Rate-limit limited behind proxy #27

Closed
opened 2026-05-24 23:52:17 +00:00 by cf7 · 0 comments
Owner

As of now, uvicorn would ignore all proxy information from nginx and the ratelimit would be shared voer all users as there is no other IP.

Fix in app to ask for x-forwarded-for or x-real-ip header and env variable if a proxy is being trusted.

As of now, uvicorn would ignore all proxy information from nginx and the ratelimit would be shared voer all users as there is no other IP. Fix in app to ask for `x-forwarded-for` or `x-real-ip` header and env variable if a proxy is being trusted.
cf7 added the
Kind/Bug
Kind/Security
labels 2026-05-24 23:52:17 +00:00
cf7 closed this issue 2026-05-25 10:21:27 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: cf7/aukpad#27
No description provided.