How to add custom HTTP headers?

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
xgantan
OpenVpn Newbie
Posts: 2
Joined: Mon Sep 13, 2021 5:31 pm

How to add custom HTTP headers?

Post by xgantan » Mon Sep 13, 2021 5:33 pm

We are running an OpenVPN Access Server on AWS EC2. We'd like to add custom HTTP headers to all the HTTP endpoints such as `GET vpn.example.com`. Where is the configuration for adding custom HTTP headers to the Access Server?

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: How to add custom HTTP headers?

Post by openvpn_inc » Mon Sep 13, 2021 7:45 pm

Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

xgantan
OpenVpn Newbie
Posts: 2
Joined: Mon Sep 13, 2021 5:31 pm

Re: How to add custom HTTP headers?

Post by xgantan » Mon Sep 13, 2021 8:16 pm

Thanks for the response.

As a related but separate issue, we also would like to configure openvpn to ignore certain HTTP headers sent by the clients such as `Host`. For example, if an attacker sends a `GET /__session_start__/ HTTP/1.1` with a request header `Host: bing.com`, openvpn will respond with a response header `Host: bing.com`. How to configure openvpn so it ignores such headers?

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: How to add custom HTTP headers?

Post by openvpn_inc » Mon Sep 13, 2021 10:30 pm

Hello xgantan,

That is currently not possible to configure. If you wish to make a case for this feature, please do so at https://openvpn.net/support with an explanation as to why this feature would be necessary.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

Post Reply