Ancestors

Toot

Written by Martin Pugh on 2024-12-23 at 10:11

Do we have any OpenBSD relayd experts out there that can help me figure out what I'm missing?

I'm back to getting my home lab cleaned up and moving my blog over to a server running relayd and httpd. http/https traffic from a client reaches relayd and is passed to httpd running on the local machine on port 8083.

I'm struggling to get relayd to forward the client source IP to httpd so I can grep the access logs for bad actors. All the traffic is showing as sourced from ::1

Here's a snippet of my relayd.conf with I think the relevent bits

http protocol www {
 match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
 pass request header "Host" value "martin.hatstand.org.uk" forward to 
}

http protocol https {
 tls { keypair martin.hatstand.org.uk }
 match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
 match request header append "X-Forwarded-By" value "$SERVER_ADDR:$SERVER_PORT"
 match request header set "Connection" value "close"
 tcp { sack, backlog 128 }
 match request header "Host" value "martin.hatstand.org.uk" forward to 
}

[#]OpenBSD #relayd

=> More informations about this toot | More toots from pugmiester@bsd.network

Descendants