#362

Product support

Get help in the plugin support forum.

Categories

  • Security

TrustedProxies is a OctoberCMS plugin to configure which headers to trust when handling requests. Tiis is useful when your site is behind a load balancer that terminates the SSL connection (for example Heroku or some AWS ELB configurations).

You can specify which header items to trust for the following items:

  • forwarded for
  • client IP
  • client host
  • client protocol
  • client port

Installation

Install this plugin.

Usage

  1. Open your October back-end administration area and open Settings > Trusted Proxies.
  2. Enter the header items that you want to trust. See the plugin Documentation for detail on how to configure for common environments.
  3. Click Save

Contributors

Garret Fick

Usage on Heroku

If you are deploying your application on Heroku, set the trusted headers as described on the Heroku headers documentation.

Trusted Proxies Setting Value
Proxies to Trust *
Trust Forwarded Header X-Forwarded-For
Trust Client Protocol Header X-Forwarded-Proto
Trust Client Forwarded Port X-Forwarded-Port
1.0.0

First version of trustedproxies

Mar 30, 2017