The Highly Classified Intranet of bwd.se

Same server – this time protected by Identity-Aware Proxy (IAP)

Signed in as

Checking…

IAP verified your Google identity and passed it to this server in a request header.

Any browser

No extension and no managed profile. Users sign in with their Google account.

The app knows the user

IAP adds the verified identity to every request, so the app can use it for single sign-on and auditing.

Public entry, private server

Google's load balancer has a public address, but only authorized users get past IAP. The server itself has no public IP.

TLS ends at Google

HTTPS is terminated by Google's load balancer, which forwards the request to this server inside Google's network.

What the server sees

Authenticated user header–
Source address–
X-Forwarded-For–
Hostname–
Server time–

Served by

Instance–
Zone–
Internal IP–
Web server–
Requests served–