Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-23 Thread Yann Nicolas
Hello, I created an issue for this: https://issues.apache.org/bugzilla/show_bug.cgi?id=56181 Regards, Yann Nicolas 2014-02-21 3:15 GMT-06:00 Mark Thomas ma...@apache.org: On 21/02/2014 05:32, Yann Nicolas wrote: Of course I can put a filter in my web application to do search the

Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-21 Thread André Warnier
Yann Nicolas wrote: Hello, I have a web application load balanced in an intranet and I need to get the hostname of the client from the request (for audit purposes). I have verified that the load balancer is adding the header x-forwarded-for and I get the correct client IP with the

Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-21 Thread Mark Thomas
On 21/02/2014 05:32, Yann Nicolas wrote: Of course I can put a filter in my web application to do search the hostname from the remote IP using java.net.InetAddress for example but I was wondering if a Tomcat native solution exists. There isn't. Please create a Bugzilla issue for this. If

Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-21 Thread Yann Nicolas
Thanks a lot André and Mark, I understand your advice on performance degradation due to reverse DNS. It makes sense to me to disable the lookups at Tomcat level and search for the hostname asynchronously when storing logs (we store audit in DB, then it makes even more sense do this async). I will

Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Yann, On 2/21/14, 8:53 AM, Yann Nicolas wrote: Thanks a lot André and Mark, I understand your advice on performance degradation due to reverse DNS. It makes sense to me to disable the lookups at Tomcat level and search for the hostname

Re: Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-21 Thread Yann Nicolas
Hello, I agree, it doesn't make sense to do DNS resolution on proxy IPs. What I mean is that I do not think it is possible to implement a logic in Tomcat that does the reverse DNS on the IP of the client (or proxy) only if there is no information in the x-forwarded-for header, this is done in

Tomcat 7 8 getRemoteHost with enableLookups=true with x-forwarded-for header gets IP instead of hostname

2014-02-20 Thread Yann Nicolas
Hello, I have a web application load balanced in an intranet and I need to get the hostname of the client from the request (for audit purposes). I have verified that the load balancer is adding the header x-forwarded-for and I get the correct client IP with the HttpServletRequest method