Custom Headers Security Headers

Key	Value	Remove
No Additonal Header

Add or remove headers before sending to origin server
Modify headers from origin server responses before sending to client

Add or remove custom header(s) over this proxy target

Header Key The header key is NOT case sensitive

Header Value

Advance Settings

Manual override the automatic "Host" header rewrite logic. Leave empty for automatic.

Remove headers like "Connection" and "Keep-Alive" from both upstream and downstream requests. Set to ON by default.

Remove Hop-by-hop Header
This should be ON by default

Copy custom headers from HTTP requests to WebSocket connections. Might be required by some projects like MeshCentral.

Enable WebSocket Custom Header
This should be OFF by default

Settings in this section are for advanced users. Invalid settings might cause werid, unexpected behavior.

Force future attempts to access this site to only use HTTPS

Enable HSTS
HSTS header will be automatically ignored if the site is accessed using HTTP

Explicitly declare what functionality can and cannot be used on this website.

Enable Permission Policy
Enable Permission-Policy header with all allowed state.

Feature	Enabled	Allow All (*)	Self Only (self)
Generating

Grey out fields are non-standard permission policies