php-docker-template icon indicating copy to clipboard operation
php-docker-template copied to clipboard

Look into using nginx realip module for better logging

Open stevenjm opened this issue 7 years ago • 0 comments

http://nginx.org/en/docs/http/ngx_http_realip_module.html

The nginx realip module allows you to specify a trusted list of proxies to parse X-Forwarded-For headers from so that the actual client IP address gets logged instead of the ingress controller's IP address. This is made a little complicated by the fact that the ingress controllers just have IP addresses on the pod network as for any other pod, and we don't necessarily want to treat everything running in Kubernetes as if it were a proxy, but it might be worth looking into at some stage.

stevenjm avatar Aug 31 '18 14:08 stevenjm