Submitted by mig5 on Mon, 14/05/2012 - 11:52
I had a situation whereby I had to protect a site with HTTP auth, but exclude a certain IP address or two from having to use HTTP auth (e.g loadtesting).
The problem was, the site was also behind a Varnish proxy. So I couldn't do 'Allow from (ip)' in the Apache settings, because the IP would always be the IP address of the Varnish server at this point.
And obviously, I couldn't 'Allow from (varnish ip)' because that's the same as not having any HTTP auth at all :)
