XFF headers and trust
XFF trust is disabled by default but can be enabled.
In this example, we use the default configuration but enable the trust of XFF header.
json
{
"policy": {
"name": "xff_enabled",
"template": { "name": "POLICY_TEMPLATE_NGINX_BASE" },
"applicationLanguage": "utf-8",
"enforcementMode": "blocking",
"general": {
"customXffHeaders": [],
"trustXff": true
}
}
}In this example, we configure a policy with a custom-defined XFF header.
json
{
"policy": {
"name": "xff_custom_headers",
"template": { "name": "POLICY_TEMPLATE_NGINX_BASE" },
"applicationLanguage": "utf-8",
"enforcementMode": "blocking",
"general": {
"customXffHeaders": [
"xff"
],
"trustXff": true
}
}
}