IDPv3 Jetty 9.3 IDP X-Forward-for Configuration

Ginger, Anthony AGinger at miracosta.edu
Thu Jul 7 11:20:01 EDT 2016


I have built out my IDPv3 using jetty 9.3, no apache, using firewalld to forward 443 to 8443 and a physical load balancer. I followed the installation docs exactly.
I am familiar with tomcat and was able to configure this there for IDPv2, but I am new to Jetty and I am hoping someone can help configuring the recording of client IPs in logs using  IDP X-Forward-for.

The IDP works, everything functions, it records the IPs of the load balancers so now I just need to configure Jetty's connectors.

The eclipse docs state that I need to add

<New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
  <Set name="outputBufferSize">32768</Set>
  <Set name="requestHeaderSize">8192</Set>
  <Set name="responseHeaderSize">8192</Set>

  <Call name="addCustomizer">
    <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg>
  </Call>
</New>


The first part seems to already exist in /opt/jetty/bin/jetty.xml and it referenced by /opt/jetty/bin/jetty-http.xml ( and https). It looks as if in Jetty 9.3 I do not need to create the etc/jetty-https.xml file in my base as with 9.2  so Jetty must use these files from the jetty directory?

So what do I need to add/modify and to which file to get the actual client IP to show in logs?

Thanks
Anthony


More information about the users mailing list