日日是Oracle APEX

HTTPSのリバース・プロキシを構成する際に、Oracle REST Data ServicesおよびAPEXが認識するリクエストの送信元を確認した手順を紹介します。

確認作業ではmacOSのpodmanで、コンテナとして実行しているOracle APEXの環境を使用しています。

最初に以下のようにHTTPで通信する、基本的な構成で動作を確認します。ORDSはポート8080でHTTPのリクエストを受け付けますが、ホスト・ポート8080にコンテナ・ポート8181を割り当てているため、外部からはhttp://localhost:8181/を宛先として、ORDSおよびAPEXにアクセスします。

APEXにワークスペースAPEXDEV（スキーマWKSP_APEXDEV）が作成済みとします。

動作確認に使用するORDS RESTサービスを作成します。

APEXのワークスペース・スキーマに接続し、以下のコードを実行します。/debug/print-http-headersの呼び出しでowa_util.print_cgi_envを実行し、ORDS（およびAPEX）が受信したHTTPヘッダーを印刷します。

次にAutoRESTのサービスを実装します。表TEST_PAGINGを作成します。

create table test_paging (
    id               number generated by default on null as identity
                     constraint test_paging_id_pk primary key,
    unique_string    varchar2(32 char)
);

SQL> create table test_paging (

2 id number generated by default on null as identity

3 constraint test_paging_id_pk primary key,

4 unique_string varchar2(32 char)

5* );

Table TEST_PAGINGは作成されました。

SQL>

表TEST_PAGINGに任意の行を５０行投入します。

begin
for i in 1..50
loop
    insert into test_paging(unique_string) values(rawtohex(sys_guid()));
end loop;
commit;
end;
/

SQL> begin

2 for i in 1..50

3 loop

4 insert into test_paging(unique_string) values(rawtohex(sys_guid()));

5 end loop;

6 commit;

7 end;

8* /

PL/SQLプロシージャが正常に完了しました。

SQL>

表TEST_PAGINGをAutoREST有効にします。

begin
    ords.enable_object(
        p_enabled => true,
        p_object => 'TEST_PAGING'
    );
end;
/

SQL> begin

2 ords.enable_object(

3 p_enabled => true,

4 p_object => 'TEST_PAGING'

5 );

6 end;

7* /

PL/SQLプロシージャが正常に完了しました。

SQL>

以上で確認作業の準備ができました。

HTTPで直接ORDSにアクセスし、ORDSのRESTサービスとAPEXを呼び出してみます。動作確認にcurlコマンドを使用します。

最初にAPEXを呼び出します。

curl -v "http://localhost:8181/ords/apex"

% curl -v "http://localhost:8181/ords/apex"

* Host localhost:8181 was resolved.

* IPv6: ::1

* IPv4: 127.0.0.1

* Trying [::1]:8181...

* Connected to localhost (::1) port 8181

> GET /ords/apex HTTP/1.1

> Host: localhost:8181

> User-Agent: curl/8.7.1

> Accept: */*

* Request completely sent off

< HTTP/1.1 302 Found

< Content-Type: text/html;charset=utf-8

< Trailer: APEX_APP_ID

< X-Content-Type-Options: nosniff

< X-Xss-Protection: 1; mode=block

< Referrer-Policy: strict-origin

< Cache-Control: no-store

< Pragma: no-cache

< Expires: Sun, 27 Jul 1997 13:00:00 GMT

< Set-Cookie: ORA_WWV_USER_1667447080439607=ORA_WWV-B-g8HzHF0HQImIYTub7gBT4R; path=/ords/; HttpOnly

< Location: http://localhost:8181/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=27980393712644

< Transfer-Encoding: chunked

* Connection #0 to host localhost left intact

/ords/apexにアクセスすると、ワークスペースへのサインイン・ページを表示するため、APEXとして認識したクライアント（リクエストの送信元）に、サインイン・ページにリダイレクトするようレスポンスを返します。

上記ではステータス・コードとして302、Locationヘッダーに以下を戻しています。

Location: http://localhost:8181/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=27980393712644

ちなみに/ords/apexのapexはデータベースに作成されたプロシージャです。以下のSELECT文でプロシージャAPEXの存在を確認できます。ORDSは/ords/apexを受け付けて、プロシージャAPEXを呼び出しています。

SQL> select owner, object_type, object_name from dba_objects where object_name = 'APEX';

OWNER OBJECT_TYPE OBJECT_NAME

______________ ______________ ______________

PUBLIC SYNONYM APEX

APEX_240200 PROCEDURE APEX

SQL>

この構成の場合、リクエストの送信元はHostヘッダーで決まるようです。curlコマンドでHostヘッダーを上書きすると、リダイレクト先はHostヘッダーで指定した宛先になります。

curl -H "Host: example.com:9999" -v "http://localhost:8181/ords/apex"

% curl -H "Host: example.com:9999" -v "http://localhost:8181/ords/apex"

* Host localhost:8181 was resolved.

* IPv6: ::1

* IPv4: 127.0.0.1

* Trying [::1]:8181...

* Connected to localhost (::1) port 8181

> GET /ords/apex HTTP/1.1

> Host: example.com:9999

> User-Agent: curl/8.7.1

> Accept: */*

* Request completely sent off

< HTTP/1.1 302 Found

< Content-Type: text/html;charset=utf-8

< Trailer: APEX_APP_ID

< X-Content-Type-Options: nosniff

< X-Xss-Protection: 1; mode=block

< Referrer-Policy: strict-origin

< Cache-Control: no-store

< Pragma: no-cache

< Expires: Sun, 27 Jul 1997 13:00:00 GMT

< Set-Cookie: ORA_WWV_USER_1667447080439607=ORA_WWV-bXQDt6ql6q6RvuuQ_UMOzM3g; path=/ords/; HttpOnly

< Location: http://example.com:9999/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=20233391851662

< Transfer-Encoding: chunked

* Connection #0 to host localhost left intact

ORDSが受信しているHTTPヘッダーを出力します。

curl "http://localhost:8181/ords/apexdev/debug/print-http-headers"

この中の、REQUEST_SCHEME、SERVER_NAME、SERVER_PORTがリダイレクト先を決めているように見受けられます。

% curl "http://localhost:8181/ords/apexdev/debug/print-http-headers"

REMOTE_IDENT =

REMOTE_USER = WKSP_APEXDEV

Host = localhost:8181

User-Agent = curl/8.7.1

Accept = */*

ORDS_VERSION = 25.3.1.r2891312

APEX_LISTENER_VERSION = 25.3.1.r2891312

DAD_NAME =

DOC_ACCESS_PATH =

DOCUMENT_TABLE =

GATEWAY_IVERSION = 3

GATEWAY_INTERFACE = CGI/1.1

HTTP_ACCEPT = */*

HTTP_ACCEPT_ENCODING =

HTTP_ACCEPT_LANGUAGE =

HTTP_ACCEPT_CHARSET =

HTTP_IF_MODIFIED_SINCE =

HTTP_IF_NONE_MATCH =

HTTP_HOST = localhost:8181

HTTP_ORACLE_ECID =

HTTP_PORT = 8181

HTTP_REFERER =

HTTP_USER_AGENT = curl/8.7.1

PATH_ALIAS =

PATH_INFO = /print-http-headers

PLSQL_GATEWAY = WebDb

QUERY_STRING =

REMOTE_ADDR = 10.89.0.5

REQUEST_CHARSET = AL32UTF8

REQUEST_CONTEXT_PATH = /ords/apexdev

REQUEST_CONTEXT_ROOT = /ords

REQUEST_IANA_CHARSET = UTF-8

REQUEST_METHOD = GET

REQUEST_PROTOCOL = http

REQUEST_SCHEME = http

SCRIPT_NAME = /ords/apexdev/debug

SCRIPT_PREFIX =

SERVER_NAME = localhost

SERVER_PORT = 8181

SERVER_PROTOCOL = HTTP/1.1

SERVER_SOFTWARE = Mod-Apex

WEB_AUTHENT_PREFIX =

X-APEX-METHOD = GET

X-APEX-BASE = http://localhost:8181/ords/apexdev/

X-APEX-PATH = debug/print-http-headers

X-APEX-REMOTE-ADDRESS = 10.89.0.5

X-APEX-CHARSET = UTF-8

HTTP_COOKIE =

ORDSが認識しているリクエストの送信元を確認します。AutoRESTを呼び出します。

curl "http://localhost:8181/ords/apexdev/test_paging/?limit=2" | jq

ページング指定にfirstやnextがあります。これらのリクエストの宛先が、Hostヘッダーで決まるhttp://localhost:8181/になっています。

% curl "http://localhost:8181/ords/apexdev/test_paging/?limit=2" | jq

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 767 0 767 0 0 29542 0 --:--:-- --:--:-- --:--:-- 30680

{

"items": [

{

"id": 51,

"unique_string": "4349E9E4AE998959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://localhost:8181/ords/apexdev/test_paging/51"

}

]

{

"id": 52,

"unique_string": "4349E9E4AE9A8959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://localhost:8181/ords/apexdev/test_paging/52"

}

]

}

"hasMore": true,

"limit": 2,

"offset": 0,

"count": 2,

"links": [

{

"rel": "self",

"href": "http://localhost:8181/ords/apexdev/test_paging/"

{

"rel": "edit",

"href": "http://localhost:8181/ords/apexdev/test_paging/"

{

"rel": "describedby",

"href": "http://localhost:8181/ords/apexdev/metadata-catalog/test_paging/"

{

"rel": "first",

"href": "http://localhost:8181/ords/apexdev/test_paging/?limit=2"

{

"rel": "next",

"href": "http://localhost:8181/ords/apexdev/test_paging/?offset=2&limit=2"

}

]

}

Hostヘッダーを置き換えて呼び出してみます。

curl -H "Host: example.com:9999" "http://localhost:8181/ords/apexdev/test_paging/?limit=2" | jq

リクエストした行（limit=2なので２行）は返されますが、ページング先のURLはHostヘッダーを反映して、http://example.com:9999/になっています。そのため、このレスポンスから次のページにアクセスしようするとエラーが発生します。

% curl -H "Host: example.com:9999" "http://localhost:8181/ords/apexdev/test_paging/?limit=2" | jq

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 781 0 781 0 0 38596 0 --:--:-- --:--:-- --:--:-- 39050

{

"items": [

{

"id": 51,

"unique_string": "4349E9E4AE998959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://example.com:9999/ords/apexdev/test_paging/51"

}

]

{

"id": 52,

"unique_string": "4349E9E4AE9A8959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://example.com:9999/ords/apexdev/test_paging/52"

}

]

}

"hasMore": true,

"limit": 2,

"offset": 0,

"count": 2,

"links": [

{

"rel": "self",

"href": "http://example.com:9999/ords/apexdev/test_paging/"

{

"rel": "edit",

"href": "http://example.com:9999/ords/apexdev/test_paging/"

{

"rel": "describedby",

"href": "http://example.com:9999/ords/apexdev/metadata-catalog/test_paging/"

{

"rel": "first",

"href": "http://example.com:9999/ords/apexdev/test_paging/?limit=2"

{

"rel": "next",

"href": "http://example.com:9999/ords/apexdev/test_paging/?offset=2&limit=2"

}

]

}

この構成に加えて、ORDSのフロントにNginxで構成したリバース・プロキシを配置します。NginxはHTTPSでリクエストを受け付け、バックエンドへのORDSにはHTTPでアクセスします。

Nginxの/etc/nginx/conf.d/default.confには以下の設定を使用します。本来であればパス /i/ についても /ords/ と同様の設定が必要ですが、今回は動作確認だけができればよいので割愛しています。

この構成で、curlコマンドでぞれぞれのURLにアクセスします。

APEXにリクエストします。

curl -v -k "https://localhost:9443/ords/apex"

% curl -v -k "https://localhost:9443/ords/apex"

]* Host localhost:9443 was resolved.

* IPv6: ::1

* IPv4: 127.0.0.1

* Trying [::1]:9443...

* Connected to localhost (::1) port 9443

* ALPN: curl offers h2,http/1.1

* (304) (OUT), TLS handshake, Client hello (1):

* (304) (IN), TLS handshake, Server hello (2):

* (304) (IN), TLS handshake, Unknown (8):

* (304) (IN), TLS handshake, Certificate (11):

* (304) (IN), TLS handshake, CERT verify (15):

* (304) (IN), TLS handshake, Finished (20):

* (304) (OUT), TLS handshake, Finished (20):

* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF

* ALPN: server accepted http/1.1

* Server certificate:

* subject: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* start date: Nov 10 00:53:57 2025 GMT

* expire date: Nov 10 00:53:57 2026 GMT

* issuer: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* SSL certificate verify result: self signed certificate (18), continuing anyway.

* using HTTP/1.x

> GET /ords/apex HTTP/1.1

> Host: localhost:9443

> User-Agent: curl/8.7.1

> Accept: */*

* Request completely sent off

< HTTP/1.1 302 Found

< Server: nginx/1.29.3

< Date: Tue, 11 Nov 2025 04:02:46 GMT

< Content-Type: text/html;charset=utf-8

< Transfer-Encoding: chunked

< Connection: keep-alive

< Trailer: APEX_APP_ID

< X-Content-Type-Options: nosniff

< X-Xss-Protection: 1; mode=block

< Referrer-Policy: strict-origin

< Cache-Control: no-store

< Pragma: no-cache

< Expires: Sun, 27 Jul 1997 13:00:00 GMT

< Set-Cookie: ORA_WWV_USER_1667447080439607=ORA_WWV-6Y9nfYF74jzkAJHzeBiKj5S3; path=/ords/; secure; HttpOnly

< Location: http://localhost:9443/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=9268568934599

* Connection #0 to host localhost left intact

ynakakoshi@Ns-Macbook apex-podman-setup % curl -v -k "https://localhost:9443/ords/apex"

* Host localhost:9443 was resolved.

* IPv6: ::1

* IPv4: 127.0.0.1

* Trying [::1]:9443...

* Connected to localhost (::1) port 9443

* ALPN: curl offers h2,http/1.1

* (304) (OUT), TLS handshake, Client hello (1):

* (304) (IN), TLS handshake, Server hello (2):

* (304) (IN), TLS handshake, Unknown (8):

* (304) (IN), TLS handshake, Certificate (11):

* (304) (IN), TLS handshake, CERT verify (15):

* (304) (IN), TLS handshake, Finished (20):

* (304) (OUT), TLS handshake, Finished (20):

* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF

* ALPN: server accepted http/1.1

* Server certificate:

* subject: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* start date: Nov 10 00:53:57 2025 GMT

* expire date: Nov 10 00:53:57 2026 GMT

* issuer: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* SSL certificate verify result: self signed certificate (18), continuing anyway.

* using HTTP/1.x

> GET /ords/apex HTTP/1.1

> Host: localhost:9443

> User-Agent: curl/8.7.1

> Accept: */*

* Request completely sent off

< HTTP/1.1 302 Found

< Server: nginx/1.29.3

< Date: Tue, 11 Nov 2025 04:02:58 GMT

< Content-Type: text/html;charset=utf-8

< Transfer-Encoding: chunked

< Connection: keep-alive

< Trailer: APEX_APP_ID

< X-Content-Type-Options: nosniff

< X-Xss-Protection: 1; mode=block

< Referrer-Policy: strict-origin

< Cache-Control: no-store

< Pragma: no-cache

< Expires: Sun, 27 Jul 1997 13:00:00 GMT

< Set-Cookie: ORA_WWV_USER_1667447080439607=ORA_WWV-DTglRt8kXvVQD6xevX0Fn7Jn; path=/ords/; secure; HttpOnly

< Location: http://localhost:9443/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=11431697437258

* Connection #0 to host localhost left intact

リダイレクト先となるLocationヘッダーを見ると、httpsではなくhttpになっています。そのため、この構成ではAPEXにアクセスできません。

Location: http://localhost:9443/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=11431697437258

ORDSが受信したヘッダーを確認します。

curl -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

REQUEST_SCHEMEがhttpとなっています。そのため、リダイレクト先のプロトコルがhttpになります。

% curl -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

REMOTE_IDENT =

REMOTE_USER = WKSP_APEXDEV

Host = localhost:9443

X-Forwarded-Host = localhost:9443

X-Real-IP = 10.89.0.5

X-Forwarded-For = 10.89.0.5

X-Forwarded-Proto = https

Connection = close

User-Agent = curl/8.7.1

Accept = */*

ORDS_VERSION = 25.3.1.r2891312

APEX_LISTENER_VERSION = 25.3.1.r2891312

DAD_NAME =

DOC_ACCESS_PATH =

DOCUMENT_TABLE =

GATEWAY_IVERSION = 3

GATEWAY_INTERFACE = CGI/1.1

HTTP_ACCEPT = */*

HTTP_ACCEPT_ENCODING =

HTTP_ACCEPT_LANGUAGE =

HTTP_ACCEPT_CHARSET =

HTTP_IF_MODIFIED_SINCE =

HTTP_IF_NONE_MATCH =

HTTP_HOST = localhost:9443

HTTP_ORACLE_ECID =

HTTP_PORT = 9443

HTTP_REFERER =

HTTP_USER_AGENT = curl/8.7.1

PATH_ALIAS =

PATH_INFO = /print-http-headers

PLSQL_GATEWAY = WebDb

QUERY_STRING =

REMOTE_ADDR = [0:0:0:0:0:0:0:1]

REQUEST_CHARSET = AL32UTF8

REQUEST_CONTEXT_PATH = /ords/apexdev

REQUEST_CONTEXT_ROOT = /ords

REQUEST_IANA_CHARSET = UTF-8

REQUEST_METHOD = GET

REQUEST_PROTOCOL = http

REQUEST_SCHEME = http

SCRIPT_NAME = /ords/apexdev/debug

SCRIPT_PREFIX =

SERVER_NAME = localhost

SERVER_PORT = 9443

SERVER_PROTOCOL = HTTP/1.1

SERVER_SOFTWARE = Mod-Apex

WEB_AUTHENT_PREFIX =

X-APEX-METHOD = GET

X-APEX-BASE = http://localhost:9443/ords/apexdev/

X-APEX-PATH = debug/print-http-headers

X-APEX-REMOTE-ADDRESS = [0:0:0:0:0:0:0:1]

X-APEX-CHARSET = UTF-8

HTTP_COOKIE =

AutoRESTを呼び出してみます。

curl -k "https://localhost:9443/ords/apexdev/test_paging/?limit=2" | jq

一見適切に呼び出せているように見えますが、linksに含まれるfirstやnextの宛先がhttpになっているため、ページングなどの処理は失敗します。

% curl -k "https://localhost:9443/ords/apexdev/test_paging/?limit=2" | jq

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 767 0 767 0 0 12791 0 --:--:-- --:--:-- --:--:-- 13000

{

"items": [

{

"id": 51,

"unique_string": "4349E9E4AE998959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://localhost:9443/ords/apexdev/test_paging/51"

}

]

{

"id": 52,

"unique_string": "4349E9E4AE9A8959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "http://localhost:9443/ords/apexdev/test_paging/52"

}

]

}

"hasMore": true,

"limit": 2,

"offset": 0,

"count": 2,

"links": [

{

"rel": "self",

"href": "http://localhost:9443/ords/apexdev/test_paging/"

{

"rel": "edit",

"href": "http://localhost:9443/ords/apexdev/test_paging/"

{

"rel": "describedby",

"href": "http://localhost:9443/ords/apexdev/metadata-catalog/test_paging/"

{

"rel": "first",

"href": "http://localhost:9443/ords/apexdev/test_paging/?limit=2"

{

"rel": "next",

"href": "http://localhost:9443/ords/apexdev/test_paging/?offset=2&limit=2"

}

]

}

ORDSのプロパティsecurity.httpsHeaderCheckにX-Forwarded-Proto: httpsを設定し、リクエストのプロコトルをhttpsとして認識させます。

ords --config /etc/ords/config config set security.httpsHeaderCheck "X-Forwarded-Proto: https"

再度、動作確認します。

APEXにリクエストします。

curl -v -k "https://localhost:9443/ords/apex"

% curl -v -k "https://localhost:9443/ords/apex"

* Host localhost:9443 was resolved.

* IPv6: ::1

* IPv4: 127.0.0.1

* Trying [::1]:9443...

* Connected to localhost (::1) port 9443

* ALPN: curl offers h2,http/1.1

* (304) (OUT), TLS handshake, Client hello (1):

* (304) (IN), TLS handshake, Server hello (2):

* (304) (IN), TLS handshake, Unknown (8):

* (304) (IN), TLS handshake, Certificate (11):

* (304) (IN), TLS handshake, CERT verify (15):

* (304) (IN), TLS handshake, Finished (20):

* (304) (OUT), TLS handshake, Finished (20):

* SSL connection using TLSv1.3 / AEAD-CHACHA20-POLY1305-SHA256 / [blank] / UNDEF

* ALPN: server accepted http/1.1

* Server certificate:

* subject: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* start date: Nov 10 00:53:57 2025 GMT

* expire date: Nov 10 00:53:57 2026 GMT

* issuer: C=JP; ST=Tokyo; L=Chiyoda; O=LocalDev; OU=IT; CN=localhost

* SSL certificate verify result: self signed certificate (18), continuing anyway.

* using HTTP/1.x

> GET /ords/apex HTTP/1.1

> Host: localhost:9443

> User-Agent: curl/8.7.1

> Accept: */*

* Request completely sent off

< HTTP/1.1 302 Found

< Server: nginx/1.29.3

< Date: Tue, 11 Nov 2025 04:24:34 GMT

< Content-Type: text/html;charset=utf-8

< Transfer-Encoding: chunked

< Connection: keep-alive

< Trailer: APEX_APP_ID

< X-Content-Type-Options: nosniff

< X-Xss-Protection: 1; mode=block

< Referrer-Policy: strict-origin

< Cache-Control: no-store

< Pragma: no-cache

< Expires: Sun, 27 Jul 1997 13:00:00 GMT

< Set-Cookie: ORA_WWV_USER_1667447080439607=ORA_WWV-gpm-Ciact0B5stHn15WZqRS4; path=/ords/; secure; HttpOnly

< Location: https://localhost/ords/r/apex/workspace-sign-in/oracle-apex-sign-in?session=17153398914728

* Connection #0 to host localhost left intact

リダイレクト先となるLocationはhttpsに代わりましたが、ポート番号の9443が削除され標準ポート（443）がリダイレクト先になっています。

ORDSが受信したヘッダーを確認します。

curl -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

REQUEST_SCHEMEはhttpsになっていますが、SERVER_PORTが443と認識されています。

% curl -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

REMOTE_IDENT =

REMOTE_USER = WKSP_APEXDEV

Host = localhost:9443

X-Forwarded-Host = localhost:9443

X-Real-IP = 10.89.0.5

X-Forwarded-For = 10.89.0.5

X-Forwarded-Proto = https

Connection = close

User-Agent = curl/8.7.1

Accept = */*

ORDS_VERSION = 25.3.1.r2891312

APEX_LISTENER_VERSION = 25.3.1.r2891312

DAD_NAME =

DOC_ACCESS_PATH =

DOCUMENT_TABLE =

GATEWAY_IVERSION = 3

GATEWAY_INTERFACE = CGI/1.1

HTTP_ACCEPT = */*

HTTP_ACCEPT_ENCODING =

HTTP_ACCEPT_LANGUAGE =

HTTP_ACCEPT_CHARSET =

HTTP_IF_MODIFIED_SINCE =

HTTP_IF_NONE_MATCH =

HTTP_HOST = localhost

HTTP_ORACLE_ECID =

HTTP_PORT = 443

HTTP_REFERER =

HTTP_USER_AGENT = curl/8.7.1

PATH_ALIAS =

PATH_INFO = /print-http-headers

PLSQL_GATEWAY = WebDb

QUERY_STRING =

REMOTE_ADDR = [0:0:0:0:0:0:0:1]

REQUEST_CHARSET = AL32UTF8

REQUEST_CONTEXT_PATH = /ords/apexdev

REQUEST_CONTEXT_ROOT = /ords

REQUEST_IANA_CHARSET = UTF-8

REQUEST_METHOD = GET

REQUEST_PROTOCOL = https

REQUEST_SCHEME = https

SCRIPT_NAME = /ords/apexdev/debug

SCRIPT_PREFIX =

SERVER_NAME = localhost

SERVER_PORT = 443

SERVER_PROTOCOL = HTTP/1.1

SERVER_SOFTWARE = Mod-Apex

WEB_AUTHENT_PREFIX =

X-APEX-METHOD = GET

X-APEX-BASE = https://localhost/ords/apexdev/

X-APEX-PATH = debug/print-http-headers

X-APEX-REMOTE-ADDRESS = [0:0:0:0:0:0:0:1]

X-APEX-CHARSET = UTF-8

HTTP_COOKIE =

AutoRESTを呼び出してみます。

curl -k "https://localhost:9443/ords/apexdev/test_paging/?limit=2" | jq

AutoRESTのlinksに含まれるURLも、プロコトルはhttpsですが、ポート番号は標準ポートになっています。

% curl -k "https://localhost:9443/ords/apexdev/test_paging/?limit=2" | jq

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 739 0 739 0 0 6339 0 --:--:-- --:--:-- --:--:-- 6370

{

"items": [

{

"id": 51,

"unique_string": "4349E9E4AE998959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "https://localhost/ords/apexdev/test_paging/51"

}

]

{

"id": 52,

"unique_string": "4349E9E4AE9A8959E0630500590AA658",

"links": [

{

"rel": "self",

"href": "https://localhost/ords/apexdev/test_paging/52"

}

]

}

"hasMore": true,

"limit": 2,

"offset": 0,

"count": 2,

"links": [

{

"rel": "self",

"href": "https://localhost/ords/apexdev/test_paging/"

{

"rel": "edit",

"href": "https://localhost/ords/apexdev/test_paging/"

{

"rel": "describedby",

"href": "https://localhost/ords/apexdev/metadata-catalog/test_paging/"

{

"rel": "first",

"href": "https://localhost/ords/apexdev/test_paging/?limit=2"

{

"rel": "next",

"href": "https://localhost/ords/apexdev/test_paging/?offset=2&limit=2"

}

]

}

リバース・プロキシの有無に関わらず、リクエストの送信元が設定したHostヘッダーの値がORDSにまで渡っていれば、ORDSおよびAPEXはそれを送信元と認識するようです。

curl -H "Host: example.com" -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

% curl -H "Host: example.com" -k "https://localhost:9443/ords/apexdev/debug/print-http-headers"

REMOTE_IDENT =

REMOTE_USER = WKSP_APEXDEV

Host = example.com:9443

X-Forwarded-Host = example.com:9443

X-Real-IP = 10.89.0.5

X-Forwarded-For = 10.89.0.5

X-Forwarded-Proto = https

Connection = close

User-Agent = curl/8.7.1

Accept = */*

ORDS_VERSION = 25.3.1.r2891312

APEX_LISTENER_VERSION = 25.3.1.r2891312

DAD_NAME =

DOC_ACCESS_PATH =

DOCUMENT_TABLE =

GATEWAY_IVERSION = 3

GATEWAY_INTERFACE = CGI/1.1

HTTP_ACCEPT = */*

HTTP_ACCEPT_ENCODING =

HTTP_ACCEPT_LANGUAGE =

HTTP_ACCEPT_CHARSET =

HTTP_IF_MODIFIED_SINCE =

HTTP_IF_NONE_MATCH =

HTTP_HOST = example.com

HTTP_ORACLE_ECID =

HTTP_PORT = 443

HTTP_REFERER =

HTTP_USER_AGENT = curl/8.7.1

PATH_ALIAS =

PATH_INFO = /print-http-headers

PLSQL_GATEWAY = WebDb

QUERY_STRING =

REMOTE_ADDR = [0:0:0:0:0:0:0:1]

REQUEST_CHARSET = AL32UTF8

REQUEST_CONTEXT_PATH = /ords/apexdev

REQUEST_CONTEXT_ROOT = /ords

REQUEST_IANA_CHARSET = UTF-8

REQUEST_METHOD = GET

REQUEST_PROTOCOL = https

REQUEST_SCHEME = https

SCRIPT_NAME = /ords/apexdev/debug

SCRIPT_PREFIX =

SERVER_NAME = example.com

SERVER_PORT = 443

SERVER_PROTOCOL = HTTP/1.1

SERVER_SOFTWARE = Mod-Apex

WEB_AUTHENT_PREFIX =

X-APEX-METHOD = GET

X-APEX-BASE = https://example.com/ords/apexdev/

X-APEX-PATH = debug/print-http-headers

X-APEX-REMOTE-ADDRESS = [0:0:0:0:0:0:0:1]

X-APEX-CHARSET = UTF-8

HTTP_COOKIE =

ynakakoshi@Ns-Macbook apex-podman-setup %

リバース・プロキシ（ロード・バランサも同様）でHTTPSからHTTPへのプロトコル変換を行うように構成する場合、HTTPSのリクエストは443番に固定されるという制限があるようです。

通常はHTTPSのポートを443以外で運用しないので実害は無いと思いますが、テスト環境を作る際に443以外のポート番号を使いたい場合などは注意が必要です。

完

日日是Oracle APEX

2025年11月11日火曜日

APEXおよびORDSが認識するリクエストの送信元を確認する