[GH-ISSUE #3533] https2http gives incorrect X-Forwarded-For

gitea-mirror commented

2026-05-05 13:49:27 -06:00

Owner

Originally created by @kylianpl on GitHub (Jul 17, 2023).
Original GitHub issue: https://github.com/fatedier/frp/issues/3533

Bug Description

When using the https2http plugin, the server will send his own ip in the X-Forwarded-For
example:
frp server is 1.2.3.4
frp client is 5.6.7.8
the user is 9.9.9.9
if the user 9.9.9.9 connects to 1.2.3.4, the frp client will recieve X-Forwarded-For: 1.2.3.4
the frp client should recieve X-Forwarded-For: 9.9.9.9

frpc Version

0.51.0

frps Version

0.51.0

System Architecture

linux/amd64

Configurations

[https2http]
type = https
custom_domains = example.com
plugin = https2http
plugin_local_addr = 127.0.0.1:80
plugin_crt_path = /path/to/fullchain.pem
plugin_key_path = /path/to/privkey.pem
plugin_header_X-From-Where = frp

Logs

No response

Steps to reproduce

No response

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @kylianpl on GitHub (Jul 17, 2023). Original GitHub issue: https://github.com/fatedier/frp/issues/3533 ### Bug Description When using the https2http plugin, the server will send his own ip in the X-Forwarded-For example: frp server is 1.2.3.4 frp client is 5.6.7.8 the user is 9.9.9.9 if the user 9.9.9.9 connects to 1.2.3.4, the frp client will recieve `X-Forwarded-For: 1.2.3.4` the frp client should recieve `X-Forwarded-For: 9.9.9.9` ### frpc Version 0.51.0 ### frps Version 0.51.0 ### System Architecture linux/amd64 ### Configurations ``` [https2http] type = https custom_domains = example.com plugin = https2http plugin_local_addr = 127.0.0.1:80 plugin_crt_path = /path/to/fullchain.pem plugin_key_path = /path/to/privkey.pem plugin_header_X-From-Where = frp ``` ### Logs _No response_ ### Steps to reproduce _No response_ ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [ ] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [X] Client Plugin - [X] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror

2026-05-05 13:49:27 -06:00

closed this issue
added the
todo
label

gitea-mirror commented

2026-05-05 13:49:30 -06:00

Author

Owner

@fatedier commented on GitHub (Jul 18, 2023):

https://github.com/fatedier/frp#http-x-forwarded-for

It is currently only valid for HTTP.

@fatedier commented on GitHub (Jul 18, 2023): https://github.com/fatedier/frp#http-x-forwarded-for It is currently only valid for HTTP.

gitea-mirror commented

2026-05-05 13:49:31 -06:00

Author

Owner

@fatedier commented on GitHub (Jul 18, 2023):

However, perhaps we can achieve it by enabling proxy protocol support in the https2http plugin.

@fatedier commented on GitHub (Jul 18, 2023): However, perhaps we can achieve it by enabling proxy protocol support in the https2http plugin.

gitea-mirror commented

2026-05-05 13:49:32 -06:00

Author

Owner

@ac-sc commented on GitHub (Aug 11, 2023):

https使用X-Forwarded-For也不支持对么，以后能支持吗？

@ac-sc commented on GitHub (Aug 11, 2023): https使用X-Forwarded-For也不支持对么，以后能支持吗？

gitea-mirror commented

2026-05-05 13:49:32 -06:00

Author

Owner

@ckpw commented on GitHub (Sep 25, 2023):