# Reverse Proxy

Source: https://docs.sliplane.io/services/reverse-proxy

Find gateway IP ranges and configure trusted proxies for your HTTP service.

Public HTTP services receive requests through Sliplane's reverse proxy. Use the gateway IP ranges below to configure your framework's trusted-proxy settings.

## Gateway IP Ranges

| Region               | Location    | Gateway IPv4 CIDR |
| -------------------- | ----------- | ----------------- |
| Germany              | Falkenstein | `10.1.0.0/24`     |
| US East              | Ashburn     | `10.4.0.0/24`     |
| Finland              | Helsinki    | `10.6.0.0/24`     |
| Singapore            | Singapore   | `10.7.0.0/24`     |
| US West              | Hillsboro   | `10.8.0.0/24`     |
| Germany Confidential | Falkenstein | `10.10.0.0/24`    |

These ranges are reserved for Sliplane gateways. Customer containers use separate ranges. Trust the range for your server's region, rather than all private IP addresses.

## Client IP Address

The proxy sets `X-Forwarded-For` to a single address: the IP address of the client that connected to it. It replaces any client-supplied value. IPv6 clients retain their IPv6 address.

If you place a CDN or another proxy in front of Sliplane, this address is that proxy's address.

Only trust this header when the connection comes from a trusted proxy. Services on your own server can connect directly to your app, so do not assume that every connection passed through the gateway.