CFDebug display debug with load balancer or OneLogin creds

Question

Is it possible to control when ColdFusion outputs the debug information at the bottom of the page by something other than IP?  We moved our servers into AWS Cloud and they are going through load balancer, so all the IPs look the same to the server.  Plus we have folks working remotely, so their IPs keep changing.  We use OneLogin for authentication, and we can have a Developer role in there.  So we'd like to find a way to display all the debug at the bottom of the page only if a Developer is logged in.

Dave Watts · Answer

Yes, you can do this. You can enable debug output for all IPs, then programmatically disable it in Application.cfc/cfm.

ColdFusion Help | Controlling debugging information in CFML

You can use the X-Forwarded-For header to identify specific client IP addresses passed through the load balancer. Or you could look for other attributes and use those instead. I don't know anything about OneLogin specifically, but if it can be detected by the web server, you can filter in CF.

That said, there is a significant reduction in load capability once you enable debug output, and you should really only use it in development environments, or when you're trying to debug an urgent problem in production. You should definitely not do leave it enabled in production generally.

Dave Watts, Fig Leaf Software

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded