Re: [*EXT*] Re: Public-facing haproxy : recommandation about headers

2023-12-09 Thread Tristan
> On 8 Dec 2023, at 22:38, Ionel GARDAIS > wrote: > > What about using %[hdr(host,1)] to forcefully use the first Host header if > multiple headers are sent ? I just deny requests with multiple Host headers with an error message telling clients to fix their stuff, personally. But yes, that

Re: [*EXT*] Re: Public-facing haproxy : recommandation about headers

2023-12-09 Thread Shawn Heisey
On 12/8/23 14:35, Ionel GARDAIS wrote: Thanks Tristan. So typically I’d say to add to every single http frontend: > http-request set-header X-Forwarded-For %[src] http-request set-header X-Forwarded-Host %[hdr(Host)] http-request set-header X-Forwarded-Proto %[ssl_fc,iif(https,http)] http-re