Amicuk Programming Answers

Forward/reverse proxy chain losing headers

-0001-11-30   Views:1


I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h

I have the following setup:
user(browser) -> proxy1 -> proxy2 -> webserver
This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current header string . I use
const char *HEADERS = "full-headers"; //HEADER NAME
pblock_findval((char *)HEADERS, request->reqpb))
pblock_remove((char *)HEADERS, request->reqpb);
pblock_nvinsert((char *)HEADERS, (char*)"current list of NV pairs, uid: user123", request->reqpb);
In the previous proxy versions to 3.63, the second proxy and teh webserver receive my entire header string(full-headers) without any issue and just as I sent it.
With version 3.63, my UID is missing from the "
Protocol Request PB (rq->reqpb)" section along with some other info in my header string. I use sdump to view the headers, plus my backend app is not receiving the uid.
Has anyone else had the issue of their headers getting mangled, and or missing in Proxy 3.63 ?Or does anyone have any ideas to the issue?

The replay answer
Yep, good catch
There is a bug in the proxy : Proxy 3.6 SP3 removes "Proxy-authenticate:" HTTP header when forwarding requests to other proxies.
This is basically in adherence to RFC2616 clause
13.5.1 End-to-end and Hop-by-hop Headers:
For the purpose of defining the behavior of caches and non-caching
proxies, we divide HTTP headers into two categories:
- End-to-end headers, which are transmitted to the ultimate
recipient of a request or response. End-to-end headers in
responses MUST be stored as part of a cache entry and MUST be
transmitted in any response formed from a cache entry.
- Hop-by-hop headers, which are meaningful only for a single
transport-level connection, and are not stored by caches or
forwarded by proxies.
The following HTTP/1.1 headers are hop-by-hop headers:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailers
- Transfer-Encoding
- Upgrade
All other headers defined by HTTP/1.1 are end-to-end headers.
This somehow messed up the proxy chain configurations
This has been fixed in SP4 which will be released in a week or two

Go to See the other 6 answers

Forward/reverse proxy chain losing headers

Category:DefaultRelease time:-0001-11-30Views:130

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h[More]

Issue in configuring TMG as Forward/Reverse Proxy

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: DMZ (Perimeter) Network:   NAT relationship with external network e.g. Public IPs I've setup one TMG node[More]

Forward parameters in reverse proxy configuration

Category:DefaultRelease time:-0001-11-30Views:130

Hi, Looking at the detailed configuration in a reverse proxy rule in SJSWS, I have derived the following conclusions: 1) Where the SJSWS listener has SSL-enabled, reverse proxy works on a HTTPS in, HTTP out basis. 2) Details in the incoming request's[More]

SJSWS 7 u4 reverse proxy setup with client ip forwarding

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am trying to set up a reverse proxy to glassfish enterprise 2.1 so that it will pass on the client ip address. I have added this line to my obj.conf file: ObjectType fn="forward-ip" hdr="Client-ip" Entire obj.conf below: <Obje[More]

My environment is 99% of the way there, but my ARR reverse proxy doesnt seem to be forwarding lyncdiscover properly. Can someone help?

Category:DefaultRelease time:-0001-11-30Views:130

I recently cut over from lync 2010 with an apache reverse proxy to a lync2013 deployment using microsoft ARR as the reverse proxy. Last night i cut over to the new ARR reverse proxy but our lync 2013 mobility tests didnt go well. I also cant get the[More]

HCI/ECC connection issue with reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Hi, we are struggling to set up the connection from C4C to ECC using a reverse proxy (apache). Thank you for any help! Best Regards Florian Our apache config is as follows: <VirtualHost *:443>   ServerName   SSLEngine      [More]

Lync Reverse Proxy Alternatives

Category:DefaultRelease time:2015-10-11Views:130

When migrating from OCS 2007 to Lync 2010, we balked Microsoft’s recommendation to deploy Forefront Threat Management Gateway (or ISA) just to get the reverse proxy services.  TMG is way too expensive and complex for such a limited, simple use case.[More]

Apache as reverse proxy - 400 Bad request

Category:DefaultRelease time:-0001-11-30Views:130

Hi all, I'm configured apache as reverse proxy according to this blog: The Reverse Proxy Series -- Part 3: Apache as a reverse-proxy When I try to navigate http://testcomp/irj I get "400 - Bad request" See exception; <i>Message : User Gues[More]

Reverse proxy setup problems

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup a reverse proxy using iPlanet Web Proxy Server 3.6. I have followed the instructions in the manual which seems pretty straight forward but nothing is happening. I am getting no traffic at all between any of the boxes involved. I[More]

Reverse Proxy Pbm Rewriting Location

Category:DefaultRelease time:-0001-11-30Views:130

Sun Java Web Proxy Server v4.0.7 is running on Windows 2003 Server. The SJWP server is running as a reverse proxy for the following domains: I have configured the SJWP server to use Virtual Multihosting in Reverse[More]

Is this dynamic caching scenario possible with reverse proxy?

Category:DefaultRelease time:-0001-11-30Views:130

I'm considering using the Sun System Java Web Server as a reverse proxy in front of other SSJWS's running a java webapp. I'm creating a dynamic site where most of the pages change only occasionally. I'm wondering if the follow "dream compression/cach[More]

I have saved a 13,000 photos from my old Mac onto a hard disc, and am now trying to import those photos onto a new Mac computer. When I copied the 2012 iPhoto Library onto my new computer, a prompt came up to tell me that the Library needed to be upd [More]
Just moved my email from Entourage to Mail. Having real problems with getting my signatures to work properly despite sending email as Rich Text. When adding in a small company logo to the signature, PC's / windows computers only receive signature and [More]
Hello! I keep reading that if the subscription is expired or canceled, the files created using the suite are no longer available for use. How is that? I was under the impression that I can locally store all my files. If I transfer my files to someone [More]
I've got Facetime working on my iPhone, Macbook Pro, iPad, but my Mac Pro does not cooperate. When I try to sign in with my Apple ID (the same one I use for the Macbook Pro) I get the following warning: Could not sign in. Please check your network co [More]
Dear Expert we want to control the PO amendment after the down payment against PO , system will not allow to ammend the PO after down payment like after GR we have set an error message , so how can we do the same in the case of Down payment . Regards [More]
In Finder, in the left column, I have several entries under "Places" which do not belong on this MacMini. When I click on them I get the message "The volume for xxxx cannot be found". Nor can I delete them from "places". I al [More]
I've got a site that uses a lot of server-side includes, because the client has a lot of redundant info all over the place. When I edit these includes in Dreamweaver, the best way to handle it is to use my stylesheets at Design-Time (a feature I just [More]
Hi, I wonder if anyone can help me. I've just purchased an NEC MultiSync EA 231WMi LCD monitor to plug into the above MB Pro 17" HiDef via the DVI port. Having read the reviews about this monitor, I was expecting a lovely sharp, crisp image when plug [More]
Hello Experts, My requirement is Whenever User make any Purchase order above certain amount then mail will go to mail-id provided. I had made the workflow but when I am trying to execute it following error is showing up in status bar: Task started un [More]
Although Flash is a web based program and would automically support the RGB colour space; you can still import CMYK images... so is it possible to maintain CMYK colour integrity through to Flash Paper?I have the same issue here.. When Flash 8 in used [More]