From 25570367b3d2ef46e440d70b1c99987465daa722 Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Sat, 16 Jan 2016 11:57:04 +0900 Subject: [PATCH] nghttpx: Document Forwarded related options --- src/shrpx.cc | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/src/shrpx.cc b/src/shrpx.cc index d58e7276..0484f910 100644 --- a/src/shrpx.cc +++ b/src/shrpx.cc @@ -1577,6 +1577,40 @@ HTTP: --strip-incoming-x-forwarded-for Strip X-Forwarded-For header field from inbound client requests. + --add-forwarded= + Append RFC 7239 Forwarded header field with parameters + specified in comma delimited list . The supported + parameters are "by", "for", "host", and "proto". By + default, the value of "by" and "for" parameters are + obfuscated string. See --forwarded-by and + --forwarded-for options respectively. Note that nghttpx + does not translate non-standard X-Forwarded-* header + fields into Forwarded header field, and vice versa. + --strip-incoming-forwarded + Strip Forwarded header field from inbound client + requests. + --forwarded-by=(obfuscated|ip|) + Specify the parameter value sent out with "by" parameter + of Forwarded header field. If "obfuscated" is given, + the string is randomly generated at startup. If "ip" is + given, the interface address of the connection, + including port number, is sent with "by" parameter. + User can also specify the static obfuscated string. The + limitation is that it must starts with "_", and only + consists of character set [A-Za-z0-9._-], as described + in RFC 7239. + Default: obfuscated + --forwarded-for=(obfuscated|ip|) + Specify the parameter value sent out with "for" + parameter of Forwarded header field. If "obfuscated" is + given, the string is randomly generated for each client + connection. If "ip" is given, the remote client address + of the connection, without port number, is sent with + "for" parameter. User can also specify the static + obfuscated string. The limitation is that it must + starts with "_", and only consists of character set + [A-Za-z0-9._-], as described in RFC 7239. + Default: obfuscated --no-via Don't append to Via header field. If Via header field is received, it is left unaltered. --no-location-rewrite