Title: Support reverse proxy
Last modified: August 19, 2017

---

# Support reverse proxy

 *  [narcisgarcia](https://wordpress.org/support/users/narcisgarcia/)
 * (@narcisgarcia)
 * [8 years, 9 months ago](https://wordpress.org/support/topic/support-reverse-proxy-2/)
 * Please, use HTTP_X_FORWARDED_FOR when available instead of REMOTE_ADDR.
    When
   a reverse proxy/balancer is in effect, server variable REMOTE_ADDR contains IP
   of the local proxy/balancer and HTTP_X_FORWARDED_FOR contains IP of the visitor.
 * Otherwise, your plugin with only REMOTE_ADDR is reporting that all visitors come
   from same IP address on that common scenarios.

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [mvandemar](https://wordpress.org/support/users/mvandemar/)
 * (@mvandemar)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/support-reverse-proxy-2/#post-9595352)
 * HTTP_X_FORWARDED_FOR is an HTTP header, so it can be easily spoofed. It doesn’t
   really make sense, to me anyway, to use it in a security plugin that is designed
   to block brute force attempts based on the ip address. However, you are not the
   first person to request this so I will most likely add in the option, with a 
   warning on it reducing the effectiveness of the plugin.
 * -Michael
 *  Thread Starter [narcisgarcia](https://wordpress.org/support/users/narcisgarcia/)
 * (@narcisgarcia)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/support-reverse-proxy-2/#post-9595377)
 * Oh thanks; this can make me (and others) to try again this plugin.
 *  Thread Starter [narcisgarcia](https://wordpress.org/support/users/narcisgarcia/)
 * (@narcisgarcia)
 * [8 years, 2 months ago](https://wordpress.org/support/topic/support-reverse-proxy-2/#post-10119612)
 * A safer way to use HTTP_X_FORWARDED_FOR is to allow administrator to configure
   what IP in REMOTE_ADDR indicates that traffic is coming from a reverse proxy;
   in this case, use HTTP_X_FORWARDED_FOR because proxy forces the right value to
   HTTP header.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Support reverse proxy’ is closed to new replies.

 * ![](https://ps.w.org/login-lockdown/assets/icon-256x256.png?rev=2901919)
 * [Login Lockdown & Protection](https://wordpress.org/plugins/login-lockdown/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/login-lockdown/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/login-lockdown/)
 * [Active Topics](https://wordpress.org/support/plugin/login-lockdown/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/login-lockdown/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/login-lockdown/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [narcisgarcia](https://wordpress.org/support/users/narcisgarcia/)
 * Last activity: [8 years, 2 months ago](https://wordpress.org/support/topic/support-reverse-proxy-2/#post-10119612)
 * Status: not resolved