Skip to content

Commit

Permalink
Document wildcard support for trusted_proxy
Browse files Browse the repository at this point in the history
  • Loading branch information
digitalresistor committed Feb 4, 2024
1 parent 5934be0 commit e0123ee
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions docs/arguments.rst
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,15 @@ trusted_proxy

For unix sockets, set this value to ``localhost`` instead of an IP address.

The value ``*`` (wildcard) may be used to signify that all remote peers are
to be trusted.

.. warning::
Using the wildcard is a security issue if Waitress is receiving
connections from untrusted locations as well as trusted locations. Make
sure that waitress is adequately deployed behind an additional layer of
security, such as a firewall only allowing traffic from known proxies.

Default: ``None``

trusted_proxy_count
Expand Down

0 comments on commit e0123ee

Please sign in to comment.