Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Archive Docker image: Provide ENVs for HTTPS/SSL with a Reverse Proxy #3140

Closed
gunterze opened this issue Apr 16, 2021 · 3 comments
Closed
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@gunterze
Copy link
Member

gunterze commented Apr 16, 2021

Provide ENVs for HTTPS/SSL with a Reverse Proxy:

HTTP_PROXY_ADDRESS_FORWARDING

If this is enabled then the X-Forwarded-For and X-Forwarded-Proto headers will be used to determine the peer address.
This allows applications that are behind a proxy to see the real address of the client, rather than the address
of the proxy. (optional, default is false).

REDIRECT_HTTPS_PORT

HTTPS port to redirect requests that require security too. (optional, default is 8443).
Have to be set different to HTTPS_PORT, if running behind a HTTPS/SSL reverse proxy listing on a different port.

@gunterze gunterze added the enhancement New feature or request label Apr 16, 2021
@gunterze gunterze added this to the 5.23.3 milestone Apr 16, 2021
@gunterze gunterze self-assigned this Apr 16, 2021
@petrkalina petrkalina reopened this Mar 30, 2022
@petrkalina
Copy link
Collaborator

Only effective for http listener, not https currently!

@petrkalina
Copy link
Collaborator

petrkalina commented Mar 31, 2022

seems HTTP_PROXY_ADDRESS_FORWARDING=true renders WILDFLY_RESOLVE_PEER_ADDRESS=true ineffective. Surprisingly, it becomes effective with adding a logging filter i.e. vua jboss-cli script:

batch
/subsystem=undertow/configuration=filter/custom-filter=request-logging-filter:add(class-name=io.undertow.server.handlers.RequestDumpingHandler, module=io.undertow.core)
/subsystem=undertow/server=default-server/host=default-host/filter-ref=request-logging-filter:add
run-batch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants