Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 1362 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NginX Proxy Manager behind XG

Regex

Hello.

Scenerio: [XGHOME]------->[Docker_Revproxy]-----[SynologyNAS]

Is it possible to pass origin client IP to reverse proxy? Because Revproxy can see only gateway of Sophos XG.

Request on rev proxy look like this:

[13/Dec/2022:13:11:20 +0000] - 200 200 - POST https domain.example.com "/webapi/query.cgi" [Client 10.192.168.1] [Length 78369] [Gzip -] [Sent-to 10.192.168.2] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "httpsdomain.example.com/"



This thread was automatically locked due to age.
Parents
  • 0

    Are you going to use WAF on SFOS as well? Because this looks like double reverse proxy scenario. Maybe not the best way. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    im using both. Slight smile\

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

  • 0 in reply to Regex

    I don't recommend you to use both of them, either use WAF or Nginx.

    If you're still going to use both of them, you try to look if Nginx-Proxy-Manager have the "ngx_http_realip_module", if it does you can use the  "real_ip_header" to acquire the actual IPv4 address from the HTTP headers.

    You can find more information about this on the Nginx Docs.

    If a post solves your question use the 'Verify Answer' button.

    XG 115w Rev.3 8GB RAM v19.5 MR1 @ Home.

Reply
  • 0 in reply to Regex

    I don't recommend you to use both of them, either use WAF or Nginx.

    If you're still going to use both of them, you try to look if Nginx-Proxy-Manager have the "ngx_http_realip_module", if it does you can use the  "real_ip_header" to acquire the actual IPv4 address from the HTTP headers.

    You can find more information about this on the Nginx Docs.

    If a post solves your question use the 'Verify Answer' button.

    XG 115w Rev.3 8GB RAM v19.5 MR1 @ Home.

Children
Unfiltered HTML