help with X-Forwarded-For with IDPv3.3.1 and jetty 9.3.16

[Matt Jamison]

I'll copy it into my JETTY_BASE and restore the original file in
JETTY_HOME. I'm new to Jetty, came from the Tomcat world and wasn't even
using a separate JETTY_BASE until recently.

~Matt

On Wed, Mar 22, 2017 at 11:05 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > In jetty.xml in my JETTY_HOME/etc/ (might work in JETTY_BASE but didn't
> try) I added the below code in the httpConfig block:
>
> You never change any file in jetty-home.
>
> > In HAProxy, which I am using as my load balancer, I added "http-request
> del-header X-Forwarded-For" to the frontend block, so
> > someone on the outside cannot spoof that header. Also make sure to put
> "option forwardfor" in your backend, so you get the
> > X-Forwarded-For header passed on.
>
> I think there would be a lot of interest in how you configured HAProxy in
> the wiki in a HowTo.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170322/04b312d2/attachment.html>