Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings
realclientip

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings
@realclientip

"Real" Client IP Implementations

Libraries to extract the "real" client IP from HTTP request headers

Lots of server need to get the "real" client IP1 fromX-Forwarded-For,Forwarded, and other HTTP headers. It seems like it should easy to do so and lots of developers assume it is, but... it's not, and itgets done incorrectly far too often. This can and will lead to bugs and vulnerabilities.

This organization is an attempt to create gold-standard implementations of the strategies for handling those headers. The first implementation is in Go, and will helpful be the reference for all others.

Feel free to use this code however you want. And it would be great if implementations in other languages can be contributed.

Footnotes

  1. The "real" is always quoted, because a) if a leftmost strategy is used, the IP can be spoofed, and b) if a rightmost strategy is used, the IP could belong to an intermediate proxy. But this is the best that can be done.↩

PinnedLoading

  1. realclientip-gorealclientip-goPublic

    Go reference implementation of "real" client IP algorithms

    Go 84 6

Repositories

Loading
Type
Select type
Language
Select language
Sort
Select order
Showing 2 of 2 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…

[8]ページ先頭
©2009-2025 Movatter.jp