Talk:X-Forwarded-For

message: The article starts off with an example of a `Forwarded` (not `X-Forwarded-For`) header. It's fine to say that the `Forwarded` header is meant to be the replacement for `X-Forwarded-For` but the example should be in a separate article about that header, or in a separate section lower on the page, or omitted entirely.  — Preceding unsigned comment added by 65.157.26.58 (talk) 18:08, 17 August 2016 (UTC)
replies: text: Agreed. I went ahead and moved it to the already-existing Alternatives section. Orenwolf (talk) 18:45, 17 August 2016 (UTC)
thread_title:  Wrong example 

message: The "Format" section of this article current says the following:
: The general format of the header is:
:: X-Forwarded-For: client1, proxy1, proxy2
: where the value is a comma+space separated list of IP addresses, the left-most being the farthest downstream client, and each successive proxy that passed the request adding the IP address where it received the request from. In this example, the request passed proxy1, proxy2, and proxy3 (proxy3 appears as the client).
But there is no "proxy3" in the example. The numbering implies that the example should read:
:: X-Forwarded-For: client1, proxy1, proxy2, proxy3
but then the text would seem to be saying that XFF would report the client IP at both the front and back of the chain, which makes no sense. Is this suppose to be saying "proxy3 being the IP that appears to be the client" to some component in this situation, like the end-user application or some network report? If so, the prose should say this, and the example should include the "proxy3". As it is, it makes no sense to someone not versed in XFF, who is the intended audience of the article. (Why would someone who knows XFF need the information?) I'd fix this myself, but I don't know whether this is a technical error or actual confusion of the editors. ~ Jeff Q (talk) 01:06, 25 October 2007 (UTC)
thread_title:  Proxy3? 

message: In the Proxy servers and caching engines section, there is an advertisement for a specific product for IIS to log IPs from X-Forwarded-For headers. There are other alternatives and there is no reason this specific product be listed here. I will remove it.
For example there is this one which is community-supported and free:
http://devcentral.f5.com/downloads/codeshare/F5XForwardedFor.zip
216.94.210.146 (talk) 14:40, 2 October 2009 (UTC)
thread_title:  Advertisement in article 

message: HTTP_X_FORWARDED_FOR seems to be a common incarnation of this, but I can't seem to find any origins. It would be interesting to see which proxies use this over "X-FORWARDED-FOR" as documented in this article. --Hm2k (talk) 08:17, 26 April 2011 (UTC)
replies: text: HTTP_X_FORWARDED_FOR is what CGI and related interfaces rename the X-Forwarded-For header to the CGI environment. BCoates (talk) 22:07, 26 September 2011 (UTC)
thread_title:  HTTP_X_FORWARDED_FOR 

message: Hello fellow Wikipedians,
I have just modified  on X-Forwarded-For. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:
*Added archive http://web.archive.org/web/20080329064413/http://varnish.projects.linpro.no:80/wiki/FAQ to http://varnish.projects.linpro.no/wiki/FAQ#HowcanIlogtheclientIPaddressonthebackend
*Added  tag to http://support.citrix.com/article/CTX121834
When you have finished reviewing my changes, please set the checked parameter below to true or failed to let others know (documentation at ).
Cheers.—InternetArchiveBot (Report bug) 13:19, 21 July 2016 (UTC)
thread_title:  External links modified 

message: Can anyone find a source that actually shows that the order is 'client, proxy1, proxy2...'? The link referenced there (http://www.squid-cache.org/Doc/config/follow_x_forwarded_for/) does not explicitly state this, and I have found other references that indicate this is not always the case. Amazon's documentation, for instance, lists the exact opposite (https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/x-forwarded-headers.html)  Childofsoong (talk) 22:13, 3 October 2017 (UTC)
thread_title:  Example in reverse order? 

message: I am looking into Trusted X-Forwarded-For as mentioned here Does anyone know anything about this? Are forged X-Forwarded-For headers a common thing? --Guy Macon (talk) 12:35, 16 June 2021 (UTC)
thread_title:  Trusted X-Forwarded-For? 

message: I removed the "Proxy servers and caching engines" section. What little info it contained exists elsewhere in the article. It also included a product mention and it seems like it's not the first time it was a target (see topic above: "Advertisement in article"). I don't see a reason in keeping it around. Teddyrupskin (talk) 00:08, 23 February 2023 (UTC)
thread_title:  Removed Proxy servers and caching engines