PingDirectory

Configuring traffic through a load balancer using dsconfig

About this task

To configure the directory server to get traffic through a load balancer and to record the actual client’s IP address:

Steps

  1. Edit the HTTP or HTTPS connection handler object and set use-forwarded-headers to true by running dsconfig.

    Example:

    dsconfig set-connection-handler-prop \
        --handler-name "HTTPS Connection Handler" \
        --set use-forwarded-headers:true
  2. To finalize the changes to the HTTP or HTTPS connection handler, use dsconfig to restart the connection handler.

    Example:

    dsconfig set-connection-handler-prop \
        --handler-name "HTTPS Connection Handler" \
        --set enabled:false
    
    dsconfig set-connection-handler-prop \
        --handler-name "HTTPS Connection Handler" \
        --set enabled:true
  3. To provide the X-Forwarded-* information to your load balancer, consult your provider’s guide on configuring the load balancer settings.