Valve config
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="127.0.0.1"
remoteIpHeader="x-forwarded-for"
remoteIpProxiesHeader="x-forwarded-by"
protocolHeader="x-forwarded-proto" />
What private subnet applies to your ELB?
ELB is in the same subnet as the EC2 instance where Guacamole is installed.
On Tue, 24 Oct 2023 at 19:13, Michael Jumper <[email protected]> wrote:
> What does your valve configuration look like in your Tomcat's server.xml?
>
> What private subnet applies to your ELB?
>
> - Mike
>
> On 10/24/2023 5:32 AM, Maciej Konigsman wrote:
> > Hi,
> >
> > I'm having a similar problem but my case is as follows
> > AWS Elastic LB (443) -> EC2 Nginx (443) -> EC2 Guacamole (8080)
> > Guacamole 1.5.3 not containerised.
> >
> > I configured Nginx and Tomcat according to this instruction
> >
> https://guacamole.apache.org/doc/gug/reverse-proxy.html#setting-up-the-remote-ip-valve
> <
> https://guacamole.apache.org/doc/gug/reverse-proxy.html#setting-up-the-remote-ip-valve
> >
> >
> > However, it shows private IP of the ELB not the remote host.
> > In catalina.out I'm getting:
> > ..... o.a.g.r.auth.AuthenticationService - User "<user_name>"
> > successfully authenticated from [<remote host>, <ELB private IP address>]
> > It seems that guacamole history picks up the last IP address which is
> > not the one I would expect to be used.
> >
> > Any suggestions?
> >
> > Thanks,
> > Maciek
> >
> >
> > On Mon, 14 Aug 2023 at 15:14, Nick Couchman <[email protected]
> > <mailto:[email protected]>> wrote:
> >
> > On Mon, Aug 14, 2023 at 8:37 AM Martin Vancl <[email protected]
> > <mailto:[email protected]>> wrote:
> > >
> > > I'm sorry. That was my mistake.
> > > Now it's working. Thank you :-)
> >
> > Great, glad you got it sorted. Thanks for posting the solution.
> >
> > -Nick
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > <mailto:[email protected]>
> > For additional commands, e-mail: [email protected]
> > <mailto:[email protected]>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>
