diff options
Diffstat (limited to 'help/AccessTracker_p.md')
| -rw-r--r-- | help/AccessTracker_p.md | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/help/AccessTracker_p.md b/help/AccessTracker_p.md index 8b3158593..09684e4bc 100644 --- a/help/AccessTracker_p.md +++ b/help/AccessTracker_p.md @@ -62,6 +62,14 @@ GET or POST /AccessTracker_p.html?host=...&page=... Expect observations: counts, logs, queues, timing, network rows, thread states, or resource values. Monitoring does not fix the issue by itself; it points to the next page or setting to change. +When YaCy is reached through a reverse proxy, Access Tracker uses `X-Real-IP` +only when the proxy's direct socket IP matches one of the comma-separated regular +expressions in `server.reverseProxy.trusted`. Loopback proxies are trusted by +default. Authentication and access-control decisions continue to use the direct +socket IP, not the forwarded address. The reverse proxy must overwrite +`X-Real-IP` with the client address; it must not pass a client-supplied value +unchanged. + ## Related Pages - `yacysearch.html` |