umputun / reproxy

81%

master: 81%

LAST BUILD ON BRANCH trusted-proxy

branch: trusted-proxy

CHANGE BRANCH

x

Reset

• trusted-proxy
• add-X-Forwarded-URL
• assets-cache
• assets404
• basic-auth
• chore/go-1.26-and-deps
• ci/workflow-hardening
• dependabot/docker/goreleaser/goreleaser-v1.25.1
• dependabot/github_actions/github-actions-updates-a2e7793ad6
• dependabot/go_modules/go-modules-updates-07f3a6036d
• dependabot/go_modules/go-modules-updates-1d93b033d5
• dependabot/go_modules/go-modules-updates-89f9fe7d2d
• dependabot/go_modules/go-modules-updates-a76f434722
• dependabot/go_modules/go-modules-updates-b6eb7de9c2
• dependabot/go_modules/go-modules-updates-b9a07c6e8d
• dependabot/go_modules/go-modules-updates-c2f73b432e
• dependabot/go_modules/go-modules-updates-c741a0ad90
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• dependabot/go_modules/golang.org/x/net-0.23.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/text-0.3.8
• dependabot/npm_and_yarn/site/browserslist-4.16.6
• dependabot/npm_and_yarn/site/follow-redirects-1.14.7
• dependabot/npm_and_yarn/site/follow-redirects-1.14.8
• dependabot/npm_and_yarn/site/markdown-it-12.3.2
• dependabot/npm_and_yarn/site/minimist-1.2.6
• dependabot/npm_and_yarn/site/nanoid-3.2.0
• dependabot/npm_and_yarn/site/normalize-url-4.5.1
• dependabot/npm_and_yarn/site/shell-quote-1.7.3
• dependabot/npm_and_yarn/site/ws-7.4.6
• docker-maker
• docker-multi-routes
• dockerhub
• drop-default-conflict
• dynamic-server
• feat/low-cardinality-metrics
• feature/add-dns-providers
• feature/upstream-connection-limits
• fix-404-gzip-encoding
• fix-dbl-headers
• fix-header-parsing
• fix/bound-mappers-cache
• fix/bump-x-net
• fix/catchall-default-route-dedup
• fix/ci-security-hardening
• fix/critical-major-audit-findings
• fix/dns-propagation-timeout
• fix/docker-api-version-240
• fix/dynamic-ssl-fqdns-207
• fix/encoded-path-match
• fix/file-provider-debounce
• fix/health-test-timing
• fix/metrics-flusher-sse-streaming
• fix/roundrobin-shrinking-n
• fqdn-async-discovery
• gzip-exclude
• header-comma
• lb-selector
• libdns-update
• limit-ips
• listen
• maint/deps-update-nov2025
• master
• max-request-url
• mgmt
• mime-cache
• multi-match
• multi-static
• nice-error
• paskal/dependabot-disable-updates
• paskal/dependabot-security-updates
• paskal/docker-user-improvements
• paskal/dockerfile-improvements
• per-route-auth
• per-route-timeout-throttle
• plugin-headers
• redirect
• refs/tags/v0.1.0
• refs/tags/v0.10.0
• refs/tags/v0.11.0
• refs/tags/v0.2.0
• refs/tags/v0.3.0
• refs/tags/v0.4.0
• refs/tags/v0.5.0
• refs/tags/v0.5.1
• refs/tags/v0.6.0
• refs/tags/v0.6.1
• refs/tags/v0.6.2
• refs/tags/v0.7.0
• refs/tags/v0.8.0
• refs/tags/v0.9.0
• refs/tags/v1.0.0
• refs/tags/v1.1.0
• refs/tags/v1.1.1
• refs/tags/v1.2.0
• refs/tags/v1.2.1
• refs/tags/v1.2.2
• refs/tags/v1.2.3
• refs/tags/v1.3.0
• refs/tags/v1.4.0
• refs/tags/v1.5.0
• refs/tags/v1.6.0
• refs/tags/v1.7.1
• refs/tags/v1.7.2
• release-automation
• release-pipeline
• rpc
• server-simple-pattern
• spa
• throttle

Build # 40616648760

Build Type

Pull #267

github

Committed by umputun

Commit Message

docs: note forwarding headers set by plugins follow the trusted-proxy rules

X-Real-IP, X-Forwarded-For, Forwarded and X-Forwarded-Host/Proto/Port that a
plugin sets through HeadersIn are written into the incoming request, so they
are handled like client-sent ones. A plugin's X-Forwarded-Proto reaches the
backend only when the request came from a trusted proxy.

Pull Request Pull Request #267: fix: take X-Real-IP from the TCP peer, add --trusted-proxy

Coverage Stats

151 of 156 new or added lines in 6 files covered. (96.79%)

2891 of 3566 relevant lines covered (81.07%)

87.31 hits per line