A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [x-forwarded-for]

HTTP header field for identifying the origin IP address

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

AKS IP forwarding from Nginx pod to Ingress controller not working

We have a SaaS application that is running perfectly well on Azure IaaS inside VMs. Our frontend is hosted on Nginx and we have many location based rules that forward/proxy the traffic to our backend ...
0
votes
0answers
118 views

Block X-Forwarded-For IP subnets at apache 2.4 httpd.conf level using If

I'm hosting using pagekite Resolved some bandwidth issues down to some ip ranges Would like to block the subnet's at the httpd.conf level utilizing X-Forwarded-For IP's IP's in question: 5.188.211....
2
votes
0answers
50 views

Stop a user from circumventing IP block?

A user is somehow avoiding an IP block in apache 2.2/2.4, and I can not figure out how. The company I work for hosts hundreds of sites in different datacenters; this user is attacking several of the ...
1
vote
0answers
18 views

Does in-the-field experience suggest that a HTTP POST is more reliable than PUT and DELETE

I need to cross reference my experience with that of professionals, as I'm developing a REST application that can either Use on HTTP POST for all delete and create operations Or use HTTP DELETE and ...
2
votes
0answers
224 views

Using Nginx real_ip when you don't know the intermediate proxy IP addresses

Nginx's real_ip module allows you to set the $remote_addr variable based on values sent in particular header fields. It has a special understanding of the X-Forwarded-For header, and is able to use ...
1
vote
0answers
109 views

Correct log format dependent on route

I have a few virtual hosts running on a server, a couple are through a CDN and have X-Forward-For added to the headesr, sometimes it just goes through a load balancer where RemoteIPHeader is added. I ...
0
votes
0answers
148 views

HaProxy X-Forwered-For sends when already present incoming request

I'm trying to get X-Forwarded-For when original client request contains that header and pass it to the application layer in using HAProxy. any help will be appreciated.
-1
votes
1answer
633 views

Can squid add X-Forworded-For header in https request?

I know squid can perform as a mitm,so I want to know can squid add X-Forworded-For header in https request? If can add, how to configure it?
1
vote
0answers
808 views

Apache 2.4 X-Forwarded-For for remoteip

I configured apache 2.4 with following file /etc/apache2/conf-available/remoteip.conf RemoteIPHeader X-Forwarded-For RemoteIPTrustedProxy 127.0.0.1 But It will not include header in tomcat. ...
4
votes
2answers
2k views

Private address space IP found in X-Forwarded-For

I'm reverse proxying with nginx behind Google Cloud (HTTPS) Load Balancer, so I add the X-Forwarded-For header so that the backend can extract the client (browser) IP. This morning I noticed a 10.x....
1
vote
1answer
3k views

Possible to log X-FORWARDED-FOR to nginx error_log?

Nginx allows custom log formats for access logs -- right now I'm logging http_x_forwarded_for and it's working fine. The problem is my error log only shows the LB IP. After Googling and reading ...
0
votes
1answer
1k views

X-Forward-Proto custom header

I am leveraging AWS ALB & My setup is as follows : ALB]--HTTPS--[NGINX]--HTTP--[ALB]--HTTP--[APP/NGINX] the problem is I am using NGINX to forward X-Forwarded-Proto=https to the application ...
1
vote
0answers
173 views

Restore original visitor IP for static site on AWS S3 using Cloudflare

I've a static site on S3, with cloudflare as my DNS provider. The server logs are collected in an S3 bucket. However the visitor IP address in the log files points to cloudflare servers instead of the ...
2
votes
1answer
2k views

prevent X-Forwarded-For spoofing in haproxy

Yesterday we got hit by a DDoS attack reaching our webserver backends (apache2). The frontend consists of haproxy loadbalancing connections to the webservers. On access.log of apache we saw thousands ...
0
votes
1answer
372 views

how to block external request coming from proxy server to nginx webserver

I have web application hosted in nginx web server. I would like to disable request from any proxy server to my webserver (nginx) . I need to return 403 for those who request via proxy server. Is ...
0
votes
1answer
233 views

Get client IP from Web application via Load-Balancer alternative

If a Web application server (ex. nginx&php-fpm) is behind Load-Balancer such as AWS-ELB: Client -> Load-Balancer -> Web Application server To get the real client IP from Web application ...
3
votes
1answer
1k views

Pass Client IP from AWS ELB to HA Proxy

We have a issue in our application where the client IP is not getting passed to the App servers in the following setup. USER---------> AWS ELB -----------> HAPROXY -----------> Application server(...
0
votes
2answers
1k views

Getting X-Forwarded behind AWS TCP Load Balancer for https

I have an AWS TCP load balancer on an autoscaling pool, There are multiple domains behind it so I can't do SSL termination on the load balancer, hence TCP. I've updating my logging format to log the ...
1
vote
2answers
697 views

Logging original requestor IP instead of forward proxy IP for certain HTTP requests (nginx logs)

I use nginx as a reverse proxy in front of our application web server (gunicorn; it's a Django app). Majority of the users hitting this web application are actually routed through a forward proxy. ...
1
vote
3answers
19k views

Forwarding real remote IP to proxied server with nginx

To hide my website IP I proxied the main server with nginx on another VPS. I am trying to send the visitor real IP to my website and here is my config in conf.d folder: proxy_cache_path /etc/nginx/...
3
votes
1answer
2k views

Check Varnish ACL via X-Forwarded-For when behind one or more(!) reverse proxies

I have Varnish running behind a reverse proxy (running on localhost, for SSL offloading). The proxy sets the X-Forwarded-For header or adds itself to it if the header already exists. When I do ACL ...
3
votes
1answer
892 views

Configuring nginx to log original requestor IP (instead of IP of forward proxy)

On an nginx-enabled website I maintain, some visitors are behind a certain forward proxy. Since requests pass through the proxy's servers, the HTTP Request IP address in these cases is always from ...
1
vote
1answer
1k views

X-forwarded-for NULL in Tomcat

We are injecting the x-forwarded-for header in the loadbalancer, which sends the request to apache web server, which inturn proxys (mod_proxy_balancer) the request to the backend tomcat server. we are ...
0
votes
2answers
2k views

Blacklist IPs with iptables behind a Reverse Proxy

I have a Ubuntu Server 16 and I use iptables as firewall. HTTP and HTTPS traffic is behind a Reverse Proxy that I cannot control, but I have X-Forwarded-For field activated. Is it possible to filter ...
0
votes
1answer
440 views

Duplicate IP in Apache access log behind nginx proxy

I've recently inherited an infrastructure where all the users go through an AWS ELB -> nginx proxy -> AWS ELB -> Apache. The problem I'm seeing is that the client's IP is showing twice in Apache, a ...
2
votes
0answers
145 views

HAProxy, why would a replaced HTTP header have a number at the end?

Can someone explain what the "X-Forwarded-Proto2" header is in this HAProxy frontend stanza?: frontend main *:443 ... reqirep ^(X-Forwarded-Proto:)(.*) X-Forwarded-Proto2:\2 ... I understand ...
1
vote
1answer
8k views

Get client IP with Header add in Apache2

I am attempting to get the client IP in a HTTP header. I have seen a lot of references to getting this in Logs however i dont know how this translates to passing it as a header. I was going to use ...
0
votes
0answers
5k views

Apache proxy server not passing X-Forwarded-For

I am migrating some sites from one server to another. To avoid any downtime, I am proxying moved sites through the old server while the DNS updates. On the original (proxy) server, I have the ...
0
votes
1answer
1k views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget about ...
0
votes
1answer
993 views

IIS server farm with ARR: Why does HTTP_X_FORWARDED_FOR have a port number?

I've got a server farm set up in IIS 8.5. When I inspect the HTTP_X_FORWARDED_FOR header in my application code, it gives me the correct IP address but it contains a colon and a port number. E.g. ...
9
votes
1answer
13k views

How to log original value of $remote_addr when using Real-IP

My environment has user requests passing through a number of systems: [Client] --> [ELB] ---> [nginx] --> [web] (ELB = AWS Elastic Load Balancer) Thanks to this answer, I have nginx determining and ...
4
votes
1answer
8k views

Add haproxy X-Forwarded-Host request header

I have a Haproxy instance that rewrites Host headers to internal ones using http-request set-header. http-request set-header Host internal.example However, I'd still like backends to have access to ...
-1
votes
1answer
1k views

How to implement X-Forwarded-For to see header in web page

I am wanting to implement X-Forwarded-For so that when a user visits a site the actual IP is registered. So far I have added the following to my apache.conf file on my load balancer: LogFormat "%h %l ...
0
votes
1answer
2k views

mod_security behind reverse proxy and clients IP

client -> haproxy -> mod_security boxes -> backends Problem: mod_security boxes use mod_rpaf with ip of haproxy in 'RPAFproxy_ips'. Apache logging shows clients real ip but mod_security ...
2
votes
1answer
2k views

Apache HTTPD's remoteip not working

I've configured remoteip and checked that it's actually loaded. The remoteip.conf is loaded as well. I checked the latter by introducing a wrongly formatted IP in the following (correct) config: ...
4
votes
1answer
3k views

is there a standard for chaining x-forwarded-for headers?

IETF RFC 2616 Section 4.2 allows a request to contain multiple headers with the same field-name as long as chronological order of insertion is preserved and their values can be converted into single ...
0
votes
1answer
62 views

AWS forward request between private instances

I have a public subnet holding AWS ELB which forward its requests to a private EC2 instance. Is there a way I can forward the request from my private EC2 request to another private EC2 instance? In ...
1
vote
1answer
626 views

Allowing multiple IPs behind ELB in Apache configuration

I have multiple application servers running as EC2 instances. Only certain bare-metal servers running elsewhere are allowed to contact them and their IPs whitelisted explicitly in the httpd.conf @the ...
9
votes
2answers
21k views

Apache mod_remoteip and access logs

Since Apache 2.4 I've started using mod_remoteip instead of mod_extract_forwarded for rewriting client address from x-forwarded-for provided by frontend servers (varnish, squid, apache etc). So far ...
3
votes
1answer
2k views

Location based whitelisting of IP's on nginx webservers behind Elastic Load Balancer

I run nginx webservers behind an elastic load balancer in AWS. The real IP is got through X-Forwarded-For. The issue faced is how to use this to deny all and whitelist only specific sources for ...
1
vote
1answer
1k views

Nginx not getting the real visitor IP in server block

I am using a loadbalancer in my current setup, requests come from ip 10.71.128.13. I am using Nginx as a front to a Gunicorn backend. I want to get the real IP address of the visitor and log it (not ...
1
vote
1answer
7k views

apache forward REMOTE_USER to X-Forwarded-User

I would like to pass the environment variable REMOTE_USER set by apache when HTTP basic authentication is correct to a backend. This would provide authentication to the backend server as well. Here ...
1
vote
2answers
1k views

Fail2ban and X-Forwarded

I am configuring fail2ban on my webservers. My Webservers are behind ELB. so I configured X-forwarded to get the real IP's in Apache Access logs.But unfortunately fail2ban not able scan accesslogs ...
1
vote
2answers
3k views

Squid: disable X-Forwarded-For, but only for specific ACLs

I know, that I can turn off X-Forwarded-For header in Squid completley by using directive "forwarded_for off" or "forwarded_for delete" globally. I would like to be able to disable that header only ...
1
vote
1answer
5k views

Logging X-Forwarded-For IP in Shibboleth's Audit Logs

This is a follow up from my earlier question on capturing the X-Forwarded-For IP address in across multiple proxies. Now, I'm looking to capture the Client's IP in the application's (Shibboleth's IdP) ...
3
votes
1answer
5k views

Amazon ELB not Passing “X-Forwarded-For” to IIS

ELB is setup to accept public HTTPS (443) connections and send them on as HTTP (80) to the EC2 instances. The EC2 instances run an IIS app that needs to know the user's IP address. According to ...
2
votes
2answers
8k views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
0
votes
1answer
716 views

HAProxy in front of Varnish not setting X-FORWARDED-FOR

Until the last few days we had the following architecture: HAProxy -> 2 Backend servers Now we have: HAProxy -> Varnish -> 2 Backend servers Before, HAProxy was setting the "X-FORWARDED-FOR" header ...
3
votes
3answers
3k views

Varnish client.ip says 127.0.0.1

So I have a setup like Nginx -> varnish -> apache2 If I get a request with a static file it is sent through nginx to varnish and back to nginx again since its a lot faster than letting apache2 server ...
1
vote
1answer
338 views

How to inspect load balancer L7 Injected Headers

There is a hardware LB redirecting http to an Nginx SSL Offloader listening only at 443. I have no access to the LB, but I need to verify if it is injecting the X-Forwarded-For header. Why? I'm ...