fix(honeypot/naive): right, we want the client IP, not the load balancer IP

Signed-off-by: Xe Iaso <me@xeiaso.net>
This commit is contained in:
Xe Iaso
2025-12-16 04:44:59 -05:00
parent 40afc13d7f
commit ba8a1b7caf

View File

@@ -6,7 +6,6 @@ import (
"fmt"
"log/slog"
"math/rand/v2"
"net"
"net/http"
"net/netip"
"time"
@@ -154,8 +153,7 @@ func (i *Impl) ServeHTTP(w http.ResponseWriter, r *http.Request) {
realIP, _ := internal.RealIP(r)
if !realIP.IsValid() {
host, _, _ := net.SplitHostPort(r.RemoteAddr)
realIP = netip.MustParseAddr(host)
realIP = netip.MustParseAddr(r.Header.Get("X-Real-Ip"))
}
network, ok := internal.ClampIP(realIP)