Wow, that will be great. And I think that many people would like this to be implemented! I volunteer to test this!
Also, with many people fronting that machines with cloudflare / load balancers, I think demand will increase for this. I could just write a valve to replace the mod_cloudflare module that I used in apache (mod cloudflare is mod_remoteip with settings predefined). Regards, Harrie -----Oorspronkelijk bericht----- Van: Christopher Schultz [mailto:ch...@christopherschultz.net] Verzonden: 09 January 2018 00:25 Aan: users@tomcat.apache.org Onderwerp: Re: internalProxies regex -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Harrie, On 1/5/18 3:47 AM, Harrie Robins wrote: > our tomcat application server are fronted by 1. cloudflare, and 2. > amazon load balancer. In apache there is mod_remote IP and I can > simply put in CIDR range: https://www.cloudflare.com/ips/ that will > swallow all those IP and will get the correct IP to tomcat. > > In Tomcat I need > https://tomcat.apache.org/tomcat-8.5-doc/api/org/apache/catalina/valve s/RemoteIpValve.html > > which does not accept CIDR range however. Have a look at this: https://bz.apache.org/bugzilla/show_bug.cgi?id=51953 It was never merged into Tomcat, but if it got some additional interest and testing, perhaps it could be added. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJRBAEBCAA7FiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlpT/ccdHGNocmlzQGNo cmlzdG9waGVyc2NodWx0ei5uZXQACgkQHPApP6U8pFg12BAAlFadAURWxtWOlFZr PT3vWgWBqnaEuqpLVA+S70+PbgAMI9sQkIMQsBHwMvKh4GGkOis+UxY+OAI6UskH F4093hXWIGHyNgJXy+mRU9f/vrVDgonMjxqj8XELUQzjtw7rjlxYhrTYyuZII9S5 S6v7XF0eNXz0xSC00Xz5SCi53CrDefThLEnok0gMFwmtKZS62HGS4RT2m6NDzNwR 6Vy0Cs3CKB7q782WIFEk/6gyoDKKsjw2g81tGrwA4Bx1B7KjfXYoCHPUhPH06Bjg rnDwQRguYfWrI3Gcoq8w8WAnFp4iswoHuqaS/fTMM2Xgk8t2h7oLj8moN0oOB1ns MzAzU1IE2sT/VoTnu0J9l+yA/twiow77z6N1jb96k+Q56XO70pLmGXdMiz+NiRso eyQvDoZ9gOW6rMo1x/mhtMDnD0R5nL2pKAv+HT2fENye36UXO9UgDE8TeFMAyjfB +QVIogeFqZYLk+B+XzxbSaQAXt6R0nqxgRdLYHPg/TjrOB7YuupjZH4Fu/BZOMnX SGZXurWCnQYVGxBcqBO+o6XRLwsv1aGtzraTYxPAEF48R4VhtUPATnBV0jXvxPAw 4yfrBm2L1hhifB3EC0mr0sbgmF6DxussRnu4RinqxsAR2dkoQwFOpwBqxf7IZ19B Ow8OG5Lx6xTykvfPAesAI5/awGM= =LLlx -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
