[GUACAMOLE-994] Incorrect Documentation or Software Bug (Remote IP Valve)

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Invalid
• Affects Version/s: 1.0.0
• Component/s: guacamole-server, Website
• Assignee: Unassigned
• Reporter: Sysadmin Guy
• Created: 21/Mar/20 22:35
• Updated: 22/Mar/20 00:33
• Resolved: 22/Mar/20 00:33

Description

When proxied behind Nginx Reverse Proxy, the docs recommend adding this to server.xml in /etc/tomcat8 if the proxy is on the same host as the Tomcat server.  

 

In my testing and as reported by others on the mail list, specifying localhost (127.0.0.1) does not work.  You have to use the actual IP of the local host.

 

https://www.mail-archive.com/[e-mail]/msg02343.html

 

 https://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip

<Valve className="org.apache.catalina.valves.RemoteIpValve"
               internalProxies="127.0.0.1"
               remoteIpHeader="x-forwarded-for"
               remoteIpProxiesHeader="x-forwarded-by"
               protocolHeader="x-forwarded-proto" />