VisitorGroupsCriteriaPack and proxy servers get Client IP

Øyvind Jonassen

Vote:

When using IPRangeCriterion in VisitorGroupsCriteriaPack it just reads the httpContext.Request.UserHostAddress witch in my case is the ip of my netscaler proxy server. The clients ip is in request X-Forwarded-For . What is the best way to handle this?

Regards Øyvind

#171240

Nov 03, 2016 11:30

Marija Jemuovic

Vote:

This is about CDN, not proxy, not sure if it would work for you, but it's easy to try.

http://world.episerver.com/documentation/developer-guides/CMS/Deployment/content-delivery-network-cdn-configuration/

BR,

Marija

#171256

Nov 03, 2016 20:34

Henrik Fransas

Vote:

Marija, that is about CDN, but also load balancing like products like A10 and F5 are also hiding the true caller id, so if you are using one of theses (or maybe also a proxy server) then it should work with the article you linked.

#171261

Nov 04, 2016 6:56

Øyvind Jonassen

Vote:

Thanks for the reply. Sorry to say that it did not work. Although when reading the doc (link) it looked very promising.

I am using EPiServer.CMS.Core 9.12.0.

Added this to appsettings

When i use this in a controller

Log.Info("X-Forwarded-For IS: " + Request.Headers.Get("X-Forwarded-For")); //Returns my real Ip
Log.Info("request.UserHostAddress: " + Request.UserHostAddress); //Return proxy Ip

When i create a visitor group that has Ip Range condition = "Proxyip" and use it on a block. That block is always visible.

If i change visitor group condition to my ip the block is never visible.

#171272

Nov 04, 2016 11:14

Øyvind Jonassen

Vote:

It works if i do something like this in web.config. Good/Bad ?

        <rule name="Map true incoming IP address" patternSyntax="Wildcard">
          <match url="*" />
          <action type="None" />
          <serverVariables>
            <set name="REMOTE_ADDR" value="{C:0}" />
          </serverVariables>
          <conditions>
            <add input="{HTTP_X-Forwarded-For}" pattern="*.*" />
          </conditions>
        </rule>

#171795

Nov 17, 2016 15:56

Øyvind Jonassen

Vote:

#171987

Nov 22, 2016 22:09