I created bug report related to this thread http://redmine.webtoolkit.eu/issues/3497
- Best regards, Boris Nagaev On Sun, Jul 20, 2014 at 12:53 PM, Nagaev Boris <bnag...@gmail.com> wrote: > Hello! > > We forgot to set behind-reverse-proxy = true in wt_config.xml > > I created test: > http://starius.ru:28048/ wthttpd > http://starius.ru:28047/ haproxy > > They now show same IP address. > > Source and haproxy config: https://bitbucket.org/starius/wtip/src > > - > Best regards, > Boris Nagaev > > > On Sun, Jul 20, 2014 at 5:52 AM, Jeffrey Scott Flesher Gmail > <jeffrey.scott.fles...@gmail.com> wrote: >> Thanks but app->environment().clientAddress() is still returning the servers >> IP address, I put this under the frontend, is that correct? >> >> frontend wt >> >> bind 108.59.251.28:80 # I have two IP address (SSL) >> option http-server-close >> reqidel ^Client-IP:.* >> reqidel ^X-Forwarded-For:.* >> option forwardfor >> >>> I dunno what http-server-close is needed for, maybe it is unrelated here. >>>> from link below: BTW, you should replace "option httpclose" with "option >>>> http-server-close", it will enable keep-alive with the clients and reduce >>>> the page load time for those who experience a high latency. >> also see http://www.serverphorums.com/read.php?10,357873 >> >> I tried it without the option http-server-close, no difference, I did this >> on two Ubuntu 12.04 LTS servers, with haproxy 1.4 and 1.5 on the other, both >> with Wt 3.3.3. >> >> does app->environment().clientAddress() return the correct IP address for >> you? >> >> I am using wthttpd only. >> >> Thanks >> Jeff Flesher >> >> >> On Sun, 2014-07-20 at 02:25 +0400, Nagaev Boris wrote: >> >> Hello! >> >> I used to add these lines to my haproxy config: >> reqidel ^Client-IP:.* >> reqidel ^X-Forwarded-For:.* >> option http-server-close >> option forwardfor >> and it worked. >> >> First two lines remove headers Client-IP and X-Forwarded-For passed by >> a user (not to confuse Wt webserver), 4-th line sets real IP to >> X-Forwarded-For header. I dunno what http-server-close is needed for, >> maybe it is unrelated here. >> >> Nowdays I use nginx with following config line: >> proxy_set_header X-Forwarded-For $remote_addr; >> proxy_set_header Client-IP ""; >> >> Client-IP is set to empty string to prevent Wt confusion in case user >> passes smth in Client-IP. >> >> - >> Best regards, >> Boris Nagaev >> >> >> On Sun, Jul 20, 2014 at 2:04 AM, Jeffrey Scott Flesher Gmail >> <jeffrey.scott.fles...@gmail.com> wrote: >>> Nagaev Boris mentioned using a Gather Class which uses flash >>> >>> http://starius.ru/wt-classes/reference/classWt_1_1Wc_1_1Gather.html#_details >>> All I need is the users IP address, and I do not want to use flash, since >>> it >>> may not be loaded on the users system, I do not have it loaded, and I am >>> sure a lot of others do not like it as well. >>> >>> This is only returning the servers IP address >>> >>> app->environment().clientAddress() >>> >>> Reading this: >>> Returns the IP address of the client. >>> The (most likely) IP address of the client that is connected to this >>> session. >>> This is taken to be the first public address that is given in the >>> Client-IP >>> header, >>> or in the X-Forwarded-For header (in case the client is behind a proxy). >>> If none of these headers is present, the remote socket IP address is used. >>> >>> I got the idea that its something I need to change in my haproxy config, >>> but >>> not sure what: >>> I have this set: >>> option forwardfor >>> >>> and played with these settings also: >>> option httpclose >>> option http-server-close >>> even >>> option forceclose >>> >>> I even tried reqidel ^X-Forwarded-For: after reading a post: >>> >>> http://serverfault.com/questions/437088/haproxy-not-properly-passing-on-x-forwarded-for-header >>> and reqidel ^X-Forwarded-For:.* after reading: >>> >>> http://serverfault.com/questions/358939/overriding-the-x-forwarded-for-header-in-haproxy >>> It didn't help. >>> >>> Can anyone tell me if this is an haproxy issue or is there another way to >>> get the users IP address? >>> >>> Thanks >>> Jeff Flesher >>> >>> >> _______________________________________________ >> witty-interest mailing list >> witty-interest@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/witty-interest >> >> >> ------------------------------------------------------------------------------ >> Want fast and easy access to all the code in your enterprise? Index and >> search up to 200,000 lines of code with a free copy of Black Duck >> Code Sight - the same software that powers the world's largest code >> search on Ohloh, the Black Duck Open Hub! Try it now. >> http://p.sf.net/sfu/bds >> _______________________________________________ >> witty-interest mailing list >> witty-interest@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/witty-interest >> ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ witty-interest mailing list witty-interest@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/witty-interest
