Forum OpenACS Development: [ad_conn peeraddr] returns 127.0.0.1

Collapse
1: [ad_conn peeraddr] returns 127.0.0.1
Posted by Iuri Sampaio on 11/25/17 02:02 AM
Hi there,
Even after setting up NGINX to be capable to get client's real IP, my OACS box doesn't return client's IP as expected, using [ad_conn peeradr]

(refs. https://ypereirareis.github.io/blog/2017/02/15/nginx-real-ip-behind-nginx-reverse-proxy/ and
https://easyengine.io/tutorials/nginx/forwarding-visitors-real-ip/ )

127.0.0.1 is the IP assigned within NS-config.tcl, Plus, if I sing any other IP such as: VPN's or external's IP, [ad_conn peeraddr] will return respectively.

I believe the issue is on Naviserver. I wonder if I need to rebuild it with extra modules. If so, which ones?

Context: NGINX runs in front of NaviServer, which serves OpenACS.

Best wishes

Collapse
2: Re: [ad_conn peeraddr] returns 127.0.0.1 (response to 1)
Posted by Gustaf Neumann on 11/25/17 12:03 PM
Have you checked the sample config file for OpenACS [1]? It has a variable called "proxy_mode" which should be set to "true" in such configurations. If you have done this, and no success, check your nginx setup, whether it provides the necessary "X-Forwarded-For" header field.

hope this helps.
-gn

[1] https://bitbucket.org/naviserver/naviserver/src/tip/openacs-config.tcl?at=default&fileviewer=file-view-default

Collapse
3: Re: [ad_conn peeraddr] returns 127.0.0.1 (response to 2)
Posted by Iuri Sampaio on 11/25/17 10:30 PM
Right on! A nice and easy parameter amend. It works now!
Thanks Gustaf
Collapse
4: Re: [ad_conn peeraddr] returns 127.0.0.1 (response to 3)
Posted by Iuri Sampaio on 11/26/17 03:45 PM
Just a few more information regarding the theme!
Collapse
5: Re: [ad_conn peeraddr] returns 127.0.0.1 (response to 4)
Posted by Iuri Sampaio on 11/26/17 03:45 PM
Just a few more information regarding the theme!

https://openacs.org/forums/message-view?message_id=1156435