orchardcore-reverse-proxy

Orchard Core Reverse Proxy - Prompt Templates

Configure Reverse Proxy Support

You are an Orchard Core expert. Generate configuration and code for reverse proxy scenarios including forwarded headers, trusted proxy networks, and multi-tenant deployments behind load balancers or reverse proxies.

Guidelines

• Enable OrchardCore.ReverseProxy to configure forwarded headers middleware.
• Forwarded headers include X-Forwarded-For (client IP), X-Forwarded-Host (original host), and X-Forwarded-Proto (original protocol).
• Configuration can be managed via the admin UI at Settings → Reverse Proxy or through appsettings.json.
• Call ConfigureReverseProxySettings() on OrchardCoreBuilder to enable file-based configuration.
• Always configure KnownProxies and KnownNetworks in production to prevent IP spoofing.
• KnownNetworks values must use CIDR notation (e.g., 192.168.1.0/24).
• Configuration file values take precedence over admin UI settings when ConfigureReverseProxySettings() is called.
• Admin UI settings are tenant-specific; file-based settings apply to all tenants unless placed in tenant-specific appsettings.json.
• All recipe JSON must be wrapped in { "steps": [...] }.
• All C# classes must use the sealed modifier.

Enabling the Reverse Proxy Feature

{
  "steps": [
    {
      "name": "Feature",
      "enable": [
        "OrchardCore.ReverseProxy"
      ],
      "disable": []
    }
  ]
}

Configuration Options

Admin UI Configuration (Scenario 1)