Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-07 Thread Peter Rossbach
Hi, use a quot at AccessLogValve pattern to a muliple value field. "%{X-Forwarded-For}i" %l %u %t "%r" %s %b Look the following definition: http://en.wikipedia.org/wiki/X- Forwarded-For First value is the client ip. Peter Am 05.01.2008 um 22:19 schrieb Rainer Jung: Hi Gregory, the descri

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Filip Hanik - Dev Lists
Gregory Gerard wrote: Thanks! I'll give that a whirl. So you're saying that my marking it as scheme='https' HttpServletRequest.isSecure() will respond with true? Good to know about the multiple IPs... Didn't know that was legal but makes sense. Logging would be fine (though I don't know how

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Filip Hanik - Dev Lists
Rainer Jung wrote: Hi Gregory, the descriptions below work (at least) for TC 5.0/5.5/6.0. Gregory Gerard schrieb: I've got an F5 load balancer running version 9.3 of the software. I've got several Tomcat installations behind it. The F5 does all SSL and clear traffic as a reverse proxy, rewrit

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Rainer Jung
Gregory Gerard schrieb: Thanks! I'll give that a whirl. So you're saying that my marking it as scheme='https' HttpServletRequest.isSecure() will respond with true? No, sorry, see my second post. The attribute scheme is used when a self-referencing redirect gets constructed. That's a way of pro

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Filip Hanik - Dev Lists
In Tomcat 6.0.x you can do In Tomcat 5.5.x you can write a Filter that creates a HttpServletRequestWrapper, that returns true on isSecure, and https on getScheme or you can take a look at org.apache.catalina.valves.SSLValve, which reads headers set by the server in front, most commonly apach

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Gregory Gerard
Thanks! I'll give that a whirl. So you're saying that my marking it as scheme='https' HttpServletRequest.isSecure() will respond with true? Good to know about the multiple IPs... Didn't know that was legal but makes sense. Logging would be fine (though I don't know how the access log would h

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Rainer Jung
Sorry didn't read your post carefully enough. The access log thing is OK, but about the redirect: I've got an F5 load balancer running version 9.3 of the software. I've got several Tomcat installations behind it. The F5 does all SSL and clear traffic as a reverse proxy, rewriting headers as n

Re: Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Rainer Jung
Hi Gregory, the descriptions below work (at least) for TC 5.0/5.5/6.0. Gregory Gerard schrieb: I've got an F5 load balancer running version 9.3 of the software. I've got several Tomcat installations behind it. The F5 does all SSL and clear traffic as a reverse proxy, rewriting headers as need

Tomcat 5.5.20+ behind an F5 Load Balancer doing SSL Connector problem

2008-01-05 Thread Gregory Gerard
I've got an F5 load balancer running version 9.3 of the software. I've got several Tomcat installations behind it. The F5 does all SSL and clear traffic as a reverse proxy, rewriting headers as needed for cookies and whatnot. I have one connector on 8080 for the clear traffic. My problem: I t