What is the difference between HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR?

by

Neither of these headers are officially standardised. Therefore:

  1. What is the difference between HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR? – it is impossible to say. Different proxies may implement these, or may not. The implementations may vary from one proxy to the next, and they may not. A lack of a standard breeds question marks.
  2. Why would one have different values than the other? – See point 1. However, from a purely practical point of view, the only reason I can see for these having different values is if more than one proxy was involved – the X-Forwarded-For: header might then contain a complete track of the forwarding chain, whereas the Client-IP: header would contain the actual client IP. This is pure speculation, however.
  3. Where can I find resources on the exact definition of these headers. – You can’t. See point 1.

There does seem to be some kind of de-facto standard regarding the X-Forwarded-For: header, but given that there is no RFC that defines it this cannot be relied upon see comment below.

As a side note, the Client-IP: header should by convention be X-Client-IP: since it is a ‘user-defined’ header.

More Related Contents:

  1. How can I use an http proxy with node.js http.Client?
  2. HTTP Range header
  3. How can I get the clients IP address from HTTP headers?
  4. What is the function of the “Vary: Accept” HTTP header?
  5. Save cookies between two curl requests
  6. Custom HTTP Authorization Header
  7. Get client’s real IP address on Heroku
  8. How does a HTTP Proxy utilize the HTTP protocol? a Proxy RFC?
  9. HTTPS Proxy Server in node.js
  10. HTTP Headers: Controlling Cache and History Mechanism
  11. How to log out user from web site using BASIC authentication?
  12. http to https through .htaccess
  13. Why am I suddenly getting a “Blocked loading mixed active content” issue in Firefox?
  14. Dealing with HTTP content in HTTPS pages
  15. What are all the possible values for HTTP “Content-Type” header?
  16. Correct way to delete cookies server-side
  17. Why both no-cache and no-store should be used in HTTP response?
  18. Returning http 200 OK with error within response body
  19. URL without “http|https”
  20. Basic static file server in NodeJS
  21. Are Callable Cloud Functions better than HTTP functions?
  22. What’s the correct encoding of HTTP get request strings?
  23. Orchestrating microservices
  24. Angular2 OPTIONS method sent when asking for http.GET [duplicate]
  25. HTTP headers encoding/decoding in Java
  26. What is the highest number of threads that is reasonable to simultaneously run in Jmeter?
  27. Basic HTTP authentication in Node.JS?
  28. HTTP Cache Control max-age, must-revalidate
  29. How do I make an HTTP request from Rust?
  30. HTTP GET Request, ASP – I’m lost!

Leave a Comment