Light Dark Auto


Assert the presence of data in HTTP headers

This filter sets up HTTP request headers on all incoming traffic. Set headers are outlined in the table below. Inheaders should only be configured on TLS-enabled Listeners.

The following headers are set by this filter.

  • USER_DN - Certificate's DN value (if user_dn header exists in the incoming request, this filter will not alter the header value).
  • SSL_CLIENT_S_DN - Certificate's DN value.
  • EXTERNAL_SYS_DN - Certificate's DN value (only if the incoming request has user_dn header set).
  • X-REAL-IP - The remote address of the incoming request.
  • X-FORWARDED-FOR - Certificate's DN value.


- name: gm.inheaders
  config: { debug: false }