You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2018/05/15 20:54:26 UTC
[Bug 62377] New: Implement Forwarded header (RFC 7239) in
mod_remoteip
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
Bug ID: 62377
Summary: Implement Forwarded header (RFC 7239) in mod_remoteip
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_remoteip
Assignee: bugs@httpd.apache.org
Reporter: daniel.ramaley@drake.edu
Target Milestone: ---
Would it be difficult to add support for the standard Forwarded header, as
defined by RFC 7239?
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
Dan Risacher <da...@risacher.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |dan@risacher.org
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
c.finizio@cineca.it changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |c.finizio@cineca.it
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
Jay Klehr <ja...@diablomedia.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jay@diablomedia.com
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
Dan Ramaley <da...@drake.edu> changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|normal |enhancement
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
--- Comment #1 from William A. Rowe Jr. <wr...@apache.org> ---
Patches are welcome.
The largest headache is unwinding Forwarded and X-F-F where they coexist
during any transition between the old and new behavior. This is my analysis
documented in the thread to help anyone get started;
https://lists.apache.org/thread.html/9887a4bb16dc09221996ff36e1dc65aa17353f634533c216626c4f7b%40%3Cdev.httpd.apache.org%3E
So I was unspooling how we would handle stacked variables.
Any PROXY protocol is the nearest hop; if multiple PROXY protocol header
lines occurred, the closest would be transmitted first, etc.
All local x-remoteip style values would be the next most distant hop; very
similar to the haproxy protocol, it indicates some absolutely trusted edge
router/balancer.
Any x-f-f that occurs would reflect all the next most distant hops. Finally,
any 'Forwarded' header (rfc7239) are the most distant hops. I'm basing
that conclusion on the fact that all 'Forwarded'-aware intermediaries which
construct a 'Forwarded' header would not carry the x-f-f, but concatenate
these as closer than the nearest 'Forwarded'-aware hop. So the presence
of an x-f-f header indicates the presence of a 'Forwarded'-unaware agent
between this incoming connection and the closest 'Forwarded'-aware agent.
I'm not suggesting these two enhancements, PROXY and RFC7239 are
intertwined, we can certainly ship them in different releases, but I was
having problems working out X-F-F vs Forwarded until I was working
through the PROXY logic and came to the conclusion above, and am
looking for others to sanity-check my logic on this.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 62377] Implement Forwarded header (RFC 7239) in mod_remoteip
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62377
Jan "Yenya" Kasprzak <ka...@fi.muni.cz> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kas@fi.muni.cz
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org