Rootstock: hosts = ["*"] - allow all Host headers (was [])

VETIVER-9.0.1 enforces rpc.providers.web.http.hosts as a whitelist;
empty list / default rejects everything except 'Host: localhost'.

The traefik route uses 'customrequestheaders.Host=localhost' middleware
to rewrite the Host header, but that middleware appears not to be
applied for the rootstock route - real requests still arrive at rskj
with Host: rpc-de-XX.stakesquid.eu and rskj returns 400 Bad Request,
which traefik translates to 502 Bad Gateway.

Wildcard whitelist is fine here because traefik (with ipallowlist
middleware) is the actual gatekeeper.

Confirmed empirically: 'wget --header=Host:localhost' returns valid
JSON-RPC, anything else returns 400.
This commit is contained in:
2026-05-05 18:56:08 +00:00
parent bc95c7e1a6
commit abb3c4b189
2 changed files with 2 additions and 2 deletions

View File

@@ -11,7 +11,7 @@ rpc {
http = {
enabled = true
bind_address = "0.0.0.0"
hosts = []
hosts = ["*"]
port = 8545
}
ws = {

View File

@@ -11,7 +11,7 @@ rpc {
http = {
enabled = true
bind_address = "0.0.0.0"
hosts = []
hosts = ["*"]
port = 8545
}
ws = {