DoodleScheduling / traefik-cf-client-ip / 40348992827

100%

push

github

feat: set X-Forwarded-For and X-Real-Ip from CF-Connecting-IP

Traefik middleware plugin that overwrites X-Forwarded-For and X-Real-Ip
with the visitor IP Cloudflare sends in CF-Connecting-IP. Behind the NLB
with externalTrafficPolicy: Cluster, Traefik only sees the node's
internal IP, so backends such as Keycloak lose the visitor IP.

- Only a single, valid IPv4/IPv6 value is used; anything else passes
  through unchanged and no empty values are written.
- Optional trustedIPs restricts which TCP peers may set the header and
  removes it from any other peer.
- Unit tests (100% coverage, race), the same tests in Yaegi, and an
  integration test against a real Traefik binary.

88 of 88 new or added lines in 1 file covered. (100.0%)

88 of 88 relevant lines covered (100.0%)

92.47 hits per line