---
title: ForwardedRequestFilter
description: Rebase the request URI to a computed scheme, host name, and port.
component: pinggateway
version: 2026
page_id: pinggateway:reference:ForwardedRequestFilter
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/ForwardedRequestFilter.html
revdate: 2025-06-02T18:01:47Z
section_ids:
  ForwardedRequestFilter-usage: Usage
  ForwardedRequestFilter-properties: Properties
  ForwardedRequestFilter-example: Example
  ForwardedRequestFilter-moreinfo: More information
---

# ForwardedRequestFilter

Rebase the request URI to a computed scheme, host name, and port.

Use this filter to configure redirects when a request is forwarded by an upstream application such as a TLS offloader.

## Usage

```json
{
  "name": string,
  "type": "ForwardedRequestFilter",
  "config": {
    "scheme": runtime expression<string>,
    "host": runtime expression<string>,
    "port": runtime expression<number>
  }
}
```

## Properties

At least one of `scheme`, `host`, or `port` must be configured.

* `"scheme"`: *runtime expression<[string](preface.html#definition-string)>, optional*

  The scheme to which the request is rebased, for example, `https`.

  Default: Not rebased to a different scheme

* `"host"`: *runtime expression<[string](preface.html#definition-string)>, optional*

  The host to which the request is rebased.

  Default: Not rebased to a different host

* `"port"`: *runtime expression<[number](preface.html#definition-number)>, optional*

  The port to which the request is rebased.

  Default: Not rebased to a different port

## Example

In the following configuration, PingGateway runs behind an AWS load balancer, to perform a login page redirect to an authentication party, using the original URI requested by the client.

PingGateway can access the URI used by the load balancer to reach PingGateway, but can't access the original request URI.

The load balancer breaks the original request URI into the following headers, and adds them to the incoming request:

* `X-Forwarded-Proto`: Scheme

* `X-Forwarded-Port`: Port

* `Host`: Original host name, and possibly the port.

```json
{
  "type": "ForwardedRequestFilter",
  "config": {
    "scheme": "${request.headers['X-Forwarded-Proto'][0]}",
    "host": "${split(request.headers['Host'][0], ':')[0]}",
    "port": "${integer(request.headers['X-Forwarded-Port'][0])}"
  }
}
```

## More information

[org.forgerock.openig.filter.ForwardedRequestFilter](../_attachments/apidocs/org/forgerock/openig/filter/ForwardedRequestFilter.html)