Handle reverse proxies with mapped IP addresses
What does this MR do and why?
Change our trusted IP config to:
- Trust all private IP ranges by default. (Setting any trusted proxy overrides this)
- Also trust proxies if they show with their IPv6 mapped IP address (
::ffff:1.1.1.1instead of1.1.1.1).
References
Relates gitlab-com/gl-infra/delivery#21318 (closed)
Relates gitlab-org/charts/gitlab#2778 (closed)
Relates gitlab-org/charts/gitlab#6084
Screenshots or screen recordings
| Before | After |
|---|---|
How to set up and validate locally
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Clemens Beck