The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
47 views

Nginx not getting the real visitor IP in server block

I am using a loadbalancer in my current setup, requests come from ip 10.71.128.13. I am using Nginx as a front to a Gunicorn backend. I want to get the real IP address of the visitor and log it (not ...
1
vote
1answer
100 views

apache forward REMOTE_USER to X-Forwarded-User

I would like to pass the environment variable REMOTE_USER set by apache when HTTP basic authentication is correct to a backend. This would provide authentication to the backend server as well. Here ...
1
vote
2answers
72 views

Fail2ban and X-Forwarded

I am configuring fail2ban on my webservers. My Webservers are behind ELB. so I configured X-forwarded to get the real IP's in Apache Access logs.But unfortunately fail2ban not able scan accesslogs ...
0
votes
0answers
172 views

How do I log the true client IP with Apache's CustomLog and the X-Forwarded-For header?

I am currently logging the contents of the X-Forwarded-For header using a CustomLog declaration in Apache. The problem is that every proxy and load balancer along the request path will add its IP to ...
1
vote
2answers
150 views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...
0
votes
0answers
73 views

X-Forwarded-For to log client ip is not working in apache

I have a load balancer in front of an apache httpd server which inturn forwards the requests to Tomcat6. The flow looks like below: Client -->Firewall System -->Load balancer -->Apache httpd ...
0
votes
1answer
350 views

Logging X-Forwarded-For IP in Shibboleth's Audit Logs

This is a follow up from my earlier question on capturing the X-Forwarded-For IP address in across multiple proxies. Now, I'm looking to capture the Client's IP in the application's (Shibboleth's IdP) ...
1
vote
1answer
258 views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
1
vote
0answers
384 views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
0
votes
1answer
294 views

HAProxy in front of Varnish not setting X-FORWARDED-FOR

Until the last few days we had the following architecture: HAProxy -> 2 Backend servers Now we have: HAProxy -> Varnish -> 2 Backend servers Before, HAProxy was setting the "X-FORWARDED-FOR" header ...
3
votes
2answers
887 views

Varnish client.ip says 127.0.0.1

So I have a setup like Nginx -> varnish -> apache2 If I get a request with a static file it is sent through nginx to varnish and back to nginx again since its a lot faster than letting apache2 server ...
1
vote
1answer
177 views

How to inspect load balancer L7 Injected Headers

There is a hardware LB redirecting http to an Nginx SSL Offloader listening only at 443. I have no access to the LB, but I need to verify if it is injecting the X-Forwarded-For header. Why? I'm ...
4
votes
1answer
251 views

Nginx clear X-Forwarded-For before setting

What can I use in the nginx config to make it clear any existing X-Forwarded-For headers before setting its own? I am currently using Nginx to terminate SSL before passing traffic to HAProxy to load ...
1
vote
0answers
248 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
5
votes
2answers
3k views

Overriding the X-Forwarded-For header in haproxy?

In my HAProxy load balancer, I have the following config chunks: defaults mode http log global option httplog clf option ...
1
vote
1answer
75 views

On a shared public Internet connection, is there a way to identify outgoing network connections to assist with abuse claims?

I assist in running a public WiFi network, and we assign each user an internal IP address on the 10.0.0.0/8 subnet. We sometimes get emails about abuse of network services, but because of the nature ...
0
votes
1answer
399 views

Squid X-Forwarded-For enabled for specific domains?

I want to set up a squid gateway, which doesn't forward the X-Forwarded-For header to most of the websites. But I want it to be forwarded to a specific domain. Here's the sample I'm trying to ...
0
votes
1answer
753 views

Haproxy Incoming X-Forwarded-For Header into Outgoing X-Forwarded-For

Is there any way that I can use Haproxy's ability to modify headers so that if the incoming connection has an X-Forwarded-For header for example I can then take the contents of this and add it into ...
1
vote
3answers
2k views

OpenSource (Layer 4) Load Balancer that can pass through original client IP?

I am setting up a web application which uses SSL for all requests. It needs to have room for scaling and also be highly available. It seems that the "recommended" way to handle this is to setup a pair ...
3
votes
1answer
1k views

mod_evasive behind HAPROXY

I have a couple of Apache 2 machines behind an HAPROXY setup, I tried to setup mod_evasive on those Apache machine while also using mod_rpaf to get the real X-FORWARDED client ip. For some reason, ...
3
votes
2answers
3k views

How to best configure IIS7 logging to capture “HTTP_X_FORWARDED_FOR” header

We have IIS7 servers sitting behind an nginx reverse proxy. The reverse proxy is sending the standard "HTTP_X_FORWARDED_FOR" header with the visitor IP address, but IIS7 logging is only logging the ...
2
votes
1answer
2k views

Nginx running behind Varnish and x-forwarded-for, how do I fool nginx?

I have a setup where I'm looking at running nginx behind a varnish cache. I currently use apache instead of varnish and use x-forwarded-for to have apache tricked into thinking the remoteip is the ...
6
votes
2answers
5k views

F5 Big-IP, X-Forwarded-For and IIS Logs

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :) We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...