authorization - 在 Varnish 中取消设置授权 header ，但也将 header 发送到后端

Question

我想删除varnish vcl中的Authorization header ，但也需要将此 header 也发送到后端。

sub vcl_recv {
    unset req.http.Authorization;
}

Answer 1

看来这是一个坏主意，但是使用一些基本的VCL绝对可以实现。例如:

sub vcl_recv {
    if (req.http.Authorization) {
        set req.http.Authorization-Copy = req.http.Authorization;
        unset req.http.Authorization;
    } else {
        unset set req.http.Authorization-Copy;
    }
}

sub vcl_backend_fetch {
    if (bereq.http.Authorization-Copy) {
        set bereq.http.Authorization = bereq.http.Authorization-Copy;
        unset bereq.http.Authorization-Copy;
    }
}