Real IP's not being passed by ssl proxy

[jacqueshenning]

Hi

I have a separate nginx ssl proxy setup infront of API Umbrella.
how do I enable API Umbrella to receive the real IP of the client connecting to the proxy?
I have:
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

Also using: (for testing purposes)
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Host $remote_addr;

set in the ssl proxy config...

But where can I add:
set_real_ip_from 10.0.0.0/8;
real_ip_header X-Real-IP;
real_ip_recursive on;

On the API Umbrella host?

Kind Regards

[jacqueshenning]

Can anyone assist here?
Surely there must be information on where I can add to the nginx config?
i.e.
/etc/api-umbrella/api-umbrella.yml
nginx:
set_real_ip_from 10.0.0.0/8;
real_ip_header X-Real-IP;
real_ip_recursive on;

Any advise would be appreciated.

[jacqueshenning]

I narrowed it down.
I need to be able to add to Nginx config:
set_real_ip_from YOUR_REVERSE_PROXY_IP_HERE;
real_ip_header X-Forwarded-For;

On a Regular LEMP stack the config would file to edit would be:
sudo nano -w /etc/nginx/nginx.conf

API Umbrella is recording the Proxy IP and not the connecting clients real IP's.

Could one of the dev's please assist with this or point me in the right direction.

[jacqueshenning]

Figured it out.

Changed:
sudo nano -w /opt/api-umbrella/embedded/apps/core/current/templates/etc/nginx/realip.conf.mustache

Original config:

{{#router.trusted_proxies}}
set_real_ip_from {{.}};
{{/router.trusted_proxies}}
real_ip_header X-Forwarded-For;
real_ip_recursive on;

Change to:

{{#router.trusted_proxies}}
set_real_ip_from 127.0.01;
set_real_ip_from YOUR_REVERSE_PROXY_IP_HERE;
{{/router.trusted_proxies}}
real_ip_header X-Forwarded-For;

Restart API Umbrella:
sudo /etc/init.d/api-umbrella restart

You can add load balancers, SSL, Reverse Proxies and WAF like this.
just add a new line:
set_real_ip_from YOUR_REVERSE_PROXY_IP_HERE;