Derek and I discussed this earlier this morning and we think the best
option is to have a new configuration variable instead of bringing back the
old one, something like "proxy.config.,http.redirect.actions STRING".

The string would be of the format "tag[:action],tag[:action],...".

The tag would be one of the enumerations

*  private : Private (non-routable, RFC-1918) addresses.
* loopback: Loopback address (all of 127/8 and IPv6 loopback)
* multicast: Multicast address
* link-local: IPv6 link local address
* routable: Globally routable address.
* self: Addresses assigned to this host.

The action must be one of

* follow: Internally follow the redirect up to the maximum count.
* return: Do not process the redirect, send it as the proxy response.
* reject: Do not process the redirect, send a 403 as the proxy response.

or omitted, in which case it is treated as "follow", although Derek would
prefer to require the action in all cases.

If a tag is omitted, it is treated as if it were "tag:return".

This provides very fine grained control. The default would be
"routable:follow", which means "follow routable redirects, return all other
redirects".

Reply via email to