logging.ignored_x_forwarded_for_ranges

Background

Defines all IP ranges in the X-Forwarded-For header to be ignored by Funnelback when choosing the IP address to Log. Funnelback will prefer to use the last IP in the X-Forwarded-For header. If Funnelback can not get an IP address from this header it will use the connecting IP.

The IP ranges are specified in CIDR notation.

Setting the key

Set this configuration key in the search package or data source configuration.

Use the configuration key editor to add or edit the logging.ignored_x_forwarded_for_ranges key, and set the value. This can be set to any valid List<String> value.

Default value

logging.ignored_x_forwarded_for_ranges=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16

Examples

A request goes through two reverse proxies, the first having an IP of 1.2.3.4. The X-Forwarded-For header that Funnelback sees will contain:

client IP, 1.2.3.4

We would like to log the client’s IP rather than the IP of the proxy. Our configuration should be set to:

logging.ignored_x_forwarded_for_ranges=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,1.2.3.4/32