fabien-chebel opened a new pull request, #632:
URL: https://github.com/apache/tomcat/pull/632

   # Context
   
   Tomcat's `RemoteIpFilter` currently allows configuring trusted/internal 
proxies using regexp.
   
   When integrating with reverse proxies with a large number of IP addresses, 
regexp configuration gets cumbersome.
   
   # Suggestion
   
   I suggest adding support for IP ranges in CIDR notation to make it easier to 
setup the filter in these cases.
   
   For backward compatibility, matching with masks is only performed when the 
trusted/internal proxies patterns are null.
   
   Depending on the feedback I receive on this PR, I may add the same changes 
to Tomcat's `RemoteIpValve`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to