Hey,
I think there is a typo in relayd.conf(5).
X-Forwarded-By should be the server $SERVER_ADDR instead of the client
$REMOTE_ADDR.
X-Forwarded-For is the client (correct).
diff --git a/usr.sbin/relayd/relayd.conf.5 b/usr.sbin/relayd/relayd.conf.5
index 8bed93efa1f..5f3eb0b2f9a 100644
--- a/usr.sbin/relayd/relayd.conf.5
+++ b/usr.sbin/relayd/relayd.conf.5
@@ -1470,7 +1470,7 @@ http protocol "https" {
match header append "X-Forwarded-For" \e
value "$REMOTE_ADDR"
match header append "X-Forwarded-By" \e
- value "$REMOTE_ADDR:$SERVER_PORT"
+ value "$SERVER_ADDR:$SERVER_PORT"
match header set "Keep-Alive" value "$TIMEOUT"
match query hash "sessid"
--
Kind regards,
Hiltjo