V3 Idp - how to get client IP address in load balanced server

[Cantor, Scott]

On 7/18/17, 11:16 PM, "users on behalf of Ramaiah, Vanna G." <users-bounces at shibboleth.net on behalf of ramaiah at musc.edu> wrote:

> My idp set up is: client->load balancer->tomcat8

Then your first step is to determine if you can trust the value you get from the load balancer, or this is moot.

> Do I need to have MDCInsertingServletFilter in web.xml to use the x-fowarded-for value?

You need to configure the container however it documents itself to support picking up the value, assuming you can trust it. If that requires changing web.xml, then Tomcat should probably be enhanced, but I doubt it does.

-- Scott