Modified X-Forward-For header does not show up in logsHAProxy check says server is down when it is uphaproxy and forwarding client IP address to serversHAProxy in front of Varnish not setting X-FORWARDED-FORHaproxy not properly passing on X-Forwarded-For headerHAproxy drops data on the floor when client disconnects immediately after sending dataNagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd siteHAProxy not logging all requestsHAProxy check does not check content on IISHAproxy 503 Service UnavailableHow to add response headers with HAproxy 1.6 based on request URI?
Exactly which act of bravery are Luke and Han awarded a medal for?
How can one see if an address is multisig?
Why did Missandei say this?
Should one save up to purchase a house/condo or maximize their 401(k) first?
Steganography in Latex
Do oversize pulley wheels increase derailleur capacity?
Examples where existence is harder than evaluation
Capturing the entire webpage with WebExecute's CaptureImage
What are these pads?
Magical Modulo Squares
How long can fsck take on a 30 TB volume?
Why does this pattern in powers happen?
Does this website provide consistent translation into Wookiee?
And now you see it II (the B side)
My Sixteen Friendly Students
Is your maximum jump distance halved by grappling?
How do I politely tell my players to shut up about their backstory?
My parents are Afghan
How is it believable that Euron could so easily pull off this ambush?
Is there an application which does HTTP PUT?
Creating Stored Procedure in local db that references tables in linked server
Employee is self-centered and affects the team negatively
Using mean length and mean weight to calculate mean BMI?
What should I use to get rid of some kind of weed in my onions
Modified X-Forward-For header does not show up in logs
HAProxy check says server is down when it is uphaproxy and forwarding client IP address to serversHAProxy in front of Varnish not setting X-FORWARDED-FORHaproxy not properly passing on X-Forwarded-For headerHAproxy drops data on the floor when client disconnects immediately after sending dataNagios check_http gives 'HTTP/1.0 503 Service Unavailable' for HAProxy'd siteHAProxy not logging all requestsHAProxy check does not check content on IISHAproxy 503 Service UnavailableHow to add response headers with HAproxy 1.6 based on request URI?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I am running a haproxy behind the aws ALB. In order to prevent logging spoofed IP addresses in the haproxy we are modifying the X-Forward-For header taking the last IP only from the list using:
http-request replace-header X-Forwarded-For (S+)$ 1
I am capturing the request header X-Forwarded-For in order to log it's value but when I test the request with the following command :
curl --header "X-Forwarded-For: 118.118.118.118, 118.118.118.117, 118.118.118.116, 118.118.118.115" https://login.example.com/
In the logs I see the following:
Apr 29 13:43:00 prod-nv-front-01 haproxy[21812]: 172.21.0.30:34396 - - GMT:29/Apr/2019:13:43:00 +0000 body:118.118.118.118, 118.118.118.117, 118.118.118.116, GET / HTTP/1.1 HTTP/1.1 200 2958 "" "" 34396 680 jetty-front-80 jetty-front-servers prod-nv-front-01 0 0 0 0 --NI 1 1 1 0 0 0 - - 118.118.118.118, 118.118.118.117, 118.118.118.116,
Any way I can make the haproxy log with the actual configured header?
logging haproxy
asked Apr 29 at 13:55
zozo6015zozo6015
164
add a comment |
I am running a haproxy behind the aws ALB. In order to prevent logging spoofed IP addresses in the haproxy we are modifying the X-Forward-For header taking the last IP only from the list using:
http-request replace-header X-Forwarded-For (S+)$ 1
I am capturing the request header X-Forwarded-For in order to log it's value but when I test the request with the following command :
curl --header "X-Forwarded-For: 118.118.118.118, 118.118.118.117, 118.118.118.116, 118.118.118.115" https://login.example.com/
In the logs I see the following:
Apr 29 13:43:00 prod-nv-front-01 haproxy[21812]: 172.21.0.30:34396 - - GMT:29/Apr/2019:13:43:00 +0000 body:118.118.118.118, 118.118.118.117, 118.118.118.116, GET / HTTP/1.1 HTTP/1.1 200 2958 "" "" 34396 680 jetty-front-80 jetty-front-servers prod-nv-front-01 0 0 0 0 --NI 1 1 1 0 0 0 - - 118.118.118.118, 118.118.118.117, 118.118.118.116,
Any way I can make the haproxy log with the actual configured header?
logging haproxy
asked Apr 29 at 13:55
zozo6015zozo6015
164
add a comment |
I am running a haproxy behind the aws ALB. In order to prevent logging spoofed IP addresses in the haproxy we are modifying the X-Forward-For header taking the last IP only from the list using:
http-request replace-header X-Forwarded-For (S+)$ 1
I am capturing the request header X-Forwarded-For in order to log it's value but when I test the request with the following command :
curl --header "X-Forwarded-For: 118.118.118.118, 118.118.118.117, 118.118.118.116, 118.118.118.115" https://login.example.com/
In the logs I see the following:
Apr 29 13:43:00 prod-nv-front-01 haproxy[21812]: 172.21.0.30:34396 - - GMT:29/Apr/2019:13:43:00 +0000 body:118.118.118.118, 118.118.118.117, 118.118.118.116, GET / HTTP/1.1 HTTP/1.1 200 2958 "" "" 34396 680 jetty-front-80 jetty-front-servers prod-nv-front-01 0 0 0 0 --NI 1 1 1 0 0 0 - - 118.118.118.118, 118.118.118.117, 118.118.118.116,
Any way I can make the haproxy log with the actual configured header?
logging haproxy
asked Apr 29 at 13:55
zozo6015zozo6015
164
I am running a haproxy behind the aws ALB. In order to prevent logging spoofed IP addresses in the haproxy we are modifying the X-Forward-For header taking the last IP only from the list using:
http-request replace-header X-Forwarded-For (S+)$ 1
I am capturing the request header X-Forwarded-For in order to log it's value but when I test the request with the following command :
curl --header "X-Forwarded-For: 118.118.118.118, 118.118.118.117, 118.118.118.116, 118.118.118.115" https://login.example.com/
In the logs I see the following:
Apr 29 13:43:00 prod-nv-front-01 haproxy[21812]: 172.21.0.30:34396 - - GMT:29/Apr/2019:13:43:00 +0000 body:118.118.118.118, 118.118.118.117, 118.118.118.116, GET / HTTP/1.1 HTTP/1.1 200 2958 "" "" 34396 680 jetty-front-80 jetty-front-servers prod-nv-front-01 0 0 0 0 --NI 1 1 1 0 0 0 - - 118.118.118.118, 118.118.118.117, 118.118.118.116,
Any way I can make the haproxy log with the actual configured header?
logging haproxy
logging haproxy
asked Apr 29 at 13:55
zozo6015zozo6015
164
asked Apr 29 at 13:55
zozo6015zozo6015
164
edited Apr 29 at 17:13
zozo6015
asked Apr 29 at 13:55
zozo6015zozo6015
164
asked Apr 29 at 13:55
zozo6015zozo6015
164
asked Apr 29 at 13:55
zozo6015zozo6015
164
164
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f965105%2fmodified-x-forward-for-header-does-not-show-up-in-logs%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f965105%2fmodified-x-forward-for-header-does-not-show-up-in-logs%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
