Help wanted - Reverse-Proxy (own ip) with real ip forwarded

[MagicTrevor]

Hi guys,

I was getting along with a rootless reverse-proxy (nginx-proxy-manager) just fine, but ran into a scenario where I need to have the real client ip forwarded in (and the proxy ip different). I have tried to run this rootful via macvlan but have run into the issue where it cannot talk to the host and vice-versa.

What is the recommendation to setup this scenario?

[Luap99]

How do you run the container? If you run with --network slirp4netns:port_handler=slirp4netns it will preserve the source ip, also see https://docs.podman.io/en/stable/markdown/podman-create.1.html#network-mode-net. You cannot use this option with a named network, see #8193.

If the container is run as root you should always see the correct source ip by default, you do not need macvlan.

[MagicTrevor]

Does that work if that is set on a pod vs the container specifically?

[Luap99]

You should set it for the pod, if you set it for a container in a pod the container will create its own network namespace and not use the one from the pod.