KH22 (KH >= 21.7) Reverse Proxying Broken

[DECEiFER]

Apple/Safari devices no longer connect via reverse proxy due to changes made in 21.7. You'll get a redirect to the original URL when you visit the proxy URL via Apache. Even commercial reverse proxy services (such as Port 443 Streaming by autopo.st) are affected.

[olonsoft]

I have the same problem. I am running 2.4.0-kh22 behind caddy reverse proxy and iphones can not listen to my stream.
Have you found a solution ?

[DECEiFER]

I'm afraid not. This started occurring on one of the KH22 pre-releases, so you could downgrade to KH21 or earlier. At the time I was paying for a reverse proxy and my provider also was able to replicate it and couldn't find a solution.

I'm running KH22 but since I run the server on my own box, I am just running it on ports 80 and 443 - no proxy, and certbot renews it the certs automatically every few months on a cron in standalone mode, stopping the Icecast server briefly to make the renewal possible through certbot's standalone web server. If you have the ability to do this, dump the reverse proxy.

[olonsoft]

I've found a fork of original icecast, patched with the code from icecast-kh to work with reverse proxy. I built a docker container with it (I use docker for all my services).
It seems to work right.

Note that in <x-forwarded-for>x.x.x.x</x-forwarded-for> you have to type the ip of your reverse proxy. It does not work with <x-forwarded-for>*</x-forwarded-for>