Log the original IP address when Openfire is behind a load balancer or reverse proxy

Hi, How can I configure openfire to log original client IP addresses instead of the proxy server.

I’m assuming that you’re talking about the IP address of connections that come in throug the BOSH / HTTP Bind endpoint. I don’t think that it’s currently possible to override the IP address that’s detected. Something like XFF header parsing might be desirable. I’ve raised this issue in our tracker for that: https://issues.igniterealtime.org/browse/OF-1939

@Dele_Olajide showed me that this feature is already included in Openfire (and has been, since version 3.8.2).

It can be enabled in the admin console, under Server > Server Settings > HTTP Binding (on the bottom half of the page)

1 Like