proxies.xml

<spring:beans xmlns="http://membrane-soa.org/proxies/1/"
			  xmlns:spring="http://www.springframework.org/schema/beans"
			  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
			  xsi:schemaLocation="http://www.springframework.org/schema/beans
	                    http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
	                    http://membrane-soa.org/proxies/1/ http://membrane-soa.org/schemas/proxies-1.xsd">


	<!-- Disable the addition of X-Forwarded* headers -->
	<ruleMatching xForwardedForEnabled="false"/>

	<router>

		<!-- Global plugins that are executed before and after the ones local to an API -->
		<global>
			<request>
				<!-- Filter headers before passing them to the outside -->
				<headerFilter>
					<!-- Include only headers necessary for functionality and considered safe -->
					<include>Accept.*</include>
					<include>Cache-Control</include>
					<include>Content-Type</include>
					<include>Content-Length</include>
					<include>Cookie</include>
					<include>X-Requested-With</include>

					<!-- If you want to pass authentication headers
					     from the internal clients to the external API
					     allow them here, otherwise take that line out.
					-->
					<include>X-Api-Key</include>

					<!-- Exclude (remove) all other headers not explicitly included above -->
					<exclude>.*</exclude>
				</headerFilter>
			</request>
		</global>

		<api port="2000" name="Outgoing API">
			<!-- Replace this with the address of the external API -->
			<target url="http://localhost:3000"/>
		</api>

		<!-- Mock for testing and demonstration. Take it out in production -->
		<api port="3000" name="External Mock API">
			<request>
				<log message="Header: ${header}"/>
			 	<template contentType="text/plain" pretty="true">
				<![CDATA[
					Headers exposed to external API: <%= headers.keySet() %>
				]]>
				</template>
			</request>
			<return/>
		</api>		

	</router>

</spring:beans>