The Number of Trusted Hops
Summary
The Number of Trusted Hops setting reverse proxies in front of Pomerium. This affects x-forwarded-proto header and x-envoy-external-address header, which reports trusted client address. See the Envoy docs for more detail.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Usage |
|---|---|---|---|
xff_num_trusted_hops | XFF_NUM_TRUSTED_HOPS | uint32 | optional |
xff_num_trusted_hops is a bootstrap configuration setting and is not configurable in the Console.
Kubernetes does not support xff_num_trusted_hops
Examples
xff_num_trusted_hops: 2
XFF_NUM_TRUSTED_HOPS=2