trusted-proxy
Syntax
trusted-proxy IP;
Hierarchy Level
[edit services user-identification forward-header-lookup]
Description
Use trusted proxy addresses to limit the X-Forwarded-For (XFF) header lookup scope. A trusted proxy includes IPv4 or IPv6 addresses where the XFF header remains valid. If the device detects that a session’s source IP belongs to the trusted proxy set, the device checks the XFF header; otherwise, the device uses the source IP address.
To reduce overhead, configure the closest proxy server’s IP address as a trusted proxy.
Options
| IP |
IP addresses with max 20 entries |
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 25.4R1.