Menu

Topic-icon How to customize which IP is used for tracking

  • chizuoka
  • chizuoka's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
More
7 months 2 weeks ago #7450 by chizuoka
Our machines are behind a load balancer. This causes the IP being detected by Apache as the IP of the load balancer not the client.

The client IP is in the X-Forwarded-For header instead of the usual IP header. Refer to
developer.mozilla.org/en-US/docs/Web/HTT...ders/X-Forwarded-For

How then can security check use this IP instead because alot of false alarms are being triggered as the IPs of the load balancer is giving an inaccurate number of hits/sec which securitycheckpro uses for rate control.

Please Log in or Create an account to join the conversation.

More
7 months 2 weeks ago #7460 by Jose
Hi chizuoka,

To avoid cases like this just go to Global configuration -> Tuning and change the value of "Avoid proxies" option. Anyway the next version of Securitycheck Pro will improve the way to get the real IP when you use proxies and/or CDN.

Regards,
Jose

Please Log in or Create an account to join the conversation.

Time to create page: 0.327 seconds
Powered by Kunena Forum

Login or Sign In