View Attach (2) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 headers.png 23.1 kB 1 25-Oct-2018 04:31 Ben Spink
png
 reverse_proxy.png 86.2 kB 3 25-Oct-2018 04:31 Ben Spink

This page (revision-10) was last changed on 25-Oct-2018 04:31 by Ben Spink

This page was created on 25-Oct-2018 04:31 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 3 added 15 lines
[attachments|headers.png]
Trust Headers allow for trusting a front end identity management solution that inserts trust headers into the HTTP responses so CrushFTP doesn't need to validate authentication.\\
The trust headers work like this:\\
Say you have the header {{{X-Trusted-Username}}} then you would enter in a value in CrushFTP of:
{{{
X-Trusted-Username=user_name
}}}
You are mapping header values to CrushFTP values.\\
\\
So the trust of the server comes down to the identity management controlling headers and in no way allowing anyone access to the server who could spoof the header. CrushFTP is blindly trusting the header if present with whatever username as having been already authenticated. So any exposure of the CrushFTP server to the outside internet makes it insecure, or exposure on the LAN, etc. It must always be behind the identity management solution your using.\\
At line 20 added 2 lines
You can also make CrushFTP the reverse proxy server protecting a back end resource.
At line 7 changed one line
You can also make CrushFTP the [reverse proxy server|reverse proxy] protecting a back end resource.
HTTPS ports can have individual keystores mapped to the port as well, or use *[SNI]* to have multiple keystores mapped to the port.
At line 9 changed one line
The HTTPS port can do *[SNI]* as well to handle multiple SSL certificates.
Require valid client certificate will block all connections unless they have been previously configured to provide a SSL [client certificate].
Version Date Modified Size Author Changes ... Change note
10 25-Oct-2018 04:31 2.044 kB Ben Spink to previous
9 25-Oct-2018 04:31 2.035 kB Ben Spink to previous | to last
8 25-Oct-2018 04:31 1.857 kB Ben Spink to previous | to last
7 25-Oct-2018 04:31 1.828 kB Ben Spink to previous | to last
6 25-Oct-2018 04:31 0.944 kB Ben Spink to previous | to last
5 25-Oct-2018 04:31 0.944 kB Ben Spink to previous | to last
4 25-Oct-2018 04:31 0.866 kB Ben Spink to previous | to last
3 25-Oct-2018 04:31 0.756 kB Ben Spink to previous | to last
2 25-Oct-2018 04:31 0.443 kB Ben Spink to previous | to last
1 25-Oct-2018 04:31 0.408 kB Ben Spink to last
« This page (revision-10) was last changed on 25-Oct-2018 04:31 by Ben Spink
G’day (anonymous guest)
CrushFTP9 | What's New

Referenced by
LeftMenu

JSPWiki