You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When X-Forwarded-For contains an IPv6 and server.forward-headers-strategy is set to framework, Gateway will pass an incorrect Forwarded header to downstream, as shown in the picture - resulting in an exception being thrown in services that also set server.forward-headers-strategy=framework
I have narrowed down issue to spring-cloud-gateway, as nothing else seems to add Forwarded header. I have prepared a reproducer that demonstrates this using IPv6 only haproxy and docker
There is a single test that starts 3 containers and uses ipv6 only to communicate, up to returning back to host (gateway) on 8080. Make sure to adjust the port in haproxy.cfg and application.properties if they should be changed.
The test contains a commented out direct entry to its own "/test" REST resource, and a call that causes the issue to "/testgateway", that simply routes back to itself and rewrites the path to "/test"
The text was updated successfully, but these errors were encountered:
When
X-Forwarded-For
contains an IPv6 andserver.forward-headers-strategy
is set toframework
, Gateway will pass an incorrectForwarded
header to downstream, as shown in the picture - resulting in an exception being thrown in services that also setserver.forward-headers-strategy=framework
I have narrowed down issue to spring-cloud-gateway, as nothing else seems to add Forwarded header. I have prepared a reproducer that demonstrates this using IPv6 only haproxy and docker
https://github.com/ZIRAKrezovic/gateway-reproducer.git
There is a single test that starts 3 containers and uses ipv6 only to communicate, up to returning back to host (gateway) on 8080. Make sure to adjust the port in haproxy.cfg and application.properties if they should be changed.
The test contains a commented out direct entry to its own "/test" REST resource, and a call that causes the issue to "/testgateway", that simply routes back to itself and rewrites the path to "/test"
The text was updated successfully, but these errors were encountered: