I'm currently running MDM 11.1.2406.11 and tried to update to 11.2.2500.06. After the update I could no longer reach the login page when accessing the site via reverse proxy (haproxy). In the browser developer tools, the response JSON said that the X-ZCSRF-TOKEN had the wrong parameter format (or something like that, can't remember the exact message). Accessing the site via IP address e.g. https://10.0.0.5:9383 worked fine. I looked through the Secure Gateway Server nginx configuration to see if there were any headers that I needed to set or something but nothing jumped out at me. Did something change between 2406 and 2500 that requires a different reverse proxy configuration?

The headers I'm currently setting are:

X-Real-IP
X-Forwarded-For
X-Forwarded-Port
X-Forwarded-Proto