AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server
https://adguard.com/adguard-home/overview.html
GNU General Public License v3.0
25.63k stars 1.84k forks source link

When using Cloudflare as DOH, the CF-Connecting-IP is the true client IP. #7398

Open anglesgirl opened 2 weeks ago

anglesgirl commented 2 weeks ago

Prerequisites

Platform (OS and CPU architecture)

Linux, ARM64

Installation

GitHub releases or script from README

Setup

On a router, DHCP is handled by the router

AdGuard Home version

v0.107.53

Action

Replace the following command with the one you're calling or a description of the failing action:

nslookup -debug -type=a 'www.example.com' '$YOUR_AGH_ADDRESS'

Expected result

When using Cloudflare as DOH, the CF-Connecting-IP is the true client IP. When using Cloudflare's DOH service with CDN acceleration, CF-Connecting-IP is the actual IP address of the user. This is because DOH encrypts DNS requests, and CF-Connecting-IP can correctly display the user's IP even if the request has been accelerated by CDN.

Actual result

When using Cloudflare's DOH service with CDN acceleration, CF-Connecting-IP is the actual IP address of the user. This is because DOH encrypts DNS requests, and CF-Connecting-IP can correctly display the user's IP even if the request has been accelerated by CDN.

Additional information and/or screenshots

miui