Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Usage Milestone: Simplify Module simplify crossed 10,000 active installs. Usage Milestone: Views Reference Filter Module entityreference_filter crossed 10,000 active installs. Usage Milestone: Dropdown Language Module dropdown_language crossed 10,000 active installs. Usage Milestone: Paragraphs Browser Module paragraphs_browser crossed 10,000 active installs. Usage Milestone: OpenAPI Module openapi crossed 10,000 active installs. Usage Milestone: Decoupled Router Module decoupled_router crossed 10,000 active installs. Usage Milestone: Time Field for Drupal 8+ Module time_field crossed 10,000 active installs. Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

Trusted Proxy Headers Debug

199 sites No security coverage Drupal 8–10 · not 11
View on drupal.org

This module helps debug and configure trusted proxy headers, essential for accurately detecting client IPs on sites behind proxies. It provides a report detailing proxy settings and how they affect incoming requests, aiding in proper configuration.

This is a developer / utility module to help with configuring and debugging Trusted Proxy Headers.

Initially it has a very no-frills UI.

It produces a report which shows what Reverse / Trusted Proxy configuration has been found in settings, along with the Trusted Headers which Drupal passes through to Symfony's Request handling code, and some of the properties of the Request which Symfony/Drupal derived using the current settings.

This might help set up - for example - proper detection of Client IPs for sites running behind proxies.

See:

  • \Drupal\Core\StackMiddleware\ReverseProxyMiddleware::setSettingsOnRequest
  • \Symfony\Component\HttpFoundation\Request::setTrustedProxies

By default the report at admin/reports/status/trusted_proxy_headers_debug is only accessible to users with the 'administer site configuration' permission.

It's possible to override this restriction with the following setting:

D8/9(/10?):

$settings['trusted_proxy_headers_debug_free_access'] = TRUE;

D7:

$conf['trusted_proxy_headers_debug_free_access'] = TRUE;

For D7 you could alternatively set the variable using drush, e.g.:

$ drush vset trusted_proxy_headers_debug_free_access 1

Be careful doing so :)

This is a basic tool with lots of room for improvement.

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
2
Tracked since
Apr 2025
Latest release
7 months ago
Releases (12 mo)
1
Maintenance
Active

Releases

Version Type Core Release date
1.1.x-dev Dev 8–11 Jan 14, 2026
8.x-0.5 Stable 8–10 Apr 7, 2025