http: removing the default trusted address list (#36643)

Risk Level: high
Testing: adapted tests previously
Docs Changes: yes
Release Notes: yes

---------

Signed-off-by: Alyssa Wilk <alyssar@chromium.org>

Mirrored from https://github.com/envoyproxy/envoy @ 87ac1d2a5a69dfda86156003a2ecddd8cac500e0
main
update-envoy[bot] 4 weeks ago
parent ffcb55de31
commit 53a525a403
  1. 2
      envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto

@ -691,7 +691,7 @@ message HttpConnectionManager {
// information about internal/external addresses.
//
// .. warning::
// In the next release, no IP addresses will be considered trusted. If you have tooling such as probes
// As of Envoy 1.33.0 no IP addresses will be considered trusted. If you have tooling such as probes
// on your private network which need to be treated as trusted (e.g. changing arbitrary x-envoy headers)
// you will have to manually include those addresses or CIDR ranges like:
//

Loading…
Cancel
Save