Uploaded image for project: 'Cloud Enablement'
  1. Cloud Enablement
  2. CLOUD-2055

[EAP7] Configure proxy-address-forwarding="true" by default so that HttpServletRequest.getRemoteHost() returns client IP address instead of the OpenShift HAProxy router address

    XMLWordPrintable

Details

    • Release Notes
    • Hide
      Feature: proxy-address-forwarding is now enabled by default in standalone-openshift.xml
      Reason: HTTP requests to EAP instance typically go via OpenShift HAProxy Router. Calling HttpServletRequest.getRemoteHost in this case would return the address of the HAProxy router, instead of the original client
      Result: HttpServletRequest.getRemoteHost() now returns the IP address of the original client for HTTP requests going via OpenShift HAProxy
      Show
      Feature: proxy-address-forwarding is now enabled by default in standalone-openshift.xml Reason: HTTP requests to EAP instance typically go via OpenShift HAProxy Router. Calling HttpServletRequest.getRemoteHost in this case would return the address of the HAProxy router, instead of the original client Result: HttpServletRequest.getRemoteHost() now returns the IP address of the original client for HTTP requests going via OpenShift HAProxy
    • CLOUD Maintenance Sprint 12

    Description

      To be consistent with the JWS and EAP6 images behavior, EAP7 should configure undertow proxy-address-forwarding by default

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. CLOUD-3393 HttpServletResponse.getRemoteHost() does not return client IP address

          • Critical - To be worked on immediately following BLOCKER issues.
          • New

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-17717 HttpServletResponse.getRemoteHost() does not return client IP address

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) CLOUD-2152 [tracker] Sprint 12 release

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) CLOUD-2024 [EAP6] Enable RemoteIPValve by default

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              wdecoste1@redhat.com William Decoste (Inactive)
              maschmid@redhat.com Marek Schmidt
              Marek Schmidt Marek Schmidt
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: