Re: [Exist-development] Problem with XQuery URL Rewrite behind reverse proxy

[José M. F. G. <jm...@us...>]

Hi Adam,
	I think HTTP header X-Forwarded-For is not the one you need. It is attached and updated by proxies (it can contain more than one address), and it contains the host names or IP addresses from the sender or senders of the request (the original machine plus the previous crossed proxies in the query journey). <offtopic>But, if the proxy attaches the IP address instead of the DNS name, and multiple DNS names resolve to the same IP address, you are busted.</offtopic>

	As Dannes has written, you should read more on http://httpd.apache.org/docs/2.2/mod/mod_proxy.html . There you can find the header you probably need, which is X-Forwarded-Host . But as I don't know its behavior, I cannot give you more details.

	Good luck!
		José María

On 06/15/10 08:13, Dannes Wessels wrote:
> Hi,
>
> On Tue, Jun 15, 2010 at 12:14 AM, Adam Retter<ad...@ex...>  wrote:
>
>> There may be other aspects of the URL that we may want to make
>> configurable if you are running behind a reverse proxy?
>
> This has been on my list quite some time... good to see that others
> have the same issue as well. I guess the issue is much broader, in the
> 'request' function-namespace there are a few functions affected by the
> same subject... and the webstart functionality as well.
>
> Probably it should be an database wide configuration item.
>
> Please read the 'specs' carefully... there are a few implementations
> that do approximately the same. E.g.
> http://en.wikipedia.org/wiki/X-Forwarded-For
>
> You cannot use the header right away, it must be parsed first (take
> first item of list? or last?)
>
> read more on http://httpd.apache.org/docs/2.2/mod/mod_proxy.html
> (revere proxy headers), there are a few more headers you could
> check...... be aware of that!
>
> cheers
>
> Dannes
>
>
>

-- 
"La violencia es el último recurso del incompetente"
	- Salvor Hardin en "La Fundación" de Isaac Asimov
"Premature optimization is the root of all evil." - Donald Knuth

José María Fernández González
e-mail: jos...@gm...