Struct TrustedProxyConfig 

pub struct TrustedProxyConfig {
    pub trusted_proxies: Vec<IpAddr>,
}

Opt-in trusted-proxy allowlist for the HTTP rate limiter.

By default, RateLimitMiddleware keys rate limiting on the real TCP peer address and never trusts X-Forwarded-For/X-Real-IP — an unauthenticated client could otherwise send a fresh spoofed value on every request to get a fresh rate-limit bucket, fully bypassing the limiter. Set this only for deployments that sit behind a known reverse proxy or load balancer whose peer address(es) are listed here; requests from any other peer always use the real peer address regardless of these headers.

Proxy contract

X-Forwarded-For is read right-to-left and takes precedence over X-Real-IP when both are present. The trusted proxy must append the address it saw the connection from to X-Forwarded-For rather than overwrite it (e.g. nginx’s $proxy_add_x_forwarded_for, or any proxy that merges into a single header line rather than emitting a new one). Proxies that instead emit <ip>:<port> or bracketed IPv6 entries are not supported by this simple allowlist — the walk fails closed on the first unparseable entry (falls back to X-Real-IP, then the peer address) rather than skipping it and guessing from what remains. Repeated X-Forwarded-For header lines are read and treated as one comma-joined list in line order, per RFC 9110.

Fields

trusted_proxies: Vec<IpAddr>

Peer addresses (the proxy’s own TCP source address) allowed to supply X-Forwarded-For/X-Real-IP.

Implementations

impl TrustedProxyConfig

pub fn new(trusted_proxies: Vec<IpAddr>) -> Self

Build a trusted-proxy config from an explicit allowlist of proxy addresses.

Trait Implementations

impl Clone for TrustedProxyConfig

fn clone(&self) -> TrustedProxyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustedProxyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustedProxyConfig

fn default() -> TrustedProxyConfig

Returns the “default value” for a type.