X-Forwarded-For HTTP Header
X-Forwarded-For HTTP header can be used to indicate the IP addresses through which a request has flowed on its way from the end user to an upstream service.
By default, when Pomerium receives a request it will append the IP address of its direct downstream peer to this header value, before proxying the request to the upstream service.
However, if you set the
skip_xff_append option to true, Pomerium will not modify any incoming
X-Forwarded-For HTTP header. Pomerium will instead pass this incoming header to the upstream service unchanged.
See the Envoy docs for more information about the
How to configure
|Config file keys
Configure X-Forward-For HTTP Headers with the toggle button in the Console. The button has three states:
- Unset ("-") uses the value in your configuration file
- Checkmark sets
- Empty sets
Kubernetes does not support