Graham Barr > Perlbal-Plugin-TrustHeader-0.02 > Perlbal::Plugin::TrustHeader

Download:
Perlbal-Plugin-TrustHeader-0.02.tar.gz

Dependencies

Annotate this POD

View/Report Bugs
Module Version: 0.02   Source  

NAME ^

Perlbal::Plugin::TrustHeader - Remove untrusted headers

Description ^

This module allows you to remove headers unless the client is trusted

You can configure headers to be checked based on each service declared, although the service role has to be set to web_server

For each header you want to check, you have to specify the header name and a list of netmasks to trust. Multiple netmasks are separated by white space

SYNOPSIS ^

This module provides a Perlbal plugin wich can be loaded and used as follows

    Load TrustHeader

    #TrustHeader <service_name> <header_name> <netmask_list>
    TrustHeader static X-SSL 10.0.0.0/8
    
    CREATE SERVICE static
        SET ROLE = web_server
        SET plugins = TrustHeader
    ENABLE static

In this case for each response served by the Service static, the header X-SSL will be removed before the request is proxied to the backend unless the client is on the local private network

AUTHOR ^

Graham Barr, <gbarr@pobox.com>

SUPPORT ^

You can find documentation for this module with the perldoc command.

    perldoc Perlbal::Plugin::TrustHeader

You can also look for information at:

COPYRIGHT & LICENSE ^

Copyright 2009 Graham Barr

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

syntax highlighting: