Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Remote Addr are not handled the same since akrabat/ip-address-middleware >= 2.5 #2351

@ymage

Description

@ymage

Shlink version

version >=4.4.0

PHP version

8.3

How do you serve Shlink

Self-hosted RoadRunner

Database engine

MySQL

Database version

11.6

Current behavior

Shlink run in docker container which is reverse-proxified with traefik/nginx.
X-Real-IP and X-Forwarded-For are both correctly set with the client address and REMOTE_ADDR is the proxy address.
When the visit is tracked, only the REMOTE_ADDR is registered, which is a 172.16.0.0/12 non routed IP address since akrabat/ip-address-middleware >= 2.5 (akrabat/ip-address-middleware#51)

Expected behavior

Shlink should allow to set trusted_proxies to akrabat/ip-address-middleware in order to get it to ignore them and retrieve the X-Real-IP header IP address

Minimum steps to reproduce

Run a shlink container behind a reverse-proxy with a private class IP address which can't override REMOTE_ADDR.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Done

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions