EDR: Are Multiple Reverse Proxies Supported for an EDR Installation?
search cancel

EDR: Are Multiple Reverse Proxies Supported for an EDR Installation?

book

Article ID: 289767

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can multiple values for the ReverseProxyIP variable in the /etc/cb/cb.conf file be used?

Environment

  • EDR Server: All Supported Versions

Resolution

  • EDR checks if $remote_addr = $reverseproxyip to decide if we keep the client_cert_id that was passed from the proxy. 
  • The $remote_addr would always be a single IP, so the $reverseproxyip wouldn't match if there were more than one configured.
  • For that reason having multiple ReverseProxyIP entries would not be supported.