Welcome! Log In Create A New Profile

Advanced

Re: handling x_forwarded_proto with Nginx as backend to HAproxy

Maxim Dounin
April 15, 2013 06:08PM
Hello!

On Mon, Apr 15, 2013 at 10:42:30PM +0100, Francis Daly wrote:

> On Mon, Apr 15, 2013 at 05:35:27PM -0400, jaychris wrote:
>
> Hi there,
>
> > I was using the X_FORWARDED_PROTO header to make some decisions on the
> > backend when I was using Apache, but it doesn't look like Nginx is handling
> > the header currently:
> >
> > client sent invalid header line: "X_FORWARDED_PROTO: http" while reading
> > client request headers,
>
> "_" is not a valid character in a http header.
>
> http://nginx.org/r/ignore_invalid_headers or maybe
> http://nginx.org/r/underscores_in_headers

Strictly speaking, "_" isn't invalid, but it's not something nginx
allows by default due to security problems it might create - as
it's indistinguishable from "-" in CGI-like headers
representation.

It is possible to allow the header in question using directives
mentioned, but better solution would be to use X-Forwarded-Proto
rather than X_FORWARDED_PROTO.

--
Maxim Dounin
http://nginx.org/en/donation.html

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

handling x_forwarded_proto with Nginx as backend to HAproxy

jaychris April 15, 2013 05:35PM

Re: handling x_forwarded_proto with Nginx as backend to HAproxy

Francis Daly April 15, 2013 05:44PM

Re: handling x_forwarded_proto with Nginx as backend to HAproxy

jaychris April 15, 2013 06:03PM

Re: handling x_forwarded_proto with Nginx as backend to HAproxy

Maxim Dounin April 15, 2013 06:08PM

Re: handling x_forwarded_proto with Nginx as backend to HAproxy

Francis Daly April 16, 2013 04:14AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 81
Record Number of Users: 8 on December 15, 2016
Record Number of Guests: 386 on August 02, 2016
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready