[Bug]: real-ip-header in the configmap seems not to work

[sov-msaeed]

Version

3.7.0

What Kubernetes platforms are you running on?

EKS Amazon

Steps to reproduce

Hi,

I have a setup in AWS using CloudFront --> AWS NLB --> kubernetes-ingress

The problem I am facing is the real_ip or the remote_addr is set to cloudfront IP not the enduser IP. in the Logs I can see the correct user IP in the X-Forwarded-For header so I tried to set real-ip-header in kubernetes-ingress configmap to X-Forwarded-For but still the remote_addr shows CloudFront IP address.

Cloudfront is also sending a header called CloudFront-Viewer-Address which seems to be passed correctly, I know that when I logged the value in the header which shows the real-user-ip. then i tried to set real-ip-header to this cloudfront heade, also didn't work

I am not sure what I am missing here. hopefully you can advise what could be the problem.

Thanks a lot in advance !

[github-actions]

Hi @sov-msaeed thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

[sov-msaeed]

I fixed the issue by setting set_real_ip_from 0.0.0.0/0

it seems that the default is to check the NLB private IP which has the X-Forwarded-For equals to cloudfront IP.