getClientIp() * always gets the originating client IP, no matter * how many proxies that client's request has * subsequently passed through. */ 'proxies' => env('APP_TRUSTED_PROXIES') !== null ? explode(',', env('APP_TRUSTED_PROXIES')) : '*', /* * To trust one or more specific proxies that connect * directly to your server, use an array of IP addresses: */ // 'proxies' => ['192.168.1.1'], /* * Or, to trust all proxies that connect * directly to your server, use a "*" */ // 'proxies' => '*', /* * Trusted forwarded-header list intentionally not configured here. * * The runtime defaults trust X-Forwarded-For, X-Forwarded-Host, * X-Forwarded-Port, X-Forwarded-Proto, and the AWS ELB set. This is * the right answer for essentially every reverse-proxy deployment, * so there is nothing to change under normal circumstances. * * Older versions of this file shipped a commented-out example * referencing Illuminate\Http\Request::HEADER_X_FORWARDED_ALL. That * constant was removed from Symfony (see symfony/symfony#38928) and * uncommenting the example produced a fatal "Undefined constant" * error. It has been removed to avoid the foot-gun. See #6852. * * @link https://symfony.com/doc/current/deployment/proxies.html */ ];