Well,
I have some partially good news: There is a way around that using
Apache. I'm also using it as a proxy, to concentrate all the services on
the standard HTTP port while keeping different Orion instances running,
and as some of our security requirements take into account the IP from
the client, so I run onto the same problem. I queried the mod_proxy
list and I got a patch that includes, as an extra HTTP header, the
client original IP. This solves the problem for our own custom
authentication, as we check first if this header is available or not, if
it is, then we check the IP agains this value.
The problem here would be if you use some authentication mechanism that
you cannot modify so it checks for this extra header.
Here it is, the URL I was given and from where you can download the
patch: http://develooper.com/code/mpaf/
I hope this helps,
D.
elephantwalker wrote:
>
> Andre,
>
> Sorry, but the loadbalancer.jar has the same problem. For example, the
> access logs for the various orion servers only report the ip of the
> loadbalancer...not very interesting.
>
> Regards,
>
> the elephantwalker
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Andre Vanha
> Sent: Tuesday, June 05, 2001 12:55 PM
> To: Orion-Interest
> Subject: RE: getRemoteAddr() - APACHE as proxy !!
>
> I've run into the same problem. I don't think there is any way around this,
> since the Apache module is a simple proxy.
> It would be necessary to improve the Apache plugin to send some extra
> headers, and then have orion interpret them.
> However without an open API through which to construct the HTTP requests
> coming into orion, you would have to interpret these headers in your own
> code.
>
> One possible avanue is Orion's load balancer. I haven't had a chance to
> test it, but does it suffer from the same problem?
> It may already have an API that allows it to pass through the original IP
> address (and other info) to the actual server, which could be emulated by a
> web server plugin.
>
> Andre
>
> -----Original Message-----
> From: Eddie [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 05, 2001 10:30 AM
> To: Orion-Interest
> Subject: Re: getRemoteAddr() - APACHE as proxy !!
>
> OK,
> In the meantime I found out what is wrong:
> I am using apache as a proxy server, and therefore I do get the IP address
> of the server.
> How can I overcome this ?? Such that getRemoteAddr() does return the
> client's IP address in my servlets.
>
> Eddie
>
> ----- Original Message -----
> From: Eddie <mailto:[EMAIL PROTECTED]>
> To: Orion-Interest <mailto:[EMAIL PROTECTED]>
> Sent: Tuesday, June 05, 2001 2:12 PM
> Subject: getRemoteAddr()
>
> Hellu there,
>
> If I use getRemoteAddr() to get the IP address of the client the makes the
> servlet requests it return the IP address of the server ?? (also
> getRemoteHost() returns the server name).
>
> Any idea how come ??
> I am running jdk 1.3 and the servlets run on the application server Orion
> 1.5.1
> (OS: Linux redhat 7.0)
>
> (I can remember that a JSP on JSERv on apache didn't had this problem, so I
> quess it's Orion .. not ??)
>
> Eddie
