Re: [squid-users] Reverse proxy tracking source IP's
configure squid in httpd_accelerator mode and it will give the X_Forwarded_For header to your web server unless to set it up to anonymize such a feature Original message Date: Mon, 8 Sep 2003 09:49:45 -0700 From: robert schwartz [EMAIL PROTECTED] Subject: [squid-users] Reverse proxy tracking source IP's To: [EMAIL PROTECTED] I have an interesting problem, we have to reverse proxy incoming web requests to an application that needs to know the end-user's IP address. This is for security not for performance, so there's no need to cache the actuall results. Our current proxy software cannot communicate this information to the backend web server (every requests looks like its coming from the proxy server obviously), and I was wondering if SQUID can do this? It would be like forwarded_for for reverse proxy so that there's something in the header the destination web server can read that tells it the requesting client's real IP address. Is there a patch or a well-known config option that has elluded my googling and MARC searching that presents the requestor's IP address to the accelerated server? TIA Robert
[squid-users] Reverse proxy tracking source IP's
I have an interesting problem, we have to reverse proxy incoming web requests to an application that needs to know the end-user's IP address. This is for security not for performance, so there's no need to cache the actuall results. Our current proxy software cannot communicate this information to the backend web server (every requests looks like its coming from the proxy server obviously), and I was wondering if SQUID can do this? It would be like forwarded_for for reverse proxy so that there's something in the header the destination web server can read that tells it the requesting client's real IP address. Is there a patch or a well-known config option that has elluded my googling and MARC searching that presents the requestor's IP address to the accelerated server? TIA Robert
Re: [squid-users] Reverse proxy tracking source IP's
On Monday 08 September 2003 18.49, robert schwartz wrote: It would be like forwarded_for for reverse proxy so that there's something in the header the destination web server can read that tells it the requesting client's real IP address. Well.. this IS X-Forwarded-For. No need to patch or change anything, just make your application read the X-Forwarded-For header. (or X_FORWARDED_FOR CGI variable). Regards Henrik -- Donations welcome if you consider my Free Squid support helpful. https://www.paypal.com/xclick/business=hno%40squid-cache.org If you need commercial Squid support or cost effective Squid or firewall appliances please refer to MARA Systems AB, Sweden http://www.marasystems.com/, [EMAIL PROTECTED]
