Repository navigation
x-forwarded-for: define number of trusted proxies? #12356
thomas-riccardi
started this conversation in
Archive
Replies: 1 comment
|
We are facing the same issue. We are running Keycloak behind an AWS ALB, but since AWS ALBs can only preserve, append or remove (but not replace) the Having the trusted proxy count option would solve this issue. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
When deploying keycloak behind a http load balancer, we set
proxy=edgeso keyloak accesses the client IP fromx-forwarded-forheader.However, this opens a security issue as the value cannot be fully trusted: reverse proxies append values to the header.
The usual way to go is to configure a trusted proxy count (or list), see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For#selecting_an_ip_address
How can we define the trusted proxies count with the quarkus distribution of keycloak?
https://www.keycloak.org/server/reverseproxy doesn't talk about it, nor a search in github code/issues/discussions or the user mailing list.
All reactions