Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: add option for setting X-Real-IP header when using DOH upstream #434

Open
Arbel-arad opened this issue Feb 2, 2025 · 0 comments

Comments

@Arbel-arad
Copy link

the use case is:

  1. external clients connecting to proxy over DOT
  2. proxy connects to upstream using DOH, with X-Real-IP header
  3. the upstream server can respond correctly depending on source address.

without having the address, the upstream i use (technitium-DNS) can't tell where the clients are since all it can see is the proxy address.
it needs to know the source for proper blocking, and only certain clients are allowed to request some DNS zones and recursion.

this is what the technitium instructions say:

When using a reverse proxy with the DNS-over-HTTP service, you need to add X-Real-IP header to the proxy request with the IP address of the client to allow the DNS server to know the real IP address of the client originating the request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant