[ 
https://issues.apache.org/jira/browse/FELIX-5750?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16264446#comment-16264446
 ] 

Konrad Windszus commented on FELIX-5750:
----------------------------------------

There is a gap though between those two:
The original default of the SSL Filter (i.e. header {{X-Forwarded-SSL: on}} is 
not supported by Jetty
Neither is {{X-Forwarded-Protocol: https}} nor is
{{Front-End-Https: on}}

All those headers are listed in FELIX-4330.
The documentation should point out those differences and in the best case there 
should be support for those in Jetty natively as well.

> Clarify relation of "Enable Proxy/Load Balancer Connection" Jetty feature and 
> SSL Filter
> ----------------------------------------------------------------------------------------
>
>                 Key: FELIX-5750
>                 URL: https://issues.apache.org/jira/browse/FELIX-5750
>             Project: Felix
>          Issue Type: Bug
>          Components: Documentation
>    Affects Versions: http.jetty-3.2.0
>            Reporter: Konrad Windszus
>
> With the addition of FELIX-5207 (documented in 
> http://www.eclipse.org/jetty/javadoc/9.4.7.v20170914/org/eclipse/jetty/server/ForwardedRequestCustomizer.html)
>  and the SSL Filter (described in 
> http://felix.apache.org/documentation/subprojects/apache-felix-http-service.html#ssl-filter-configuration-properties
>  and 
> http://felix.apache.org/documentation/subprojects/apache-felix-http-service.html#using-the-ssl-filter)
>  it seems that there are two different mechanisms in place to actually 
> achieve the same. Please clarify in the documentation how these two relate 
> and which one to choose for which use case. Even the SSL filter allows to 
> configure the headers since https://issues.apache.org/jira/browse/FELIX-4330.
> There is only the small line in the documentation:
> Note: instead of deploying the SSL filter bundle, you can also set the 
> org.apache.felix.proxy.load.balancer.connection.enable property to true in 
> order to achieve the same effect.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to