antoniomika / sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
https://ssi.sh
MIT License
4.03k stars 308 forks source link

Document how to obtain the real client IP #327

Open mac-chaffee opened 3 weeks ago

mac-chaffee commented 3 weeks ago

Services running behind sish can access the client IP via X-Forwarded-For header, which is set here: https://github.com/antoniomika/oxy/blob/5924ea01c950a0c86c95ccb3f0cb90c38702f3a1/forward/rewrite.go#L23

The use-case for this is enforcing IP bans or IP allow-lists for services running behind sish.

Replaces this PR: https://github.com/picosh/docs/pull/8