Skip to main content
A
ACS LLC
Inspiring
October 8, 2018
Answered

Load Balancer - Finding the clients IP number

  • October 8, 2018
  • 2 replies
  • 1595 views

I have a geo database that I use to look up the users country based on IP number.

I've noticed that the IP is the same for all users and therefore everybody apparently lives in the US

I believe this is because I've added the site to a load balancer., it's acting like a proxy and replacing the IP.

I've tried the cgi values - remote_addr and also http_x_forwarded_for (which is empty - I guess the data center has to set it to forward the IP)

Is there anything else that I'm missing that might sniff out that IP number?

Failing that I'll just take it off the load balancer and move the static HTML files that I do want on a load balancer onto separate servers, but I'd really like to know if there's a fix using CF before I do that

Also reached out to the ISP, maybe they can tweak the load balancer to forward the IP

    This topic has been closed for replies.
    Correct answer ACS LLC

    There's nothing extra in the headers.

    Well at least I now know, if I do need that IP AND a load balancer in the future I better check with the ISP to make sure that they are forwarding the IP!


    To add to this I did a little more research after hearing back from my ISP.

    It appears that I can indeed use X-Forwarded-For to obtain the actual email address, if the use is on a HTTP page, but if they are on a HTTPS page then the value is blank.

    The ISP tell me that they can't forward on HTTPS. Whether that is just them or that is the case with HTTPS on all ISP's I don't know

    2 replies

    pete_freitag
    pete_freitag
    Participating Frequently
    October 8, 2018

    I'd also check for other headers, while X-Forwarded-For is by far the most common request header that you would find it in, I've seen the IP show up in other headers as well when working with load balancers or proxies. For example X-Real-IP is another possibility. I'd just do a dump of the request headers:

    <cfdump var="#getHttpRequestData().headers#">

    If you are lucky they are already passing it somewhere, if not as Dave said it should be a pretty easy fix to enable it in the load balancer.

    A
    ACS LLCAuthor
    Inspiring
    October 8, 2018

    I decided that I can live without the load balancer for the CF side, in-fact it would be pain due to maintaining sessions and also some dynamic files (images I pull from third party API), which would require a lot more messing to make it viable. So I planned on dumping the static HTML's (HTML5 games) on a separate load balancer set up.

    However, my curiosity did get the better of me, so although I'd flipped the DNS to go straight to the domain, I have switched it back to see what headers do exist. Once the DNS updates I'll report back

    A
    ACS LLCAuthor
    Inspiring
    October 8, 2018

    There's nothing extra in the headers.

    Well at least I now know, if I do need that IP AND a load balancer in the future I better check with the ISP to make sure that they are forwarding the IP!

    D
    Community Expert
    Dave WattsCommunity Expert
    Community Expert
    October 8, 2018

    You'll have to rely on the ISP. There's nothing except X-Forwarded-For available to you within your CF application.

    Dave Watts, Fig Leaf Software

    Dave Watts, Eidolon LLC
    A
    ACS LLCAuthor
    Inspiring
    October 8, 2018

    That's what I figured. Time to dump the load balancer and move those static pages only to a new server on a load balancer

    D
    Community Expert
    Dave WattsCommunity Expert
    Community Expert
    October 8, 2018

    Passing the X-Forwarded-For header from the load balancer is kind of a standard thing, so they should be able to implement that for you pretty easily.

    Dave Watts, Fig Leaf Software

    Dave Watts, Eidolon LLC
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices