Struct ClientIpConfig 

pub struct ClientIpConfig {
    pub trusted_proxies: Vec<IpNet>,
    pub num_trusted_hops: usize,
    pub trusted_header: Option<HeaderName>,
}

Available on crate feature tower only.

Configuration for deriving the rate-limit key from the client IP.

See the module docs for the resolution algorithm.

The default is secure by default: no trusted proxies means the forwarded header is ignored and every client is keyed by its socket address.

Fields

trusted_proxies: Vec<IpNet>

Peers whose forwarded header we may believe. EMPTY DEFAULT = forwarded header ignored entirely (secure by default).

num_trusted_hops: usize

Right-to-left walk: skip this many entries (our proxy chain), the next entry leftward is the client. NEVER trust left-to-right. Default 1.

trusted_header: Option<HeaderName>

Header override for platforms with dedicated headers (CF-Connecting-IP, True-Client-IP). Same trust rules apply. Default None = X-Forwarded-For.

Trait Implementations

impl Clone for ClientIpConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientIpConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientIpConfig

fn default() -> Self

Returns the “default value” for a type.