fideloper/TrustedProxy
TrustedProxy
TrustedProxy is an HTTP proxy trust manager and Laravel middleware designed to validate request headers and manage session consistency for applications operating behind load balancers or reverse proxies. It serves as a request environment handler that ensures secure client IP detection and accurate URL generation.
The system prevents header spoofing by allowing the definition of trusted IP addresses and ranges. It validates that incoming requests originate from authorized intermediaries before modifying the request object to reflect the original client IP and protocol.
The project covers traffic management and security through middleware-based header parsing and dynamic host resolution. It integrates into the Laravel service provider lifecycle to automate request environment configuration and maintain consistent application session handling.
Features
- Proxy Trust Management - Provides proxy trust management to identify authorized load balancers and reverse proxies for secure client IP detection.
- IP-Based Request Matchers - Implements IP-based request matching to validate that incoming traffic originates from trusted network ranges.
- Request Handlers - Acts as a request handler that dynamically updates the host and protocol based on proxy headers.
- Load Balancers - Integrates with load balancers to ensure correct client IP detection and URL generation.
- Dynamic Host Resolution - Provides dynamic host and protocol resolution based on proxy headers to ensure accurate URL generation.
- Reverse Proxy Header Identification - Implements reverse proxy header identification to prevent spoofing and ensure secure request relaying.
- Proxy Traffic Management - Manages proxy traffic to ensure correct URL generation and session consistency behind load balancers.
- Request Interception Middleware - Uses request interception middleware to extract and validate proxy headers before they reach the application core.
- Request Modifiers - Provides request modifiers that alter the request object to reflect the original client IP and protocol.
- Proxy Management - Handles client requests and sessions specifically for Laravel applications deployed behind load balancers or reverse proxies.
- Proxy Middleware - Provides Laravel middleware for validating request headers and managing session consistency behind load balancers.
- Reverse Proxy Integrations - Provides a reverse proxy integration tool to ensure secure client IP detection and session handling.
- Session & Cookie Handlers - Ensures consistent user session handling and secure cookie management when requests pass through multiple network layers.
- Trust Verification - Performs trust verification by comparing source IP addresses against authorized network ranges.
- Service Providers - Integrates proxy logic into the application's bootstrapping sequence via service providers.
- Service Provider Integrations - Binds custom proxy handling logic into the Laravel service provider lifecycle to automate environment configuration.
- General Utilities - Handles sessions behind load balancers.
