Sitemap

Amicuk Programming Answers

Forward/reverse proxy chain losing headers

-0001-11-30   Views:1

Advertisement

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h

I have the following setup:
user(browser) -> proxy1 -> proxy2 -> webserver
This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current header string . I use
const char *HEADERS = "full-headers"; //HEADER NAME
pblock_findval((char *)HEADERS, request->reqpb))
pblock_remove((char *)HEADERS, request->reqpb);
pblock_nvinsert((char *)HEADERS, (char*)"current list of NV pairs, uid: user123", request->reqpb);
In the previous proxy versions to 3.63, the second proxy and teh webserver receive my entire header string(full-headers) without any issue and just as I sent it.
With version 3.63, my UID is missing from the "
Protocol Request PB (rq->reqpb)" section along with some other info in my header string. I use sdump to view the headers, plus my backend app is not receiving the uid.
Has anyone else had the issue of their headers getting mangled, and or missing in Proxy 3.63 ?Or does anyone have any ideas to the issue?

The replay answer
Advertisement
Yep, good catch
There is a bug in the proxy : Proxy 3.6 SP3 removes "Proxy-authenticate:" HTTP header when forwarding requests to other proxies.
This is basically in adherence to RFC2616 clause
13.5.1 End-to-end and Hop-by-hop Headers:
For the purpose of defining the behavior of caches and non-caching
proxies, we divide HTTP headers into two categories:
- End-to-end headers, which are transmitted to the ultimate
recipient of a request or response. End-to-end headers in
responses MUST be stored as part of a cache entry and MUST be
transmitted in any response formed from a cache entry.
- Hop-by-hop headers, which are meaningful only for a single
transport-level connection, and are not stored by caches or
forwarded by proxies.
The following HTTP/1.1 headers are hop-by-hop headers:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailers
- Transfer-Encoding
- Upgrade
All other headers defined by HTTP/1.1 are end-to-end headers.
This somehow messed up the proxy chain configurations
This has been fixed in SP4 which will be released in a week or two
Thx
Maneesh

Go to See the other 6 answers

Forward/reverse proxy chain losing headers

Category:DefaultRelease time:-0001-11-30Views:130

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h[More]

Issue in configuring TMG as Forward/Reverse Proxy

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: 10.2.1.0/24 10.3.1.0/24 DMZ (Perimeter) Network: 10.7.1.0/24   NAT relationship with external network e.g. Public IPs I've setup one TMG node[More]

Forward parameters in reverse proxy configuration

Category:DefaultRelease time:-0001-11-30Views:130

Hi, Looking at the detailed configuration in a reverse proxy rule in SJSWS, I have derived the following conclusions: 1) Where the SJSWS listener has SSL-enabled, reverse proxy works on a HTTPS in, HTTP out basis. 2) Details in the incoming request's[More]

SJSWS 7 u4 reverse proxy setup with client ip forwarding

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am trying to set up a reverse proxy to glassfish enterprise 2.1 so that it will pass on the client ip address. I have added this line to my obj.conf file: ObjectType fn="forward-ip" hdr="Client-ip" Entire obj.conf below: <Obje[More]

My environment is 99% of the way there, but my ARR reverse proxy doesnt seem to be forwarding lyncdiscover properly. Can someone help?

Category:DefaultRelease time:-0001-11-30Views:130

I recently cut over from lync 2010 with an apache reverse proxy to a lync2013 deployment using microsoft ARR as the reverse proxy. Last night i cut over to the new ARR reverse proxy but our lync 2013 mobility tests didnt go well. I also cant get the[More]

HCI/ECC connection issue with reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Hi, we are struggling to set up the connection from C4C to ECC using a reverse proxy (apache). Thank you for any help! Best Regards Florian Our apache config is as follows: <VirtualHost *:443>   ServerName customer.reverseproxy.com   SSLEngine      [More]

Lync Reverse Proxy Alternatives

Category:DefaultRelease time:2015-10-11Views:130

When migrating from OCS 2007 to Lync 2010, we balked Microsoft’s recommendation to deploy Forefront Threat Management Gateway (or ISA) just to get the reverse proxy services.  TMG is way too expensive and complex for such a limited, simple use case.[More]

Apache as reverse proxy - 400 Bad request

Category:DefaultRelease time:-0001-11-30Views:130

Hi all, I'm configured apache as reverse proxy according to this blog: The Reverse Proxy Series -- Part 3: Apache as a reverse-proxy When I try to navigate http://testcomp/irj I get "400 - Bad request" See exception; <i>Message : User Gues[More]

Reverse proxy setup problems

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup a reverse proxy using iPlanet Web Proxy Server 3.6. I have followed the instructions in the manual which seems pretty straight forward but nothing is happening. I am getting no traffic at all between any of the boxes involved. I[More]

Reverse Proxy Pbm Rewriting Location

Category:DefaultRelease time:-0001-11-30Views:130

Sun Java Web Proxy Server v4.0.7 is running on Windows 2003 Server. The SJWP server is running as a reverse proxy for the following domains: app.example1.com appmgt.example1.com I have configured the SJWP server to use Virtual Multihosting in Reverse[More]

Is this dynamic caching scenario possible with reverse proxy?

Category:DefaultRelease time:-0001-11-30Views:130

I'm considering using the Sun System Java Web Server as a reverse proxy in front of other SSJWS's running a java webapp. I'm creating a dynamic site where most of the pages change only occasionally. I'm wondering if the follow "dream compression/cach[More]

Hot
We would like to announce upcoming training opportunities in Malaysia and Germany for partners and select customers on Text Data Processing within the upcoming Data Services 4.1. Get early hands-on access to software and participate in the review of [More]
Today, my iPhone 6 Plus stopped switching to landscape mode and only works in portrait.  The glitch is even there when watching a video in, say, the CNN or IGN Apps. I know the iPad has a switch to lock the screen rotation, but didn't think the phone [More]
I have iPhoto libraries from 2002 (and possibly other years) burned to CD's that when re-opened in iPhoto show up in the album list but show as 0 photos. Newer burned to disc libraries are available but the old ones are not. The burned photos are ava [More]
I have the above monitor hooked up to a Belkin switch to feed x1 monitor to both Mac and PC. Without the switch, my Mac automatically detects the 1680 x 1050 resolution. How can I manually add this as an option in my display preferences?System Prefer [More]
Hi, How to find postings to an offset account for production orders of a particular cost center. Please reply asap. Thanks and regards, PriyajitHi Friend, Go to Following report S_ALR_87013643 Enter the relevant Cost Center or Cost Element or Order N [More]
Does anyone know of another source for the PMG4 MDD Power Supply? When I press the power button to turn it on, nothing happens. Yes, I have reset the PMU, replaced the battery, left it unplugged overnight, and still nothing at all, no lights noises o [More]
Hi, why I can't watch the any 320x240 videos anymore after I update my Nokia Asha 306 to V7.42? And why there are no more Social app after I update the phone? I hope Nokia will make a new update for all Nokia Asha full touch with a better improvement [More]
Hi I have tried to find the answer to my question here but was not successful. I am going to buy a Nokia Asha 300 phone soon in the UK but I need it with Polish settings. I know this device does not support this language by defaul if bought in Englan [More]
I cant video chat on ichat with people, the tab pops up and says "there is already an application in use that is using the camera." however, there is nothing else on my computer. What should I do?Hi, Use this Article to Reset the SMC/PMU http:// [More]
Hi, If we have an order or delivery created using the standard create IDOC then how does the changes happen using the another standard change IDOC. The problem i am  facing is as follows: we have a flat file which maps to create IDOC, The same flat f [More]