Re: X-Forwarder-For - HTTPS

From: Ulric Eriksson (ulric@siag.nu)
Date: Fri Feb 20 2004 - 22:42:37 CET


On Fri, 6 Feb 2004, Erwien Samantha Y wrote:

> Is this possible to grab X-Forwarder-For if client connect to HTTPS
> server?
>
> I've pen 0.12.1 installed already. And X-Forwarder-For is working
> properly. i can catch with adding %{X-Forwarded-For}i in apache
> LogFormat but i think it's only working if client connect via HTTP not
> HTTPS.
>
> So is there any advise ?

The decryption must take place before the load balancer, otherwise there
is no way that pen can do anything with the (encrypted) requests.

        |
     .-----.
     | SSL |
     `-----
        |
     .-----.
     | PEN |
     `-----
        |
------------------
   | |
.------. .------.
| WWW1 | | WWW2 |
`------ `------

Ulric



This archive was generated by hypermail 2.1.2 : Fri Feb 20 2004 - 22:42:48 CET