Enum ForwardedHeader 

pub enum ForwardedHeader {
    XForwardedFor,
    Forwarded,
}

Which single forwarding header a trusted proxy is expected to write.

RFC 7239 Forwarded and the legacy X-Forwarded-For are alternatives, not complements — a real reverse proxy (nginx, an AWS ALB, HAProxy’s defaults) is configured to emit one of the two, never both meaningfully. Trusting whichever one happens to be present on the wire is exactly the bypass this type exists to close: an attacker who knows a deployment trusts X-Forwarded-For can simply add a Forwarded header instead — until this field existed, that header was honored unconditionally over X-Forwarded-For with no hop-count or trusted-peer check ever applied to it (#415 remediation). Naming the header explicitly, defaulting to the header real proxies actually send, closes that gap: the rarer header only takes effect when a deployment opts into it because its own proxy is actually configured to emit it.

Variants

XForwardedFor

The legacy header, still what the overwhelming majority of real deployments emit (nginx’s proxy_set_header X-Forwarded-For, AWS ALB, HAProxy’s defaults). The safe default.

Forwarded

RFC 7239 Forwarded. Select this only when the deployment’s own trusted proxy is actually configured to emit Forwarded instead of X-Forwarded-For — most are not.

Trait Implementations

impl Clone for ForwardedHeader

fn clone(&self) -> ForwardedHeader

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ForwardedHeader

impl Debug for ForwardedHeader

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ForwardedHeader

fn default() -> ForwardedHeader

Returns the “default value” for a type.

impl Eq for ForwardedHeader

impl PartialEq for ForwardedHeader

fn eq(&self, other: &ForwardedHeader) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ForwardedHeader