# Trust (reverse) proxy for client IP?

**URL:** <https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710>\
**Category:** Ignition\
**Created:** [April 17, 2021, 1:25pm UTC](https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710 "2021-04-17T13:25:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mcarritt1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mcarritt1/32/4262_2.png) [@mcarritt1](https://forum.inductiveautomation.com/u/mcarritt1)\
**Post date:** [April 17, 2021, 1:25pm UTC](https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710/1 "2021-04-17T13:25:34Z")

</div>

This isn’t really a big issue, just wanting to know if there is something I missed.

I’ve set up this reverse proxy ([https://nginxproxymanager.com/](https://nginxproxymanager.com/)) to secure my site, and things are working. But today I noticed while using system.perspective.getSessionInfo(), every clientAddress is the IP address of the proxy manager.

I’ve set up something similar before with other stuff, and I was able to set the application to “trust” the reverse proxy manager so that the application uses the client IP address reported by the proxy.

Is this possible? thanks!

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [April 17, 2021, 1:33pm UTC](https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710/2 "2021-04-17T13:33:38Z")

</div>

This is expected behavior right now.

We have an existing ticket to honor `X-Forwarded` or similar headers if they are set by the load balancer / proxy that will get done at the same time as reverse DNS lookups for IPs with Security Zones. Not sure how soon these are happening though.

---

<div class="post-metadata">

**Author:** ![mcarritt1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mcarritt1/32/4262_2.png) [@mcarritt1](https://forum.inductiveautomation.com/u/mcarritt1)\
**Post date:** [April 17, 2021, 1:38pm UTC](https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710/3 "2021-04-17T13:38:14Z")

</div>

ok cool, not something I need right this moment, but would be good for auto blocking ips or something.

thanks for the saturday reply 😉

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [April 17, 2021, 10:19pm UTC](https://forum.inductiveautomation.com/t/trust-reverse-proxy-for-client-ip/45710/4 "2021-04-17T22:19:08Z")

</div>

We neeeed this reverse DNS lookup. Currently I’m relying on the session Id to identify specific clients to give control access, as their ips are dynamically assigned. The session Id changes though as well (I havent worked out when yet 🤔)