Amicuk Programming Answers

Forward/reverse proxy chain losing headers

-0001-11-30   Views:1


I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h

I have the following setup:
user(browser) -> proxy1 -> proxy2 -> webserver
This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current header string . I use
const char *HEADERS = "full-headers"; //HEADER NAME
pblock_findval((char *)HEADERS, request->reqpb))
pblock_remove((char *)HEADERS, request->reqpb);
pblock_nvinsert((char *)HEADERS, (char*)"current list of NV pairs, uid: user123", request->reqpb);
In the previous proxy versions to 3.63, the second proxy and teh webserver receive my entire header string(full-headers) without any issue and just as I sent it.
With version 3.63, my UID is missing from the "
Protocol Request PB (rq->reqpb)" section along with some other info in my header string. I use sdump to view the headers, plus my backend app is not receiving the uid.
Has anyone else had the issue of their headers getting mangled, and or missing in Proxy 3.63 ?Or does anyone have any ideas to the issue?

The replay answer
Yep, good catch
There is a bug in the proxy : Proxy 3.6 SP3 removes "Proxy-authenticate:" HTTP header when forwarding requests to other proxies.
This is basically in adherence to RFC2616 clause
13.5.1 End-to-end and Hop-by-hop Headers:
For the purpose of defining the behavior of caches and non-caching
proxies, we divide HTTP headers into two categories:
- End-to-end headers, which are transmitted to the ultimate
recipient of a request or response. End-to-end headers in
responses MUST be stored as part of a cache entry and MUST be
transmitted in any response formed from a cache entry.
- Hop-by-hop headers, which are meaningful only for a single
transport-level connection, and are not stored by caches or
forwarded by proxies.
The following HTTP/1.1 headers are hop-by-hop headers:
- Connection
- Keep-Alive
- Proxy-Authenticate
- Proxy-Authorization
- TE
- Trailers
- Transfer-Encoding
- Upgrade
All other headers defined by HTTP/1.1 are end-to-end headers.
This somehow messed up the proxy chain configurations
This has been fixed in SP4 which will be released in a week or two

Go to See the other 6 answers

Forward/reverse proxy chain losing headers

Category:DefaultRelease time:-0001-11-30Views:130

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h[More]

Issue in configuring TMG as Forward/Reverse Proxy

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: DMZ (Perimeter) Network:   NAT relationship with external network e.g. Public IPs I've setup one TMG node[More]

Forward parameters in reverse proxy configuration

Category:DefaultRelease time:-0001-11-30Views:130

Hi, Looking at the detailed configuration in a reverse proxy rule in SJSWS, I have derived the following conclusions: 1) Where the SJSWS listener has SSL-enabled, reverse proxy works on a HTTPS in, HTTP out basis. 2) Details in the incoming request's[More]

SJSWS 7 u4 reverse proxy setup with client ip forwarding

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am trying to set up a reverse proxy to glassfish enterprise 2.1 so that it will pass on the client ip address. I have added this line to my obj.conf file: ObjectType fn="forward-ip" hdr="Client-ip" Entire obj.conf below: <Obje[More]

My environment is 99% of the way there, but my ARR reverse proxy doesnt seem to be forwarding lyncdiscover properly. Can someone help?

Category:DefaultRelease time:-0001-11-30Views:130

I recently cut over from lync 2010 with an apache reverse proxy to a lync2013 deployment using microsoft ARR as the reverse proxy. Last night i cut over to the new ARR reverse proxy but our lync 2013 mobility tests didnt go well. I also cant get the[More]

HCI/ECC connection issue with reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Hi, we are struggling to set up the connection from C4C to ECC using a reverse proxy (apache). Thank you for any help! Best Regards Florian Our apache config is as follows: <VirtualHost *:443>   ServerName   SSLEngine      [More]

Lync Reverse Proxy Alternatives

Category:DefaultRelease time:2015-10-11Views:130

When migrating from OCS 2007 to Lync 2010, we balked Microsoft’s recommendation to deploy Forefront Threat Management Gateway (or ISA) just to get the reverse proxy services.  TMG is way too expensive and complex for such a limited, simple use case.[More]

Apache as reverse proxy - 400 Bad request

Category:DefaultRelease time:-0001-11-30Views:130

Hi all, I'm configured apache as reverse proxy according to this blog: The Reverse Proxy Series -- Part 3: Apache as a reverse-proxy When I try to navigate http://testcomp/irj I get "400 - Bad request" See exception; <i>Message : User Gues[More]

Reverse proxy setup problems

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup a reverse proxy using iPlanet Web Proxy Server 3.6. I have followed the instructions in the manual which seems pretty straight forward but nothing is happening. I am getting no traffic at all between any of the boxes involved. I[More]

Reverse Proxy Pbm Rewriting Location

Category:DefaultRelease time:-0001-11-30Views:130

Sun Java Web Proxy Server v4.0.7 is running on Windows 2003 Server. The SJWP server is running as a reverse proxy for the following domains: I have configured the SJWP server to use Virtual Multihosting in Reverse[More]

Is this dynamic caching scenario possible with reverse proxy?

Category:DefaultRelease time:-0001-11-30Views:130

I'm considering using the Sun System Java Web Server as a reverse proxy in front of other SSJWS's running a java webapp. I'm creating a dynamic site where most of the pages change only occasionally. I'm wondering if the follow "dream compression/cach[More]

We have posted the updated A03 version of the video driver.   If you are having video problems on your 713x, please update to this latest driver ASAP. [More]
I have an iPhone 4 and my Apple Component Cables no longer work. I have had an iPhone 3G since July 2008, and a first gen iPod Touch. They both have and continue to work with the cables. I have the Component cables hooked up to an Apple universal doc [More]
Over the last few days, I experienced a few call related problems: 1. Calls made and the caller can't hear me but I could hear them. 2. Calls made and I couldn't hear the ringing tone but the receiver's phone rang. 3. Calls received and I can't hear [More]
Hi , I need to change one of my  database collation . Actually the server collation and database collation is differently . I dont want to change server level collation. I want to change only database collation . Please let me know the various method [More]
I have a field that can have up to 5 deciaml value like 0.12345..  But if the amount is 0.12300 i want to remove the trailling zeros so i would get 0.123 on my report. I have a formula for crystal report but i cant put the 'if' condition in BO Report [More]
Sorry if my questions sems stupid... But I added the BPM info but... - I can't complete it by myself, - I don't know (and couldn't find the answer on itunes help!) how to have itunes do it automatic Thanks in advance for your help!As far as I know th [More]
How to move back microsoft in the original folder?Microsoft Office? The applications themselves go into Applications>Microsoft Office 2011. Why did you move them? You may need to install anew if you've moved the applications in the suite. ClintonRead [More]
Dear Sir, I cannot use a new i-phone 4s in Bangladeshi Netwark. Because this set is country locak shown.Please you help me to unlock my 16 GB iphone 4s White set operate in Bangladesh with out any charges then I am very much pleased to your kindness. [More]
Hi, I created a profile with the following parameters for the new users SESSIONS_PER_USER 3 CPU_PER_SESSION 2000 CPU_PER_CALL 2000 CONNECT_TIME 1 IDLE_TIME 2 My question is: How know if my query is consuming more than 20 seconds processor time? thank [More]
I am getting an error message when I try to import photos from my iphone 4. I had no problem previously. The message states a specific file name for the photo, but I cannot find a way to make iphoto show me photo names on my phone. I don't think it i [More]