The evaluation of the X-Forwarded-For IPs will go from the first to the last.

[corentin59]

Hello,

I read :

If Traefik is behind a load balancer, it won't be able to get the Real IP from the external client by checking the remote IP address.
This plugin solves this issue by overwriting the X-Real-Ip with an IP from the X-Forwarded-For header. The real IP will be the first one that is not included in any of the CIDRs passed as the ExcludedNets parameter. The evaluation of the X-Forwarded-For IPs will go from the last to the first one.

I'am behind cloufdlare and HAProxy before Traefik

[VISITOR] ---> [CLOUDFLARE] ---> [HAProxy] ---> [Traefik]

And my X-Forwared-For is:
VISITOR_IP, CLOUDFLARE_IP, HA_PROXY_IP.

In this case the visitor IP is the first X-Forwarded-For IP and not the last. Can you add an option to invert that ?