nginx: Option to not use incoming X-Forwarded headers

[Dirbaio]

Currently, if you deploy nginx-ingress-controller facing directly to the internet (via NodePort/HostPort or a LoadBalancer service), end users can spoof their IP by sending an X-Forwarded-For header, which will be forwarded to the backend services. Same for the other X-Forwarded headers.

By looking at the template, there seems no config option to disable this.

It would be great to have one - in the current state the nginx ingress is insecure by default when exposing it directly to the internet.

[aledbf]

Closing. This option is being added here #1222

[albertvaka]

#1222 doesn't fix the bug, unless you use Proxy Protocol. Please reopen @aledbf