[Apiman-user] Proxy headers missing for processing policies

[Stephen Henrie]

I have Apiman running in an openshift environment, which is essentially a
similar configuration to running in kubernetes. Each container/pod is
always receiving http/s requests through an HA Proxy server, so that the
x-forwarded-* set of headers get added to each request by the proxy server.

Unfortunately, it appears that the headers which are provided in the
ApiRequet bean when the policy chain processor doApply() method is called
does not include these proxy related headers.  This means that the standard
policies for the IP white and black listing policies do not work when the
apiman gateway is behind a proxy server.  The request.getRemoteAddr()
method returns the ip address to the proxy server, so there is no way to
get the ip address of the originator since the x-forwarded-for header ( and
related headers ) are not found.

Has anyone else experienced this?  If so, is this by design?

Thanks!

Stephen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/apiman-user/attachments/20170818/b4226238/attachment.html