Re: empty x-forwarded-for

On Mon, Mar 31, 2008 at 07:05:38PM +0200, Florian Iragne wrote:
> Krzysztof Oledzki a écrit :
> >
> >
> >On Mon, 31 Mar 2008, florian iragne wrote:
> >
> >>Hello everybody,
> >Hello,
> >
> >>In my access log (nginx web servers behind haproxy), i've plenty of
> >>records without any ip and i wonder how it is possible.
> >
> >TCP/HTTP checks from haproxy?
> no, no, real requests to existing files. I've add some kind of attack
> (about 100 000 requests per day for a partial download on the same
> file), but usually, i got about 100/300 requests per day without any ip
> in the forwarded_for field.

Have you set "option httpclose" ? Otherwise, those would be keep-alive sessions. But judging from the very low rate, I doubt it.

It is also possible that some clients send pipelined requests and that nginx accepts them despite the "Connection: close" header. I must say that this case would be a bit strange because the clients should not send pipelined requests to non-keepalive servers, but that might be a reason for this.

Willy Received on 2008/03/31 22:50