c960657.github.io

RFC 7239 – Forwarded HTTP Header

RFC 7239 defines a new HTTP header, Forwarded, that is intended to replace the de-facto standard header X-Forwarded-For and friends, X-Forwarded-Proto and X-Forwarded-Host.

X-Forwarded-For is widely supported in proxy servers and middleware. X-Forwarded-Proto has less support, and with HTTPS becoming the new normal, this is increasingly annoying.

Support

Proxy servers

• Apache httpd, mod_proxy_http: No support, bug report with patch available.
• Apache Traffic Server: Supported.
• Go, net/http/httputil: Not supported.
• H2O: Not supported.
• Nginx: No native support, but supported via configuration files.
• nghttpx: Supported.
• Traefik: Not supported.
• Varnish: No native support, but probably supported via configuration files.

Libraries and middleware

Go

• go-forwarded: Supported.
• Gorilla web toolkit: Not supported.
• httpforwarded: Supported.

Java

• Spring Boot: Not supported.
• Spring Framework: Supported.

.NET

• ASP.NET: Not supported.

Node

• 7239: Supported.
• forwarded-http: Supported.
• forwarded-parse: Supported.
• express-redirect-https: Supported.

PHP

• Drupal: Supported.
• Laravel: Supported.
• MediaWiki: Not supported.
• Symfony, HttpFoundation: Supported.

Python

• AIOHTTP: Supported.

Ruby

• Rails: Not supported.

Cloud services

• Amazon CloudFront: Not supported.
• Amazon Elastic Load Balancing: Not supported.
• CloudFlare: Not supported.