Extension:TrustedXFF

The TrustedXFF extension maintains a list of trusted hosts in a file in a PHP array format. For details, see XFF project.

The file can be generated using the generate.php maintenance script.

Limitations

 * The extension will not allow large ranges, such as an /18 (or wider). The list will compile with warnings and the large range will be ignored.  This is an issue for services like CloudFlare that occupy multiple, huge chunks of IPv4 space.


 * The extension will not accept  ranges in trusted-hosts.txt. There are a few such ranges hard-coded into includes/TrustedXFF.php, but adding more addresses requires editing the code directly.


 * Useless where   is unavailable. As of 2019, many wikis force HTTPS for all things.  Any manipulation with headers on a proxy compromises HTTPs server authentication unless the proxy possesses an SSL certificate authoritative for the wiki in question.  It makes the extension far less useful nowadays than it was originally envisaged.