wip

Author: smola

dd-java-agent/agent-bootstrap/src/main/java/datadog/trace/bootstrap/instrumentation/decorator/http/ClientIpAddressResolver.java

@@ -92,14 +92,6 @@ private static InetAddress doResolve(AgentSpan.Context.Extracted context, Mutabl
       result = coalesce(result, addr);
     }
 
-    addr = tryHeader(context.getXForwarded(), FORWARDED_PARSER);
-    if (addr != null) {
-      if (!isIpAddrPrivate(addr)) {
-        return addr;
-      }
-      result = coalesce(result, addr);
-    }
-
     addr = tryHeader(context.getForwardedFor(), PLAIN_IP_ADDRESS_PARSER);
     if (addr != null) {
       if (!isIpAddrPrivate(addr)) {

dd-java-agent/agent-bootstrap/src/test/groovy/datadog/trace/bootstrap/instrumentation/decorator/http/ClientIpAddressResolverSpecification.groovy

@@ -60,15 +60,6 @@ class ClientIpAddressResolverSpecification extends Specification {
     'x-real-ip' | '42' | '0.0.0.42'
 
     'x-client-ip' | '2.2.2.2' | '2.2.2.2'
-    'x-forwarded' | 'for="[2001::1]:1111"' | '2001::1'
-    'x-forwarded' | 'fOr="[2001::1]:1111"' | '2001::1'
-    'x-forwarded' | 'for=some_host' | null
-    'x-forwarded' | 'for=127.0.0.1, FOR=1.1.1.1' | '1.1.1.1'
-    'x-forwarded' |'for="\"foobar";proto=http,FOR="1.1.1.1"' | '1.1.1.1'
-    'x-forwarded' | 'for="8.8.8.8:2222",' | '8.8.8.8'
-    'x-forwarded' | 'for="8.8.8.8' | null  // quote not closed
-    'x-forwarded' | 'far="8.8.8.8",for=4.4.4.4;' | '4.4.4.4'
-    'x-forwarded' | '   for=127.0.0.1,for= for=,for=;"for = for="" ,; for=8.8.8.8;' | '8.8.8.8'
 
     'x-cluster-client-ip' | '2.2.2.2' | '2.2.2.2'
 
@@ -119,9 +110,6 @@ class ClientIpAddressResolverSpecification extends Specification {
     then:
     1 * context.getXClientIp() >> null
 
-    then:
-    1 * context.getXForwarded() >> null
-
     then:
     1 * context.getForwardedFor() >> null
 
@@ -174,7 +162,6 @@ class ClientIpAddressResolverSpecification extends Specification {
     1 * context.getXForwardedFor() >> '127.0.0.1'
     1 * context.getXRealIp() >> '127.0.0.2'
     1 * context.getXClientIp() >> '127.0.0.3'
-    1 * context.getXForwarded() >> 'for=127.0.0.4'
     1 * context.getXClusterClientIp() >> '127.0.0.5'
     1 * context.getForwardedFor() >> '127.0.0.6'
     1 * context.getTrueClientIp() >> '127.0.0.9'

dd-smoke-tests/appsec/springboot/src/test/groovy/datadog/smoketest/appsec/SpringBootSmokeTest.groovy

@@ -177,7 +177,7 @@ class SpringBootSmokeTest extends AbstractAppSecServerSmokeTest {
     def request = new Request.Builder()
       .url(url)
       .addHeader("User-Agent", "Arachni/v1")
-      .addHeader("X-Forwarded", 'for="[::ffff:1.2.3.4]"')
+      .addHeader("X-Forwarded-For", '[::ffff:1.2.3.4]')
       .build()
     def response = client.newCall(request).execute()
     def responseBodyStr = response.body().string()

dd-trace-core/src/main/java/datadog/trace/core/propagation/ContextInterpreter.java

@@ -4,14 +4,12 @@
 import static datadog.trace.core.propagation.HttpCodec.CF_CONNECTING_IP_V6_KEY;
 import static datadog.trace.core.propagation.HttpCodec.FASTLY_CLIENT_IP_KEY;
 import static datadog.trace.core.propagation.HttpCodec.FORWARDED_FOR_KEY;
-import static datadog.trace.core.propagation.HttpCodec.FORWARDED_KEY;
 import static datadog.trace.core.propagation.HttpCodec.TRUE_CLIENT_IP_KEY;
 import static datadog.trace.core.propagation.HttpCodec.USER_AGENT_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_CLIENT_IP_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_CLUSTER_CLIENT_IP_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_FORWARDED_FOR_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_FORWARDED_HOST_KEY;
-import static datadog.trace.core.propagation.HttpCodec.X_FORWARDED_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_FORWARDED_PORT_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_FORWARDED_PROTO_KEY;
 import static datadog.trace.core.propagation.HttpCodec.X_REAL_IP_KEY;
@@ -90,10 +88,6 @@ protected final boolean handledForwarding(String key, String value) {
       return false;
     }
 
-    if (FORWARDED_KEY.equalsIgnoreCase(key)) {
-      getHeaders().forwarded = value;
-      return true;
-    }
     if (FORWARDED_FOR_KEY.equalsIgnoreCase(key)) {
       getHeaders().forwardedFor = value;
       return true;
@@ -122,10 +116,6 @@ protected final boolean handledXForwarding(String key, String value) {
       getHeaders().xForwardedPort = value;
       return true;
     }
-    if (X_FORWARDED_KEY.equalsIgnoreCase(key)) {
-      getHeaders().xForwarded = value;
-      return true;
-    }
     return false;
   }
 

dd-trace-core/src/main/java/datadog/trace/core/propagation/HttpCodec.java

@@ -32,12 +32,9 @@
 public class HttpCodec {
 
   private static final Logger log = LoggerFactory.getLogger(HttpCodec.class);
-  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Forwarded
-  static final String FORWARDED_KEY = "forwarded";
   static final String FORWARDED_FOR_KEY = "forwarded-for";
   static final String X_FORWARDED_PROTO_KEY = "x-forwarded-proto";
   static final String X_FORWARDED_HOST_KEY = "x-forwarded-host";
-  static final String X_FORWARDED_KEY = "x-forwarded";
   static final String X_FORWARDED_FOR_KEY = "x-forwarded-for";
   static final String X_FORWARDED_PORT_KEY = "x-forwarded-port";
 

internal-api/src/main/java/datadog/trace/bootstrap/instrumentation/api/AgentSpan.java

@@ -203,8 +203,6 @@ interface Extracted extends Context {
        */
       List<AgentSpanLink> getTerminatedContextLinks();
 
-      String getForwarded();
-
       String getFastlyClientIp();
 
       String getCfConnectingIp();
@@ -219,8 +217,6 @@ interface Extracted extends Context {
 
       String getForwardedFor();
 
-      String getXForwarded();
-
       String getXForwardedFor();
 
       String getXClusterClientIp();

internal-api/src/main/java/datadog/trace/bootstrap/instrumentation/api/AgentTracer.java

@@ -1003,11 +1003,6 @@ public List<AgentSpanLink> getTerminatedContextLinks() {
       return emptyList();
     }
 
-    @Override
-    public String getForwarded() {
-      return null;
-    }
-
     @Override
     public String getFastlyClientIp() {
       return null;
@@ -1043,11 +1038,6 @@ public String getForwardedFor() {
       return null;
     }
 
-    @Override
-    public String getXForwarded() {
-      return null;
-    }
-
     @Override
     public String getXForwardedFor() {
       return null;

internal-api/src/main/java/datadog/trace/bootstrap/instrumentation/api/TagContext.java

@@ -85,11 +85,6 @@ public void addTerminatedContextLink(AgentSpanLink link) {
     this.terminatedContextLinks.add(link);
   }
 
-  @Override
-  public String getForwarded() {
-    return httpHeaders.forwarded;
-  }
-
   @Override
   public String getFastlyClientIp() {
     return httpHeaders.fastlyClientIp;
@@ -125,11 +120,6 @@ public String getForwardedFor() {
     return httpHeaders.forwardedFor;
   }
 
-  @Override
-  public String getXForwarded() {
-    return httpHeaders.xForwarded;
-  }
-
   @Override
   public String getXForwardedFor() {
     return httpHeaders.xForwardedFor;
@@ -264,8 +254,6 @@ public static class HttpHeaders {
     public String fastlyClientIp;
     public String cfConnectingIp;
     public String cfConnectingIpv6;
-    public String xForwarded;
-    public String forwarded;
     public String xForwardedProto;
     public String xForwardedHost;
     public String xForwardedPort;