Problems getting users real ip to pod


#1

Hi all! I have a GKE cluster with Istio installed. I’m using the istio ingress as loadbalancer from outside, and sending the traffic to a simple nginx pod. But the nginx is getting the istio ingress ip, and not the real users ip.

This is the nginx configuration:
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Anybody know what the problem could be ?


#2

I got it working with adding externalTrafficPolicy: Local to the istio-ingressgateway service, and then in my nginx conf i added a header with $http_x_forwarded_for