Re: [jetty-users] Jetty DoS filter and ELB

[Joakim Erdfelt <joakim@xxxxxxxxxxx>]

Sounds like you haven't enabled/configured the org.eclipse.jetty.server.ForwardedRequestCustomizer

That will take the values from any X-Forwarded headers and use those for the normal internal values.

Joakim Erdfelt / joakim@xxxxxxxxxxx

On Thu, Oct 8, 2015 at 7:04 AM, Pawel Rog <pawelrog88@xxxxxxxxx> wrote:

Hi,

I tried to use Jetty DoS Filter and I have a small problem. I see that DoSFilter.java contains a code which takes remote IP address directly from HTTP request object. This means it sees the last proxy IP address instead of real source IP. ELB (Elastic Load Balancer in AWS EC2) which I use for load balancing adds X-forwarded-for headers to HTTP requests. Is there any reason why DoSFilter is not able to use this value?

--

Paweł Róg

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users