Hi Scott, > I have `option forwardfor header X-Real-IP` set for all my backends, but > for some (not all) requests, the header is not sent.
Seems you are in tunnel mode, where the forwardfor header will be set only in the first request of a HTTP session. Use "option http-server-close" or "option httpclose" to have full layer 7 visibility on subsequent requests also. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20httpclose http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#4-option%20http-server-close Lukas
