IDPv3 Jetty 9.3 IDP X-Forward-for Configuration

[Cantor, Scott]

> The eclipse docs state that I need to add

That is pretty much what you should be following. It's their software.

> The first part seems to already exist in /opt/jetty/bin/jetty.xml and it
> referenced by /opt/jetty/bin/jetty-http.xml ( and https).

I assume you mean etc

The only "rule" is that you should never touch anything in the unpacked Jetty distribution. Anything you touch should be copied to the JETTY_BASE location you have set up. Sometimes that means making other changes if they have embedded references to jetty.home somewhere to the file you copied in (really annoying, but they definitely have them). Basically, the JETTY_BASE thing mostly works automatically any time you copy a file over, but their use of properties tends to be a bit sloppy in places.

> It looks as if in Jetty 9.3 I do not need to create the etc/jetty-https.xml file in my base as with 9.2
> so Jetty must use these files from the jetty directory?

I don't know what all that is referring to. Our examples are simply constructed from our best effort at coming up with working baselines. There are always multiple ways of doing the same things, and no specific "right" way. And if you end up needing to change some setting that our example didn't need to change, then you obviously would need to do something we didn't address.

> So what do I need to add/modify and to which file to get the actual client IP
> to show in logs?

Following their documentation is really the only advice. I've never set up the feature, so I don't know any more than that.

Our pages are open. If somebody wants to document a way to add that capability to 9.3, they can certainly add that to the page to give people more examples. I've tried to include everything I personally use, it just doesn't happen to include this yet.

-- Scott