I have an Apache server serving only HTTP requests on port 80 and an stunnel daemon on the same server listening on port 443 and tunneling HTTPS requests to Apache. Is there a way for the client IP to be passed on to Apache so that I can capture and log that instead of the IP of stunnel, which in this case is 127.0.0.1? Ability to add a variable to the HTTP header would be perfect, but any other suggestions to solve this problem are welcome.
Thanks! Stoyan
You are looking for the X-Forwarded-for HTTP header. This is not officially supported by Stunnel but there are patches around for several versions.
Guillermo
El viernes, 7 de julio de 2017, Stoyan Stoyanov stoyansbg@gmail.com escribió:
I have an Apache server serving only HTTP requests on port 80 and an stunnel daemon on the same server listening on port 443 and tunneling HTTPS requests to Apache. Is there a way for the client IP to be passed on to Apache so that I can capture and log that instead of the IP of stunnel, which in this case is 127.0.0.1? Ability to add a variable to the HTTP header would be perfect, but any other suggestions to solve this problem are welcome.
Thanks! Stoyan
I was hoping to avoid building from source, but if it's not supported I guess I'll have to do it.
Thanks, Stoyan
On Thu, Jul 6, 2017 at 4:36 PM, Guillermo Rodriguez Garcia < guille.rodriguez@gmail.com> wrote:
You are looking for the X-Forwarded-for HTTP header. This is not officially supported by Stunnel but there are patches around for several versions.
Guillermo
El viernes, 7 de julio de 2017, Stoyan Stoyanov stoyansbg@gmail.com escribió:
I have an Apache server serving only HTTP requests on port 80 and an stunnel daemon on the same server listening on port 443 and tunneling HTTPS requests to Apache. Is there a way for the client IP to be passed on to Apache so that I can capture and log that instead of the IP of stunnel, which in this case is 127.0.0.1? Ability to add a variable to the HTTP header would be perfect, but any other suggestions to solve this problem are welcome.
Thanks! Stoyan
-- Guillermo Rodriguez Garcia guille.rodriguez@gmail.com