We're attempting to identify where specific requests are coming from inside our Java application. We have changed the log files to include the IP address and we're using httpServletRequest.getRemoteAddr() to get that remote address.
On our local development machines running Tomcat, this works. In our CI environment (Tomcat on a Mac), this works.
The problem is that on our staging and production environments, this doesn't work. We always see 127.0.0.1 from httpServletRequest.getRemoteAddr(). Our staging and production environments are both VMware VMs running CentOS. They are running within/on ESXI and are behind a Cisco 5500 ASA.
We've seen other posts similar to this problem that say to look for an "X-Forwarded-For" header and print that if it exists. It doesn't. Below is a full list of headers that are coming through the request.
We don't have much insight into how the ASA or VMware is set up so if there's something there that could be causing this, please provide a detailed answer on what to ask our IT group about to get this fixed. We think this might be related to VMware since we're seeing 127.0.0.1. If it was the ASA, we'd assume we'd see the IP of the ASA instead but I'm open to being told I'm incorrect.
Complete headers for a request:
user-agent:Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)
accept:text/html,application/xhtml+xml,application/xml
q=0.9,*/*
q=0.8
accept-language:en-US,en
q=0.8
accept-charset:ISO-8859-1,UTF-8
q=0.7,*
q=0.7
host:host-omitted-for-stackoverflow.com
connection:keep-alive
UPDATE - We just realized we had a local port redirect involved:
The only other thing that might be relevant is that we're using an HTTP xinetd port redirect to forward SSL traffic to an internal port:
service https
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = root
port = 443
protocol = tcp
redirect = localhost 8999
log_on_failure += USERID
}
