From 4bb77473a152981cb90e8bc3275c72261a8ed1d5 Mon Sep 17 00:00:00 2001 From: Yakov Olkhovskiy <99031427+yakov-olkhovskiy@users.noreply.github.com> Date: Wed, 10 Apr 2024 19:08:45 -0400 Subject: [PATCH 1/2] add auth_use_forwarded_address --- .../server-configuration-parameters/settings.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/en/operations/server-configuration-parameters/settings.md b/docs/en/operations/server-configuration-parameters/settings.md index f87b6144deb8..33864482afe2 100644 --- a/docs/en/operations/server-configuration-parameters/settings.md +++ b/docs/en/operations/server-configuration-parameters/settings.md @@ -42,6 +42,19 @@ Type: UInt32 Default: 1 +## auth_use_forwarded_address + +Use originating address for authentification for clients connected through proxy. + +:::note +This setting should be used with extra caution since forwarded address can be easely spoofed - server accepting such authentication should not be accessed directly but rather exclusively through a trusted proxy. +::: + +Type: Bool + +Default: 0 + + ## background_buffer_flush_schedule_pool_size The maximum number of threads that will be used for performing flush operations for Buffer-engine tables in the background. From e2b7e171dad911796c7c21f11f1e71404fe98568 Mon Sep 17 00:00:00 2001 From: Yakov Olkhovskiy <99031427+yakov-olkhovskiy@users.noreply.github.com> Date: Wed, 10 Apr 2024 19:19:51 -0400 Subject: [PATCH 2/2] fix --- .../en/operations/server-configuration-parameters/settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/operations/server-configuration-parameters/settings.md b/docs/en/operations/server-configuration-parameters/settings.md index 33864482afe2..eb93d9cda5bb 100644 --- a/docs/en/operations/server-configuration-parameters/settings.md +++ b/docs/en/operations/server-configuration-parameters/settings.md @@ -44,10 +44,10 @@ Default: 1 ## auth_use_forwarded_address -Use originating address for authentification for clients connected through proxy. +Use originating address for authentication for clients connected through proxy. :::note -This setting should be used with extra caution since forwarded address can be easely spoofed - server accepting such authentication should not be accessed directly but rather exclusively through a trusted proxy. +This setting should be used with extra caution since forwarded address can be easily spoofed - server accepting such authentication should not be accessed directly but rather exclusively through a trusted proxy. ::: Type: Bool