[jetty-users] Jetty DoS filter and ELB

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[jetty-users] Jetty DoS filter and ELB

From: Pawel Rog <pawelrog88@xxxxxxxxx>
Date: Thu, 8 Oct 2015 16:04:14 +0200
Delivered-to: jetty-users@xxxxxxxxxxx
List-archive: <https://dev.eclipse.org/mailman/private/jetty-users>
List-help: <mailto:jetty-users-request@eclipse.org?subject=help>
List-subscribe: <https://dev.eclipse.org/mailman/listinfo/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://dev.eclipse.org/mailman/options/jetty-users>, <mailto:jetty-users-request@eclipse.org?subject=unsubscribe>

Hi,

I tried to use Jetty DoS Filter and I have a small problem. I see that DoSFilter.java contains a code which takes remote IP address directly from HTTP request object. This means it sees the last proxy IP address instead of real source IP. ELB (Elastic Load Balancer in AWS EC2) which I use for load balancing adds X-forwarded-for headers to HTTP requests. Is there any reason why DoSFilter is not able to use this value?

Paweł Róg

Follow-Ups:
- Re: [jetty-users] Jetty DoS filter and ELB
  - From: Joakim Erdfelt

Prev by Date: Re: [jetty-users] excluding a page from security check
Next by Date: Re: [jetty-users] Jetty DoS filter and ELB
Previous by thread: [jetty-users] How to influence the "preferred cip
Next by thread: Re: [jetty-users] Jetty DoS filter and ELB
Index(es):
- Date
- Thread

Breadcrumbs