{"action":"created","issue":{"url":"https://api.github.com/repos/mailgun/vulcand/issues/183","labels_url":"https://api.github.com/repos/mailgun/vulcand/issues/183/labels{/name}","comments_url":"https://api.github.com/repos/mailgun/vulcand/issues/183/comments","events_url":"https://api.github.com/repos/mailgun/vulcand/issues/183/events","html_url":"https://github.com/mailgun/vulcand/issues/183","id":60548774,"number":183,"title":"Allow vulcand to set x-forwarded-for","user":{"login":"stith","id":66289,"avatar_url":"https://avatars.githubusercontent.com/u/66289?v=3","gravatar_id":"","url":"https://api.github.com/users/stith","html_url":"https://github.com/stith","followers_url":"https://api.github.com/users/stith/followers","following_url":"https://api.github.com/users/stith/following{/other_user}","gists_url":"https://api.github.com/users/stith/gists{/gist_id}","starred_url":"https://api.github.com/users/stith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stith/subscriptions","organizations_url":"https://api.github.com/users/stith/orgs","repos_url":"https://api.github.com/users/stith/repos","events_url":"https://api.github.com/users/stith/events{/privacy}","received_events_url":"https://api.github.com/users/stith/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-10T18:44:10Z","updated_at":"2015-03-12T04:15:10Z","closed_at":null,"body":"My request flow right now is vulcand in a docker container, which forwards to a Heroku buildpak, also running in a docker container. It seems that vulcand is setting the x-forwarded-for to \"172.17.42.1\" for all of my requests, rather than setting it to the actual source IP of the request. Enabling \"TrustForwardHeader\" won't do the trick here, since it seems like that'd allow users to forge their IPs by sending their own x-forwarded-for."},"comment":{"url":"https://api.github.com/repos/mailgun/vulcand/issues/comments/78421287","html_url":"https://github.com/mailgun/vulcand/issues/183#issuecomment-78421287","issue_url":"https://api.github.com/repos/mailgun/vulcand/issues/183","id":78421287,"user":{"login":"porjo","id":1296987,"avatar_url":"https://avatars.githubusercontent.com/u/1296987?v=3","gravatar_id":"","url":"https://api.github.com/users/porjo","html_url":"https://github.com/porjo","followers_url":"https://api.github.com/users/porjo/followers","following_url":"https://api.github.com/users/porjo/following{/other_user}","gists_url":"https://api.github.com/users/porjo/gists{/gist_id}","starred_url":"https://api.github.com/users/porjo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/porjo/subscriptions","organizations_url":"https://api.github.com/users/porjo/orgs","repos_url":"https://api.github.com/users/porjo/repos","events_url":"https://api.github.com/users/porjo/events{/privacy}","received_events_url":"https://api.github.com/users/porjo/received_events","type":"User","site_admin":false},"created_at":"2015-03-12T04:15:10Z","updated_at":"2015-03-12T04:15:10Z","body":"What IP address should your HTTP client be coming from? If you're running your web browser on the same host as Docker, then the client IP may legitimately be 172.17.42.1 "}}