X-Forwarded-For does not seem to work

Hi there, I am running XWiki (xwiki:17.0.0-mysql-tomcat) as a Docker Swarm stack with SSL termination over HAProxy. The “only” problem I have is that the IP address in the logs is the internal IP of the HAProxy load balancer, so it seems to me that the X-Forwarded HTTP header stuff is not dealt with correctly.

The forwarding works of other services so I think it might be a misconfiguration of XWiki on my side. How can show/debug the HTTP header received by Tomcat?

The only related logger I found is apache.http.header but not sure if it’s the correct one. I don’t see any additional output in the logs if I set it to “trace”. I also checked the logs in /usr/local/tomcat/logs

Logger "org.apache.http.headers" level has been set to "TRACE".

Edit: just to make it clear, I am aware that the tomcat logs probably show the IP address from the layer 7 connection but I have not seen any traces of the original IP address in any other logs yet, that’s why I am asking :wink: Usually one has to set the load balancer’s IP address as trusted as well

I just realised that I accidentally posted this in "Development’. Could someone please move it to “Help / Discuss”?

done, thx

1 Like