fix(multiplayer): resolve client IP behind proxies

2026-09-10 16:04:04 +00:00 · 2026-09-02 19:08:34 +01:00
parent d59e0017f7
commit 6ebd6e59c1
7 changed files with 166 additions and 8 deletions
@@ -52,6 +52,10 @@ spec:
            - --rate-limit=120
            - --rate-limit-window=1m
            - --rate-limit-max-keys=10000
+            # Ingress NetworkPolicy admits only the labelled edge gateway.
+            # Cover common private/CGNAT/ULA pod networks; overlays should
+            # narrow this to their actual gateway CIDR where available.
+            - --trusted-proxy-cidrs=10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16,fc00::/7
          ports:
            - name: http
              containerPort: 8080