9:13 p.m.
I couldn't believe how easy it was to create an http security proxy for
Keycloak using undertow. Undertow was insanely modular and easy to
piece together how I wanted. Great work guys.
Thanks
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
1:32 a.m.
Can we use raw tcp sockets with undertow ?
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: undertow-dev(a)lists.jboss.org
Sent: Friday, November 21, 2014 3:13:03 AM
Subject: [undertow-dev] awesome
I couldn't believe how easy it was to create an http security proxy for
Keycloak using undertow. Undertow was insanely modular and easy to
piece together how I wanted. Great work guys.
Thanks
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
2:07 a.m.
You can do HTTP upgrade, what exactly are you after?
Stuart
----- Original Message -----
From: "Rob Davies" <rdavies(a)redhat.com>
To: "Bill Burke" <bburke(a)redhat.com>
Cc: undertow-dev(a)lists.jboss.org
Sent: Friday, 21 November, 2014 6:32:45 PM
Subject: Re: [undertow-dev] awesome
Can we use raw tcp sockets with undertow ?
----- Original Message -----
> From: "Bill Burke" <bburke(a)redhat.com>
> To: undertow-dev(a)lists.jboss.org
> Sent: Friday, November 21, 2014 3:13:03 AM
> Subject: [undertow-dev] awesome
>
> I couldn't believe how easy it was to create an http security proxy for
> Keycloak using undertow. Undertow was insanely modular and easy to
> piece together how I wanted. Great work guys.
>
> Thanks
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> undertow-dev mailing list
> undertow-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev
>
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
2:54 a.m.
I was wondering if you had any plans to expose raw tcp. Currently we use
vert.x to power a reverse proxy in fabric8 (as it provides a really nice
abstraction over sockets). We also have a requirement to run servlets,
so I'm wondering about consolidating around one thing, as we yet need
all the awesome features and functionality that vert.x has.
Stuart Douglas <mailto:sdouglas@redhat.com>
21 November 2014 08:07
You can do HTTP upgrade, what exactly are you after?
Stuart
----- Original Message -----
Rob Davies <mailto:rdavies@redhat.com>
21 November 2014 07:32
Can we use raw tcp sockets with undertow ?
----- Original Message -----
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
Bill Burke <mailto:bburke@redhat.com>
21 November 2014 03:13
I couldn't believe how easy it was to create an http security proxy for
Keycloak using undertow. Undertow was insanely modular and easy to
piece together how I wanted. Great work guys.
Thanks
10:35 a.m.
Are you looking to do something not HTTP at all, so like just a straight TCP socket proxy?
Or do you use HTTP upgrade to reuse the same port, and delegate the socket to another
framework.
On Nov 21, 2014, at 2:54 AM, Rob Davies <rdavies(a)redhat.com>
wrote:
I was wondering if you had any plans to expose raw tcp. Currently we use vert.x to power
a reverse proxy in fabric8 (as it provides a really nice abstraction over sockets). We
also have a requirement to run servlets, so I'm wondering about consolidating around
one thing, as we yet need all the awesome features and functionality that vert.x has.
> Stuart Douglas 21 November 2014 08:07
> You can do HTTP upgrade, what exactly are you after?
>
> Stuart
>
> ----- Original Message -----
> Rob Davies 21 November 2014 07:32
> Can we use raw tcp sockets with undertow ?
>
>
> ----- Original Message -----
> _______________________________________________
> undertow-dev mailing list
> undertow-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev
> Bill Burke 21 November 2014 03:13
> I couldn't believe how easy it was to create an http security proxy for
> Keycloak using undertow. Undertow was insanely modular and easy to
> piece together how I wanted. Great work guys.
>
> Thanks
>
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
--
Jason T. Greene
WildFly Lead / JBoss EAP Platform Architect
JBoss, a division of Red Hat
2:06 a.m.
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: undertow-dev(a)lists.jboss.org
Sent: Friday, 21 November, 2014 2:13:03 PM
Subject: [undertow-dev] awesome
I couldn't believe how easy it was to create an http security proxy for
Keycloak using undertow. Undertow was insanely modular and easy to
piece together how I wanted. Great work guys.
Awesome :-)
Stuart
Thanks
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
undertow-dev mailing list
undertow-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/undertow-dev
6 a.m.
Also do you have any details posted somewhere about how you did it?
Stuart
----- Original Message -----
From: "Stuart Douglas" <sdouglas(a)redhat.com>
To: "Bill Burke" <bburke(a)redhat.com>
Cc: undertow-dev(a)lists.jboss.org
Sent: Friday, 21 November, 2014 7:06:43 PM
Subject: Re: [undertow-dev] awesome
----- Original Message -----
> From: "Bill Burke" <bburke(a)redhat.com>
> To: undertow-dev(a)lists.jboss.org
> Sent: Friday, 21 November, 2014 2:13:03 PM
> Subject: [undertow-dev] awesome
>
> I couldn't believe how easy it was to create an http security proxy for
> Keycloak using undertow. Undertow was insanely modular and easy to
> piece together how I wanted. Great work guys.
Awesome :-)
Stuart
>
> Thanks
>
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> undertow-dev mailing list
> undertow-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev
>
7:36 a.m.
just code. It's functional, but still a work in progress. All i did
was set up a handler chain that re-used our existing Undertow auth
mechanism, with the last handler being a SimpleProxyClientProvider. I
also forked your servlet constraint matching logic so that I could
define role mappings in the proxy layer.
https://github.com/keycloak/keycloak/tree/master/proxy/proxy-server
https://github.com/keycloak/keycloak/tree/master/testsuite/proxy
BTW, do you know any standard headers I could use to forward security
information?
On 11/21/2014 7:00 AM, Stuart Douglas wrote:
Also do you have any details posted somewhere about how you did it?
Stuart
----- Original Message -----
> From: "Stuart Douglas" <sdouglas(a)redhat.com>
> To: "Bill Burke" <bburke(a)redhat.com>
> Cc: undertow-dev(a)lists.jboss.org
> Sent: Friday, 21 November, 2014 7:06:43 PM
> Subject: Re: [undertow-dev] awesome
>
>
>
> ----- Original Message -----
>> From: "Bill Burke" <bburke(a)redhat.com>
>> To: undertow-dev(a)lists.jboss.org
>> Sent: Friday, 21 November, 2014 2:13:03 PM
>> Subject: [undertow-dev] awesome
>>
>> I couldn't believe how easy it was to create an http security proxy for
>> Keycloak using undertow. Undertow was insanely modular and easy to
>> piece together how I wanted. Great work guys.
>
> Awesome :-)
>
> Stuart
>
>>
>> Thanks
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>> _______________________________________________
>> undertow-dev mailing list
>> undertow-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/undertow-dev
>>
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
4:56 p.m.
BTW, do you know any standard headers I could use to forward
security
information?
Not really. We use SSL_CLIENT_CERT, SSL_CIPHER and SSL_SESSION_ID to forward certificate
information to back end servers, but that is in no way standard (basically I just used the
same headers that JBoss Web did).
Stuart
On 11/21/2014 7:00 AM, Stuart Douglas wrote:
> Also do you have any details posted somewhere about how you did it?
>
> Stuart
>
> ----- Original Message -----
>> From: "Stuart Douglas" <sdouglas(a)redhat.com>
>> To: "Bill Burke" <bburke(a)redhat.com>
>> Cc: undertow-dev(a)lists.jboss.org
>> Sent: Friday, 21 November, 2014 7:06:43 PM
>> Subject: Re: [undertow-dev] awesome
>>
>>
>>
>> ----- Original Message -----
>>> From: "Bill Burke" <bburke(a)redhat.com>
>>> To: undertow-dev(a)lists.jboss.org
>>> Sent: Friday, 21 November, 2014 2:13:03 PM
>>> Subject: [undertow-dev] awesome
>>>
>>> I couldn't believe how easy it was to create an http security proxy for
>>> Keycloak using undertow. Undertow was insanely modular and easy to
>>> piece together how I wanted. Great work guys.
>>
>> Awesome :-)
>>
>> Stuart
>>
>>>
>>> Thanks
>>>
>>> --
>>> Bill Burke
>>> JBoss, a division of Red Hat
>>> http://bill.burkecentral.com
>>> _______________________________________________
>>> undertow-dev mailing list
>>> undertow-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/undertow-dev
>>>
>>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
8:18 a.m.
BTW I occasionally get these errors, but things still work:
09:13:26,568 ERROR [io.undertow.request] Blocking request failed
HttpServerExchange{ GET /customer-portal/users}
java.lang.NullPointerException
at
io.undertow.client.http.HttpRequestConduit.processWrite(HttpRequestConduit.java:337)
at
io.undertow.client.http.HttpRequestConduit.flush(HttpRequestConduit.java:573)
at
io.undertow.conduits.AbstractFixedLengthStreamSinkConduit.flush(AbstractFixedLengthStreamSinkConduit.java:205)
at
org.xnio.conduits.ConduitStreamSinkChannel.flush(ConduitStreamSinkChannel.java:162)
at
io.undertow.client.http.HttpClientConnection.initiateRequest(HttpClientConnection.java:282)
at
io.undertow.client.http.HttpClientConnection.sendRequest(HttpClientConnection.java:215)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyAction.run(ProxyHandler.java:355)
at io.undertow.util.SameThreadExecutor.execute(SameThreadExecutor.java:17)
at
io.undertow.server.HttpServerExchange.dispatch(HttpServerExchange.java:712)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyClientHandler.completed(ProxyHandler.java:232)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyClientHandler.completed(ProxyHandler.java:227)
at
io.undertow.server.handlers.proxy.SimpleProxyClientProvider.getConnection(SimpleProxyClientProvider.java:48)
at
io.undertow.server.handlers.proxy.ProxyHandler$3.run(ProxyHandler.java:154)
On 11/21/2014 7:00 AM, Stuart Douglas wrote:
Also do you have any details posted somewhere about how you did it?
Stuart
----- Original Message -----
> From: "Stuart Douglas" <sdouglas(a)redhat.com>
> To: "Bill Burke" <bburke(a)redhat.com>
> Cc: undertow-dev(a)lists.jboss.org
> Sent: Friday, 21 November, 2014 7:06:43 PM
> Subject: Re: [undertow-dev] awesome
>
>
>
> ----- Original Message -----
>> From: "Bill Burke" <bburke(a)redhat.com>
>> To: undertow-dev(a)lists.jboss.org
>> Sent: Friday, 21 November, 2014 2:13:03 PM
>> Subject: [undertow-dev] awesome
>>
>> I couldn't believe how easy it was to create an http security proxy for
>> Keycloak using undertow. Undertow was insanely modular and easy to
>> piece together how I wanted. Great work guys.
>
> Awesome :-)
>
> Stuart
>
>>
>> Thanks
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>> _______________________________________________
>> undertow-dev mailing list
>> undertow-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/undertow-dev
>>
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
4:52 p.m.
That error should be fixed in the recently released 1.1.0.Final.
The only thing is that 1.1.0.Final requires Java 7, and looking at your build it looks
like you are targeting 1.6. This will still work if you build with Java 7, however it will
cause problems if you try and build with 1.6 (and obviously the undertow specific features
will need JDK7).
The main reason for this is that Servlet 3.1 relies on some JDK7 classes. If you really
need full JDK6 support we could potentially use David's seven2six tool to produce JDK6
compatible artefacts.
Stuart
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: "Stuart Douglas" <sdouglas(a)redhat.com>
Cc: undertow-dev(a)lists.jboss.org
Sent: Saturday, 22 November, 2014 1:18:39 AM
Subject: Re: [undertow-dev] awesome
BTW I occasionally get these errors, but things still work:
09:13:26,568 ERROR [io.undertow.request] Blocking request failed
HttpServerExchange{ GET /customer-portal/users}
java.lang.NullPointerException
at
io.undertow.client.http.HttpRequestConduit.processWrite(HttpRequestConduit.java:337)
at
io.undertow.client.http.HttpRequestConduit.flush(HttpRequestConduit.java:573)
at
io.undertow.conduits.AbstractFixedLengthStreamSinkConduit.flush(AbstractFixedLengthStreamSinkConduit.java:205)
at
org.xnio.conduits.ConduitStreamSinkChannel.flush(ConduitStreamSinkChannel.java:162)
at
io.undertow.client.http.HttpClientConnection.initiateRequest(HttpClientConnection.java:282)
at
io.undertow.client.http.HttpClientConnection.sendRequest(HttpClientConnection.java:215)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyAction.run(ProxyHandler.java:355)
at io.undertow.util.SameThreadExecutor.execute(SameThreadExecutor.java:17)
at
io.undertow.server.HttpServerExchange.dispatch(HttpServerExchange.java:712)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyClientHandler.completed(ProxyHandler.java:232)
at
io.undertow.server.handlers.proxy.ProxyHandler$ProxyClientHandler.completed(ProxyHandler.java:227)
at
io.undertow.server.handlers.proxy.SimpleProxyClientProvider.getConnection(SimpleProxyClientProvider.java:48)
at
io.undertow.server.handlers.proxy.ProxyHandler$3.run(ProxyHandler.java:154)
On 11/21/2014 7:00 AM, Stuart Douglas wrote:
> Also do you have any details posted somewhere about how you did it?
>
> Stuart
>
> ----- Original Message -----
>> From: "Stuart Douglas" <sdouglas(a)redhat.com>
>> To: "Bill Burke" <bburke(a)redhat.com>
>> Cc: undertow-dev(a)lists.jboss.org
>> Sent: Friday, 21 November, 2014 7:06:43 PM
>> Subject: Re: [undertow-dev] awesome
>>
>>
>>
>> ----- Original Message -----
>>> From: "Bill Burke" <bburke(a)redhat.com>
>>> To: undertow-dev(a)lists.jboss.org
>>> Sent: Friday, 21 November, 2014 2:13:03 PM
>>> Subject: [undertow-dev] awesome
>>>
>>> I couldn't believe how easy it was to create an http security proxy for
>>> Keycloak using undertow. Undertow was insanely modular and easy to
>>> piece together how I wanted. Great work guys.
>>
>> Awesome :-)
>>
>> Stuart
>>
>>>
>>> Thanks
>>>
>>> --
>>> Bill Burke
>>> JBoss, a division of Red Hat
>>> http://bill.burkecentral.com
>>> _______________________________________________
>>> undertow-dev mailing list
>>> undertow-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/undertow-dev
>>>
>>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
3650
days inactive
3653
days old
10 comments
4 participants
participants (4)
-
Bill Burke -
Jason Greene -
Rob Davies -
Stuart Douglas