Mercurial > hg > nginx-site

comparison xml/en/docs/http/ngx_http_geo_module.xml @ 518:65750bdde8fb

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Documented recent changes.
author Ruslan Ermilov <ru@nginx.com>
date Tue, 15 May 2012 14:57:21 +0000
parents 68d9e5f2ea81
children a8daad8e83bb
comparison
equal deleted inserted replaced
517:dba57bb42fec 518:65750bdde8fb
53 then the “<literal>255.255.255.255</literal>” address is used. 53 then the “<literal>255.255.255.255</literal>” address is used.
54 </para> 54 </para>
55 55
56 <para> 56 <para>
57 Addresses are specified as CIDR or ranges (0.7.23). 57 Addresses are specified as CIDR or ranges (0.7.23).
58 There are also five special parameters: 58 The following special parameters are also supported:
59 <list type="tag"> 59 <list type="tag">
60 60
61 <tag-name><literal>delete</literal></tag-name> 61 <tag-name><literal>delete</literal></tag-name>
62 <tag-desc> 62 <tag-desc>
63 deletes the specified network (0.7.23). 63 deletes the specified network (0.7.23).
77 There can be several inclusions. 77 There can be several inclusions.
78 </tag-desc> 78 </tag-desc>
79 79
80 <tag-name><literal>proxy</literal></tag-name> 80 <tag-name><literal>proxy</literal></tag-name>
81 <tag-desc> 81 <tag-desc>
82 sets the addresses of proxy servers (0.8.7, 0.7.63). 82 defines trusted addresses (0.8.7, 0.7.63).
83 When a request comes from one of the proxy servers, 83 When a request comes from a trusted address,
84 an address from the <header>X-Forwarded-For</header> request 84 an address from the <header>X-Forwarded-For</header> request
85 header field will be used instead. 85 header field will be used instead.
86 In contrast to the regular addresses, proxy server addresses are 86 In contrast to the regular addresses, trusted addresses are
87 checked sequentially. 87 checked sequentially.
88 <note>
89 IPv6 addresses are supported starting from version 1.3.0.
90 </note>
91 </tag-desc>
92
93 <tag-name><literal>proxy_recursive</literal></tag-name>
94 <tag-desc>
95 enables recursive address search (1.3.0).
96 If recursive search is disabled then instead of an original client
97 address that matches one of the trusted addresses, the last
98 address sent in <header>X-Forwarded-For</header> will be used.
99 If recursive search is enabled then instead an original client
100 address that matches one of the trusted addresses, the last
101 non-trusted address sent in <header>X-Forwarded-For</header> will be used.
88 </tag-desc> 102 </tag-desc>
89 103
90 <tag-name><literal>ranges</literal></tag-name> 104 <tag-name><literal>ranges</literal></tag-name>
91 <tag-desc> 105 <tag-desc>
92 indicates that addresses are specified as ranges (0.7.23). 106 indicates that addresses are specified as ranges (0.7.23).
103 geo $country { 117 geo $country {
104 default ZZ; 118 default ZZ;
105 include conf/geo.conf; 119 include conf/geo.conf;
106 delete 127.0.0.0/16; 120 delete 127.0.0.0/16;
107 proxy 192.168.100.0/24; 121 proxy 192.168.100.0/24;
122 proxy 2001:0db8::/32;
108 123
109 127.0.0.0/24 US; 124 127.0.0.0/24 US;
110 127.0.0.1/32 RU; 125 127.0.0.1/32 RU;
111 10.1.0.0/16 RU; 126 10.1.0.0/16 RU;
112 192.168.1.0/24 UK; 127 192.168.1.0/24 UK;