Apache Tomcat 7 Configuration Reference (7.0.64) - The Valve Component

Apache Tomcat 7 Configuration Reference (7.0.64) - The Valve Component

className

Java class name of the implementation to use. This MUST be set to org.apache.catalina.valves.RemoteIpValve.

remoteIpHeader

Name of the HTTP Header read by this valve that holds the list of traversed IP addresses starting from the requesting client. If not specified, the default of x-forwarded-for is used.

internalProxies

Regular expression (using java.util.regex) that a proxy's IP address must match to be considered an internal proxy. Internal proxies that appear in the remoteIpHeader will be trusted and will not appear in the proxiesHeader value. If not specified the default value of 10\.\d{1,3}\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|169\.254\.\d{1,3}\.\d{1,3}|127\.\d{1,3}\.\d{1,3}\.\d{1,3} will be used.

Read full article from Apache Tomcat 7 Configuration Reference (7.0.64) - The Valve Component