add trusted header to discovery address

jmcalalang · Nov 11, 2023 · 8672f10 · 8672f10
1 parent ccd7892
commit 8672f10
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/distributed-cloud/terraform/configuration/http-lb-discovery-calalang-net.tf b/distributed-cloud/terraform/configuration/http-lb-discovery-calalang-net.tf
@@ -58,12 +58,15 @@ resource "volterra_http_loadbalancer" "http-lb-discovery-calalang-net" {
     disable_learn_from_redirect_traffic = true
   }
   disable_ip_reputation = true
-  no_challenge          = true
-  user_id_client_ip     = true
+  enable_trust_client_ip_headers {
+    client_ip_headers = [X-Forwarded-For]
+  }
+  no_challenge      = true
+  user_id_client_ip = true
 
   // Lifecycle because F5XC adds tags/lables/annotations that terraform doesnt know about
   lifecycle {
     ignore_changes = [labels]
   }
 
-}
+}