xgantan We are running an OpenVPN Access Server on AWS EC2. We'd like to add custom HTTP headers to all the HTTP endpoints such as `GET vpn.example.com`. Where is the configuration for adding custom HTTP headers to the Access Server?
openvpn_inc https://openvpn.net/vpn-server-resources/managing-settings-for-the-web-services-from-the-command-line/#specify-custom-http-headers Kind regards, Johan
xgantan Thanks for the response. As a related but separate issue, we also would like to configure openvpn to ignore certain HTTP headers sent by the clients such as `Host`. For example, if an attacker sends a `GET /__session_start__/ HTTP/1.1` with a request header `Host: bing.com`, openvpn will respond with a response header `Host: bing.com`. How to configure openvpn so it ignores such headers?
openvpn_inc Hello xgantan, That is currently not possible to configure. If you wish to make a case for this feature, please do so at https://openvpn.net/support with an explanation as to why this feature would be necessary. Kind regards, Johan
