<div dir="ltr">Created <a href="https://issues.jboss.org/browse/KEYCLOAK-3029">https://issues.jboss.org/browse/KEYCLOAK-3029</a></div><div class="gmail_extra"><br><div class="gmail_quote">On 24 May 2016 at 08:50, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">The attribute only works for HTTP connector, not for AJP. For AJP you have to manually add it.<div><br></div><div>The Host header is required though. Ho would Undertow else figure out the original request URL? I can't see anything we can do on our end for this, besides documenting the fact that the original Host header has to be preserved.</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 23 May 2016 at 16:47, Christian Bauer <span dir="ltr"><<a href="mailto:christian.bauer@gmail.com" target="_blank">christian.bauer@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">This handler sets ServletRequest#getRemoteHost() etc. values in Undertow. In Wildfly code this handler is actually enabled with the listener attribute proxy-address-forwarding=true:<div><br></div><div><a href="https://github.com/wildfly/wildfly/blob/aaaeb2a13667353db2b6955b9bcdba434a89fd02/undertow/src/main/java/org/wildfly/extension/undertow/HttpListenerService.java#L93" target="_blank">https://github.com/wildfly/wildfly/blob/aaaeb2a13667353db2b6955b9bcdba434a89fd02/undertow/src/main/java/org/wildfly/extension/undertow/HttpListenerService.java#L93</a><div><br></div><div>What's the difference between enabling the listener attribute and adding the filter manually?</div><div><br></div><div>None of this is having any effect on getRequestURL(). There are two ways I see how this host is set: From parsing the HTTP request line or from the Host header. </div><div><br></div><div>Whatever proxy testing you do probably works because your proxy passes through the original Host header. Preserving the Host header is the default in haproxy but not mod_proxy.</div><div><div><div><div><br></div><div><div><div><div><blockquote type="cite"><div>On 23.05.2016, at 16:14, Bill Burke <<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>> wrote:</div><br><div>
<div bgcolor="#FFFFFF" text="#000000"><p><a href="https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/load-balancer.html" target="_blank">https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/load-balancer.html</a></p><p>As Stian said, ProxyPeerAddressHandler? See above.<br>
</p><p>
</p>
<br>
<div>On 5/23/16 3:16 AM, Christian Bauer
wrote:<br>
</div>
<blockquote type="cite">
<div>
<blockquote type="cite">
<div><span style="font-family:Helvetica;font-size:16px;font-style:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">08:47:32,512 ERROR [stderr]
(default task-2) X-Forwarded-For: 10.0.0.1</span></div>
</blockquote>
</div>
<br>
<div>Copy/paste error, the actual line is:</div>
<div><span style="display:inline!important"><br>
</span></div>
<div><span style="display:inline!important">08:47:32,512
ERROR [stderr] (default task-2) X-Forwarded-For: <a href="http://10.0.0.1:8888" target="_blank">10.0.0.1:8888</a></span></div>
<div><br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
_______________________________________________<br>keycloak-user mailing list<br><a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br><a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></div></blockquote></div><br></div></div></div></div></div></div></div></div><br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>