The attribute only works for HTTP connector, not for AJP. For AJP you have to manually add it.The Host header is required though. Ho would Undertow else figure out the original request URL? I can't see anything we can do on our end for this, besides documenting the fact that the original Host header has to be preserved.On 23 May 2016 at 16:47, Christian Bauer <christian.bauer@gmail.com> wrote:This handler sets ServletRequest#getRemoteHost() etc. values in Undertow. In Wildfly code this handler is actually enabled with the listener attribute proxy-address-forwarding=true:https://github.com/wildfly/wildfly/blob/aaaeb2a13667353db2b6955b9bcdba434a89fd02/undertow/src/main/java/org/wildfly/extension/undertow/HttpListenerService.java#L93What's the difference between enabling the listener attribute and adding the filter manually?None of this is having any effect on getRequestURL(). There are two ways I see how this host is set: From parsing the HTTP request line or from the Host header.Whatever proxy testing you do probably works because your proxy passes through the original Host header. Preserving the Host header is the default in haproxy but not mod_proxy.On 23.05.2016, at 16:14, Bill Burke <bburke@redhat.com> wrote:_______________________________________________As Stian said, ProxyPeerAddressHandler? See above.
On 5/23/16 3:16 AM, Christian Bauer wrote:
08:47:32,512 ERROR [stderr] (default task-2) X-Forwarded-For: 10.0.0.1
Copy/paste error, the actual line is:
08:47:32,512 ERROR [stderr] (default task-2) X-Forwarded-For: 10.0.0.1:8888
_______________________________________________ keycloak-user mailing list keycloak-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user