Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 Update released for Drupal core (11.3.7)! drupal 11.2.11 Update released for Drupal core (11.2.11)! drupal 10.6.7 Update released for Drupal core (10.6.7)! drupal 10.5.9 Update released for Drupal core (10.5.9)! cms 2.1.1 Update released for Drupal core (2.1.1)! drupal 11.3.6 Update released for Drupal core (11.3.6)! drupal 10.6.6 Update released for Drupal core (10.6.6)! cms 2.1.0 Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 Minor update available for module ai (1.3.3). ai 1.2.14 Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 Minor update available for module klaro (3.0.10). klaro 3.0.9 Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 Minor update available for module geofield_map (11.1.8).

trusted_proxy_headers_debug

199 sites No security coverage
View on drupal.org

This is a developer / utility module to help with configuring and debugging Trusted Proxy Headers.

Initially it has a very no-frills UI.

It produces a report which shows what Reverse / Trusted Proxy configuration has been found in settings, along with the Trusted Headers which Drupal passes through to Symfony's Request handling code, and some of the properties of the Request which Symfony/Drupal derived using the current settings.

This might help set up - for example - proper detection of Client IPs for sites running behind proxies.

See:

  • \Drupal\Core\StackMiddleware\ReverseProxyMiddleware::setSettingsOnRequest
  • \Symfony\Component\HttpFoundation\Request::setTrustedProxies

By default the report at admin/reports/status/trusted_proxy_headers_debug is only accessible to users with the 'administer site configuration' permission.

It's possible to override this restriction with the following setting:

D8/9(/10?):

$settings['trusted_proxy_headers_debug_free_access'] = TRUE;

D7:

$conf['trusted_proxy_headers_debug_free_access'] = TRUE;

For D7 you could alternatively set the variable using drush, e.g.:

$ drush vset trusted_proxy_headers_debug_free_access 1

Be careful doing so :)

This is a basic tool with lots of room for improvement.

Activity

Total releases
2
First release
Apr 2025
Latest release
3 months ago
Release cadence
282 days
Stability
50% stable

Releases

Version Type Release date
1.1.x-dev Dev Jan 14, 2026
8.x-0.5 Stable Apr 7, 2025