EDR: Are Multiple Reverse Proxies Supported for an EDR Installation?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can multiple values for the ReverseProxyIP variable in the /etc/cb/cb.conf file be used?

Environment

• EDR Server: All Supported Versions

Resolution

• EDR checks if $remote_addr = $reverseproxyip to decide if we keep the client_cert_id that was passed from the proxy. 
• The $remote_addr would always be a single IP, so the $reverseproxyip wouldn't match if there were more than one configured.
• For that reason having multiple ReverseProxyIP entries would not be supported.