https://bz.apache.org/bugzilla/show_bug.cgi?id=57830

--- Comment #18 from Christopher Schultz <ch...@christopherschultz.net> ---
The PROXY protocol should be "easy" to roll into an existing class: just have a
look at the first few bytes of a request to see if it's got a valid "PROXY"
command in there. If so, validate the source IP (the proxy), set all of the
source IP information (the client's actual IP, port, etc.), and consume the
"PROXY" command so that the following code just sees the raw request.

I'm not familiar enough with the channel-unwrapping internals of Tomcat to know
how best to implement it in the current pipeline. The best I would be able to
do is validate that the patch actually works. Which I have not yet done :(

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to