I see this question was also asked here: Configure Nginx global error page but there wasn't a suitable answer.
I am currently allowing only certain IPs addresses to some of my sites and would like Nginx to drop connections from the rest of the IP addresses instead of returning a 403. Ideally, I would like to do this without configuring each site separately.
I have this in the http section:
error_page 403 =444;
But, now, it tries to serve up the page =444 instead of returning a 444.
What can I use in the nginx config to make it clear any existing X-Forwarded-For headers before setting its own? I am currently using Nginx to terminate SSL before passing traffic to HAProxy to load balance.
Right now, I have:
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
This will append a new IP address to the end of any existing X-Forwarded-For IP addresses however. Is there a way to only keep the address seen by Nginx?
I am trying to rewrite a URI as well as a host header based on some conditions. Here is an example of what I'm trying to accomplish:
I request http://sub1.example.com/test/files/other
if hdr_beg(Host) sub1.example.com and path_beg /test
rewrite host header to sub2.example.com
rewrite URI to /files/other (in other words, remove test from the URI)
The end result should point to sub2.example.com/files/other without the user being aware.
I have tried the following configuration:
acl host_beg_sub1 hdr_beg(Host) sub1.example.com
acl path_beg_test path_beg /test
rewrite host header if host_beg_sub1 path_beg_test
rewrite URI if host_beg_sub1 path_beg_test
Obviously, this doesn't work as expected since the second rewrite won't fire after the host header has been modified.
I cannot rewrite without a condition since there is other traffic whose URI might begin with test.
Thanks in advance!