HTTP header field for identifying the origin IP address

learn more… | top users | synonyms

6
votes
2answers
5k views

F5 Big-IP, X-Forwarded-For and IIS Logs

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :) We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...
5
votes
2answers
8k views

Apache mod_remoteip and access logs

Since Apache 2.4 I've started using mod_remoteip instead of mod_extract_forwarded for rewriting client address from x-forwarded-for provided by frontend servers (varnish, squid, apache etc). So far ...
5
votes
2answers
6k views

Overriding the X-Forwarded-For header in haproxy?

In my HAProxy load balancer, I have the following config chunks: defaults mode http log global option httplog clf option ...
4
votes
2answers
5k views

How to best configure IIS7 logging to capture “HTTP_X_FORWARDED_FOR” header

We have IIS7 servers sitting behind an nginx reverse proxy. The reverse proxy is sending the standard "HTTP_X_FORWARDED_FOR" header with the visitor IP address, but IIS7 logging is only logging the ...
4
votes
1answer
489 views

Nginx clear X-Forwarded-For before setting

What can I use in the nginx config to make it clear any existing X-Forwarded-For headers before setting its own? I am currently using Nginx to terminate SSL before passing traffic to HAProxy to load ...
3
votes
2answers
1k views

Varnish client.ip says 127.0.0.1

So I have a setup like Nginx -> varnish -> apache2 If I get a request with a static file it is sent through nginx to varnish and back to nginx again since its a lot faster than letting apache2 server ...
3
votes
1answer
1k views

Location based whitelisting of IP's on nginx webservers behind Elastic Load Balancer

I run nginx webservers behind an elastic load balancer in AWS. The real IP is got through X-Forwarded-For. The issue faced is how to use this to deny all and whitelist only specific sources for ...
3
votes
1answer
3k views

mod_evasive behind HAPROXY

I have a couple of Apache 2 machines behind an HAPROXY setup, I tried to setup mod_evasive on those Apache machine while also using mod_rpaf to get the real X-FORWARDED client ip. For some reason, ...
2
votes
1answer
2k views

Nginx running behind Varnish and x-forwarded-for, how do I fool nginx?

I have a setup where I'm looking at running nginx behind a varnish cache. I currently use apache instead of varnish and use x-forwarded-for to have apache tricked into thinking the remoteip is the ...
2
votes
1answer
239 views

How to log original value of $remote_addr when using Real-IP

My environment has user requests passing through a number of systems: [Client] --> [ELB] ---> [nginx] --> [web] (ELB = AWS Elastic Load Balancer) Thanks to this answer, I have nginx determining and ...
2
votes
1answer
956 views

is there a standard for chaining x-forwarded-for headers?

IETF RFC 2616 Section 4.2 allows a request to contain multiple headers with the same field-name as long as chronological order of insertion is preserved and their values can be converted into single ...
2
votes
1answer
97 views

Apache HTTPD's remoteip not working

I've configured remoteip and checked that it's actually loaded. The remoteip.conf is loaded as well. I checked the latter by introducing a wrongly formatted IP in the following (correct) config: ...
2
votes
1answer
140 views

Add haproxy response header based on request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
1
vote
1answer
81 views

On a shared public Internet connection, is there a way to identify outgoing network connections to assist with abuse claims?

I assist in running a public WiFi network, and we assign each user an internal IP address on the 10.0.0.0/8 subnet. We sometimes get emails about abuse of network services, but because of the nature ...
1
vote
1answer
1k views

Haproxy Incoming X-Forwarded-For Header into Outgoing X-Forwarded-For

Is there any way that I can use Haproxy's ability to modify headers so that if the incoming connection has an X-Forwarded-For header for example I can then take the contents of this and add it into ...
1
vote
1answer
267 views

How to inspect load balancer L7 Injected Headers

There is a hardware LB redirecting http to an Nginx SSL Offloader listening only at 443. I have no access to the LB, but I need to verify if it is injecting the X-Forwarded-For header. Why? I'm ...
1
vote
1answer
2k views

apache forward REMOTE_USER to X-Forwarded-User

I would like to pass the environment variable REMOTE_USER set by apache when HTTP basic authentication is correct to a backend. This would provide authentication to the backend server as well. Here ...
1
vote
2answers
569 views

Fail2ban and X-Forwarded

I am configuring fail2ban on my webservers. My Webservers are behind ELB. so I configured X-forwarded to get the real IP's in Apache Access logs.But unfortunately fail2ban not able scan accesslogs ...
1
vote
1answer
3k views

Logging X-Forwarded-For IP in Shibboleth's Audit Logs

This is a follow up from my earlier question on capturing the X-Forwarded-For IP address in across multiple proxies. Now, I'm looking to capture the Client's IP in the application's (Shibboleth's IdP) ...
1
vote
1answer
2k views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
1
vote
3answers
2k views

OpenSource (Layer 4) Load Balancer that can pass through original client IP?

I am setting up a web application which uses SSL for all requests. It needs to have room for scaling and also be highly available. It seems that the "recommended" way to handle this is to setup a pair ...
1
vote
1answer
220 views

Allowing multiple IPs behind ELB in Apache configuration

I have multiple application servers running as EC2 instances. Only certain bare-metal servers running elsewhere are allowed to contact them and their IPs whitelisted explicitly in the httpd.conf @the ...
1
vote
1answer
476 views

Nginx not getting the real visitor IP in server block

I am using a loadbalancer in my current setup, requests come from ip 10.71.128.13. I am using Nginx as a front to a Gunicorn backend. I want to get the real IP address of the visitor and log it (not ...
1
vote
2answers
2k views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
1
vote
0answers
346 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
1
vote
1answer
46 views

nginx reverse Proxy - rewrite source IP in HTTP Header [closed]

I have the following infrastructure: RaspberryPi with opensource smart home software (fhem) RaspberryPi with nginx to use it as reverse Proxy for external connection ro rpi with smart home software. ...
1
vote
2answers
2k views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...
0
votes
1answer
520 views

HAProxy in front of Varnish not setting X-FORWARDED-FOR

Until the last few days we had the following architecture: HAProxy -> 2 Backend servers Now we have: HAProxy -> Varnish -> 2 Backend servers Before, HAProxy was setting the "X-FORWARDED-FOR" header ...
0
votes
1answer
87 views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget ...
0
votes
1answer
12 views

Get client IP with Header add in Apache2

I am attempting to get the client IP in a HTTP header. I have seen a lot of references to getting this in Logs however i dont know how this translates to passing it as a header. I was going to use ...
0
votes
0answers
26 views

Apache proxy server not passing X-Forwarded-For

I am migrating some sites from one server to another. To avoid any downtime, I am proxying moved sites through the old server while the DNS updates. On the original (proxy) server, I have the ...
0
votes
1answer
50 views

IIS server farm with ARR: Why does HTTP_X_FORWARDED_FOR have a port number?

I've got a server farm set up in IIS 8.5. When I inspect the HTTP_X_FORWARDED_FOR header in my application code, it gives me the correct IP address but it contains a colon and a port number. E.g. ...
0
votes
1answer
145 views

mod_security behind reverse proxy and clients IP

client -> haproxy -> mod_security boxes -> backends Problem: mod_security boxes use mod_rpaf with ip of haproxy in 'RPAFproxy_ips'. Apache logging shows clients real ip but mod_security ...
0
votes
1answer
37 views

AWS forward request between private instances

I have a public subnet holding AWS ELB which forward its requests to a private EC2 instance. Is there a way I can forward the request from my private EC2 request to another private EC2 instance? In ...
0
votes
1answer
528 views

Squid X-Forwarded-For enabled for specific domains?

I want to set up a squid gateway, which doesn't forward the X-Forwarded-For header to most of the websites. But I want it to be forwarded to a specific domain. Here's the sample I'm trying to ...
-1
votes
1answer
51 views

How to implement X-Forwarded-For to see header in web page

I am wanting to implement X-Forwarded-For so that when a user visits a site the actual IP is registered. So far I have added the following to my apache.conf file on my load balancer: LogFormat "%h %l ...