-forwarded-prefix
@@ -78,12 +77,12 @@ and what headers your reverse proxy uses to send information:
// the IP address (or range) of your proxy
'trusted_proxies' => '192.0.0.1,10.0.0.0/8',
// trust *all* "X-Forwarded-*" headers (the ! prefix means to not trust those headers)
- 'trusted_headers' => ['x-forwarded-all', '!x-forwarded-host', '!x-forwarded-prefix'],
+ 'trusted_headers' => ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port'],
// or, if your proxy instead uses the "Forwarded" header
- 'trusted_headers' => ['forwarded', '!x-forwarded-host', '!x-forwarded-prefix'],
+ 'trusted_headers' => ['forwarded'],
// or, if you're using a wellknown proxy
- 'trusted_headers' => [Request::HEADER_X_FORWARDED_AWS_ELB, '!x-forwarded-host', '!x-forwarded-prefix'],
- 'trusted_headers' => [Request::HEADER_X_FORWARDED_TRAEFIK, '!x-forwarded-host', '!x-forwarded-prefix'],
+ 'trusted_headers' => [Request::HEADER_X_FORWARDED_AWS_ELB],
+ 'trusted_headers' => [Request::HEADER_X_FORWARDED_TRAEFIK],
]);
.. deprecated:: 5.2