ChrisSamo632 commented on code in PR #11419:
URL: https://github.com/apache/nifi/pull/11419#discussion_r3562125348


##########
nifi-docs/src/main/asciidoc/administration-guide.adoc:
##########
@@ -2732,7 +2732,12 @@ X-ProxyPort - the port the proxy is listening on
 X-ProxyContextPath - the path configured to map to the NiFi instance
 ....
 
-* If NiFi is running securely, any proxy needs to be authorized to proxy user 
requests. These can be configured in the NiFi UI through the Global Menu. Once 
these permissions are in place, proxies
+* NiFi expects a single host or host and port combination in `X-ProxyHost` or 
`X-Forwarded-Host` header values. When routing requests through multiple 
servers, some proxy servers append to existing
+values, producing a comma-separated string composed of multiple hosts. NiFi 
rejects comma-separated values with an `HTTP 421` status. Reverse proxy servers 
must be configured to disable appending to
+existing values, or unset input values before forwarding requests. Servers as 
such Apache HTTP 
link:https://httpd.apache.org/docs/2.4/mod/mod_proxy.html[mod_proxy] should set 
`ProxyAddHeaders` to

Review Comment:
   ```suggestion
   existing values, or unset input values before forwarding requests. Servers 
such as Apache HTTP 
link:https://httpd.apache.org/docs/2.4/mod/mod_proxy.html[mod_proxy] should set 
`ProxyAddHeaders` to
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to