acl existing-x-forwarded-host req.hdr(X-Forwarded-Host) -m foundacl existing-x-forwarded-proto req.hdr(X-Forwarded-Proto) -m foundhttp-request add-header X-Forwarded-Host %[req.hdr(Host)] unless existing-x-forwarded-hosthttp-request add-header X-Forwarded-Proto https unless existing-x-forwarded-proto
Quote from: Wuschy on November 20, 2021, 10:12:41 pmacl existing-x-forwarded-host req.hdr(X-Forwarded-Host) -m foundacl existing-x-forwarded-proto req.hdr(X-Forwarded-Proto) -m foundhttp-request add-header X-Forwarded-Host %[req.hdr(Host)] unless existing-x-forwarded-hosthttp-request add-header X-Forwarded-Proto https unless existing-x-forwarded-protoIch bin jetzt nicht der HAProxy experte, aber das hier sieht gefährlich aus.Theoretisch könnte man die Header dann auch von außen setzen.