You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ds...@apache.org on 2026/02/27 11:30:54 UTC
(tomcat) 10/18: Add TestFullReverseProxy
This is an automated email from the ASF dual-hosted git repository.
dsoumis pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 7b287f07289a31b901f36cb7be023ced62ea0203
Author: Dimitris Soumis <ji...@gmail.com>
AuthorDate: Thu Feb 19 16:29:31 2026 +0200
Add TestFullReverseProxy
---
.../integration/httpd/TestFullReverseProxy.java | 111 +++++++++++++++++++++
1 file changed, 111 insertions(+)
diff --git a/test/org/apache/tomcat/integration/httpd/TestFullReverseProxy.java b/test/org/apache/tomcat/integration/httpd/TestFullReverseProxy.java
new file mode 100644
index 0000000000..829bd500cc
--- /dev/null
+++ b/test/org/apache/tomcat/integration/httpd/TestFullReverseProxy.java
@@ -0,0 +1,111 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.tomcat.integration.httpd;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import jakarta.servlet.http.HttpServletResponse;
+
+import org.junit.Assert;
+import org.junit.Test;
+
+import org.apache.catalina.Globals;
+import org.apache.catalina.Valve;
+import org.apache.catalina.valves.RemoteIpValve;
+import org.apache.catalina.valves.SSLValve;
+import org.apache.tomcat.util.buf.ByteChunk;
+import org.apache.tomcat.util.net.TesterSupport;
+
+public class TestFullReverseProxy extends HttpdIntegrationBaseTest {
+ private static final String HTTPD_CONFIG = """
+ LoadModule proxy_module modules/mod_proxy.so
+ LoadModule proxy_http_module modules/mod_proxy_http.so
+ LoadModule headers_module modules/mod_headers.so
+ LoadModule ssl_module modules/mod_ssl.so
+ SSLSessionCache none
+ Listen %{HTTPD_SSL_PORT} https
+ <VirtualHost *:%{HTTPD_SSL_PORT}>
+ ServerName localhost:%{HTTPD_SSL_PORT}
+ SSLEngine on
+ SSLCertificateFile "%{SSL_CERT_FILE}"
+ SSLCertificateKeyFile "%{SSL_KEY_FILE}"
+ ProxyRequests Off
+ ProxyPass /endpoint http://localhost:%{TOMCAT_PORT}/%{SERVLET_NAME}
+ ProxyPassReverse /endpoint http://localhost:%{TOMCAT_PORT}/%{SERVLET_NAME}
+ RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
+ RequestHeader set SSL_CIPHER "%{SSL_CIPHER}s"
+ RequestHeader set SSL_SESSION_ID "%{SSL_SESSION_ID}s"
+ RequestHeader set SSL_CIPHER_USEKEYSIZE "%{SSL_CIPHER_USEKEYSIZE}s"
+ SSLVerifyClient optional
+ SSLCACertificateFile "%{SSL_CA_CERT_FILE}"
+ SSLOptions +ExportCertData
+ ProxyAddHeaders Off
+ RequestHeader set X-Forwarded-For 140.211.11.130
+ RequestHeader set X-Forwarded-Proto https
+ RequestHeader set X-Forwarded-Host whoamI.tomcat
+ </VirtualHost>
+ """;
+
+ @Override
+ protected List<Valve> getValveConfig() {
+ List<Valve> valves = new ArrayList<>();
+
+ RemoteIpValve remoteIpValve = new RemoteIpValve();
+ remoteIpValve.setHostHeader("X-Forwarded-Host");
+ valves.add(remoteIpValve);
+
+ SSLValve sslValve = new SSLValve();
+ valves.add(sslValve);
+
+ return valves;
+ }
+
+ @Override
+ protected String getHttpdConfig() {
+ return HTTPD_CONFIG;
+ }
+
+ @Test
+ public void testFullReverseProxying() throws Exception {
+ TesterSupport.configureClientSsl();
+
+ ByteChunk res = new ByteChunk();
+ int rc = getUrl("https://localhost:" + getHttpdSslPort() + "/endpoint", res, false);
+ Assert.assertEquals(HttpServletResponse.SC_OK, rc);
+ RequestDescriptor requestDesc = SnoopResult.parse(res.toString());
+
+ Assert.assertNotNull(requestDesc.getRequestInfo());
+ Assert.assertEquals("140.211.11.130", requestDesc.getRequestInfo("REQUEST-REMOTE-ADDR"));
+ Assert.assertEquals(443, Integer.valueOf(requestDesc.getRequestInfo("REQUEST-SERVER-PORT")).intValue());
+ Assert.assertEquals("https", requestDesc.getRequestInfo("REQUEST-SCHEME"));
+ Assert.assertEquals("true", requestDesc.getRequestInfo("REQUEST-IS-SECURE"));
+ Assert.assertEquals("whoamI.tomcat", requestDesc.getRequestInfo("REQUEST-SERVER-NAME"));
+
+ Assert.assertNotNull(requestDesc.getHeaders());
+ Assert.assertNull(requestDesc.getHeader("X-Forwarded-For"));
+ Assert.assertEquals("https", requestDesc.getHeader("X-Forwarded-Proto"));
+
+
+ Assert.assertNotNull(requestDesc.getAttributes());
+ Assert.assertNotNull(requestDesc.getAttribute(Globals.CIPHER_SUITE_ATTR));
+ Assert.assertNotNull(requestDesc.getAttribute(Globals.SSL_SESSION_ID_ATTR));
+ Assert.assertNotNull(requestDesc.getAttribute(Globals.KEY_SIZE_ATTR));
+ Assert.assertNotNull(requestDesc.getAttribute(Globals.CERTIFICATES_ATTR));
+ }
+}
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org