Wikia/app — pull request #278 by gpapilion (2012-12-20 06:11:01+00:00)
Title: No ip whitelist for XFF client returned directly from first varnish

I'm tired of managing Fastly's server ips, and I think it relies on too much information from them. This keeps happening, and this should be a quick solution to the issue.

Id like to add $wgClientIPHeader (currently set to X-1955fb8700b3b47cf7f3a98806ee1881 in my DevBoxSettings). This will take the first fastly client ip and use this as the source IP. Matching VCL will not chain ips, so there is no need to walk the chain.

since we would set this with a config variable, I don't really see any security implications, and if for some reason there is a failure we'll fall back to X-forwarded-for.

Please comment.