Source: libapache2-mod-rpaf Maintainer: Debian QA Group Section: httpd Priority: optional Standards-Version: 4.7.0 Build-Depends: apache2-dev (>= 2.4.2-1~), debhelper-compat (= 13), dh-apache2, Rules-Requires-Root: no Vcs-Git: https://salsa.debian.org/debian/libapache2-mod-rpaf.git Vcs-Browser: https://salsa.debian.org/debian/libapache2-mod-rpaf Homepage: http://www.stderr.net/apache/rpaf/ Package: libapache2-mod-rpaf Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends}, Description: module for Apache2 which takes the last IP from the 'X-Forwarded-For' header rpaf is short for reverse proxy add forward. . rpaf is for backend Apache servers what mod_proxy_add_forward is for frontend Apache servers. It does exactly the opposite of mod_proxy_add_forward written by Ask Bjorn Hansen. . It changes the remote address of the client visible to other Apache modules when two conditions are satisfied. First condition is that the remote client is actually a proxy that is defined in httpd.conf. Secondly if there is an incoming X-Forwarded-For header and the proxy is in its list of known proxies it takes the last IP from the incoming X-Forwarded-For header and changes the remote address of the client in the request structure.