Enum TrustAllChainIpSelection 

pub enum TrustAllChainIpSelection {
    Leftmost,
    Rightmost,
    SkipRightmostHops(usize),
}

Which hop of a chain header becomes the client IP in trust-all proxy mode.

There are no CIDRs to compare against in this mode, so one hop is picked by position instead of by scanning the chain. If that hop carries no usable IP address, the search stops and the socket peer IP becomes the answer.

Variants

Leftmost

Use the first hop of the chain.

This is the value people usually mean by “the X-Forwarded-For address”, but it is also the part a client can write freely. It is safe only when the proxy in front of the service overwrites or clears the header instead of appending to it.

Rightmost

Use the last hop of the chain.

A proxy that appends writes the address it received the request from, so the last hop is the one value in the chain that a client cannot choose. This is the default, and it is correct when exactly one proxy appends to the header.

SkipRightmostHops(usize)

Skip a number of hops from the right, then use the next one.

Use this when a fixed number of proxies append to the header, such as a CDN in front of a load balancer. SkipRightmostHops(0) is the same as Self::Rightmost.

Every hop counts, including one that carries no usable IP address. When the chain is shorter than this needs, the search stops and the socket peer IP becomes the answer.

Trait Implementations

impl Clone for TrustAllChainIpSelection

fn clone(&self) -> TrustAllChainIpSelection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustAllChainIpSelection

impl Debug for TrustAllChainIpSelection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TrustAllChainIpSelection

impl Hash for TrustAllChainIpSelection

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustAllChainIpSelection

fn eq(&self, other: &TrustAllChainIpSelection) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TrustAllChainIpSelection