Skip to content

Commit e20aacc

Browse files
PapyDanonejaviereguiluz
authored andcommitted
Add note on Trusted Proxies config when app is behind multiple proxies
1 parent ce3ea9a commit e20aacc

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

deployment/proxies.rst

+6
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,12 @@ That's it! It's critical that you prevent traffic from all non-trusted sources.
7676
If you allow outside traffic, they could "spoof" their true IP address and
7777
other information.
7878

79+
.. caution::
80+
81+
In case you are also using `CloudFront`_ or another reverse proxy on top of your load balancer, calling ``$request->server->get('REMOTE_ADDR')`` as in the above example won't be enough, as it will only whitelist the node sitting directly above your application (in this case your load balancer). You need to make sure you also append the IP addresses or ranges of any additional proxy to the array of trusted proxies.
82+
83+
In the case of `CloudFront`_, you can find the list of IP ranges `at this address <https://ip-ranges.amazonaws.com/ip-ranges.json>`_.
84+
7985
Custom Headers When Using a Reverse Proxy
8086
-----------------------------------------
8187

0 commit comments

Comments
 (0)