[keycloak-user] keycloak-gatekeeper doing compression offloading without the instruction to do so

[Bruno Oliveira]

Hi Malte,

Could you please, file a Jira adding all the details like steps to reproduce, 
affected version and your environment setup?

On 2019-05-10, Malte Schmidt wrote:
> Hello, I recently discovered strange behaviour of an application which
> is being protected by gatekeeper when I noticed that the resources from
> the application are being transmitted uncompressed.
> Looks like that the "content-encoding: gzip" header gets missing and the
> response to the client/reverse proxy happens uncompressed, after being
> passed through gatekeeper.
> 
> I tried to search the documentation for gatekeeper and this behaviour,
> but failed to find anything of use.
> Ideas on how to pass already compressed data through gatekeeper or any
> other opinions?
> 
> Normal communication from the client over the reverse proxy to the
> application server:
> 
> Client to reverse proxy
> 
> GET /test.js HTTP/1.1
> [...]
> Accept-Encoding: deflate, gzip
> 
> Reverse proxy to application server
> 
> GET /test.js HTTP/1.1
> [...]
> Accept-Encoding: deflate, gzip
> 
> Answer from the application server over the reverse proxy to the client
> 
> HTTP/1.1 200 OK
> [...]
> vary: accept-encoding
> content-encoding: gzip
> 
> keycloak-gatekeeper added to the chain, between the reverse proxy and
> the upstream
> 
> Gatekeeper to its upstream
> 
> GET /test.js HTTP/1.1
> [...]
> Accept-Encoding: gzip
> 
> Upstream to gatekeeper
> 
> HTTP/1.1 200 OK
> [...]
> vary: accept-encoding
> content-encoding: gzip
> 
> Gatekeeper to client
> 
> HTTP/1.1 200 OK
> [...]
> Vary: accept-encoding
> 
> 




> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user


-- 

abstractj