当Artalk部署在fly.io上时无法获取正确的访客IP

[aaro-n]

问题描述

我的Artalk后端部署在fly.io上，之前是2.8.3，升级到2.8.6后发表评论获取的用户IP固定为172.16.147.82。

看到的结果

获取的用户IP为内网IP。

希望的结果

可以正确获取用户IP

排查

在VPS上用Docker镜像部署（2.8.6)，直接用IP访问，可以正确获取访问者IP，但部署在fly.io上就无法获取用户IP。

受影响的版本

2.8.3和2.8.4正常
2.8.5和2.8.6无法正确获取用户IP

日志

2.8.3

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] ________ ________ _________ ________ ___ ___ __

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] |\ __ \|\ __ \|\___ ___\\ __ \|\ \ |\ \|\ \

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] \ \ \|\ \ \ \|\ \|___ \ \_\ \ \|\ \ \ \ \ \ \/ /|_

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] \ \ __ \ \ _ _\ \ \ \ \ \ __ \ \ \ \ \ ___ \

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] \ \ \ \ \ \ \\ \| \ \ \ \ \ \ \ \ \ \____\ \ \\ \ \

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] \ \__\ \__\ \__\\ _\ \ \__\ \ \__\ \__\ \_______\ \__\\ \__\

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] \|__|\|__|\|__|\|__| \|__| \|__|\|__|\|_______|\|__| \|__|

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] Artalk (v2.8.3/8af7136)

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] -> A Self-hosted Comment System.

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] -> https://artalk.js.org

2024-05-12T08:32:03.005 app[148ed5d5a79748] nrt [info] -------------------------------

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] ┌───────────────────────────────────────────────────┐

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ Fiber v2.52.0 │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ http://127.0.0.1:23366 │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ (bound on host 0.0.0.0 and port 23366) │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ Handlers ............ 94 Processes ........... 1 │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] │ Prefork ....... Disabled PID ............... 319 │

2024-05-12T08:32:03.009 app[148ed5d5a79748] nrt [info] └───────────────────────────────────────────────────┘

2024-05-12T08:32:30.838 app[148ed5d5a79748] nrt [info] ERROR Response: GET /api/v2/comments/310 ==> "评论未找到" host=talk.itansuo.info id= ip=115.239.174.xx, 115.239.174.xx, 2603:xxx:800f:1ee:bd45:8cc0:a3f7:95b1, 2a09:xxx:1::3:9359 referer= status=200 user_agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36

2024-05-12T08:32:30.838 app[148ed5d5a79748] nrt [info] ERROR 404: GET /api/v2/comments/310 6.586924ms 115.239.174.202 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36

2.8.4

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] ________ ________ _________ ________ ___ ___ __

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] |\ __ \|\ __ \|\___ ___\\ __ \|\ \ |\ \|\ \

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] \ \ \|\ \ \ \|\ \|___ \ \_\ \ \|\ \ \ \ \ \ \/ /|_

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] \ \ __ \ \ _ _\ \ \ \ \ \ __ \ \ \ \ \ ___ \

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] \ \ \ \ \ \ \\ \| \ \ \ \ \ \ \ \ \ \____\ \ \\ \ \

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] \ \__\ \__\ \__\\ _\ \ \__\ \ \__\ \__\ \_______\ \__\\ \__\

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] \|__|\|__|\|__|\|__| \|__| \|__|\|__|\|_______|\|__| \|__|

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] Artalk (v2.8.4/3ff891b)

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] -> A Self-hosted Comment System.

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] -> https://artalk.js.org

2024-05-12T08:36:45.350 app[148ed5d5a79748] nrt [info] -------------------------------

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] ┌───────────────────────────────────────────────────┐

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ Fiber v2.52.4 │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ http://127.0.0.1:23366 │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ (bound on host 0.0.0.0 and port 23366) │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ Handlers ............ 94 Processes ........... 1 │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] │ Prefork ....... Disabled PID ............... 319 │

2024-05-12T08:36:45.353 app[148ed5d5a79748] nrt [info] └───────────────────────────────────────────────────┘

2024-05-12T08:36:55.379 app[148ed5d5a79748] nrt [info] ERROR Response: GET /api/v2/comments/310 ==> "评论未找到" host=talk.itansuo.info id= ip=115.239.174.xx, 115.239.174.xxx, 2603:xxx:800f:1ee:bd45:8cc0:a3f7:95b1, 2a09:xxx:1::3:9359 referer= status=200 user_agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36

2024-05-12T08:36:55.379 app[148ed5d5a79748] nrt [info] ERROR 404: GET /api/v2/comments/310 7.834816ms 115.239.174.205 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36

2.8.5

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] ________ ________ _________ ________ ___ ___ __

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] |\ __ \|\ __ \|\___ ___\\ __ \|\ \ |\ \|\ \

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] \ \ \|\ \ \ \|\ \|___ \ \_\ \ \|\ \ \ \ \ \ \/ /|_

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] \ \ __ \ \ _ _\ \ \ \ \ \ __ \ \ \ \ \ ___ \

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] \ \ \ \ \ \ \\ \| \ \ \ \ \ \ \ \ \ \____\ \ \\ \ \

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] \ \__\ \__\ \__\\ _\ \ \__\ \ \__\ \__\ \_______\ \__\\ \__\

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] \|__|\|__|\|__|\|__| \|__| \|__|\|__|\|_______|\|__| \|__|

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] Artalk (v2.8.5/5435e5c)

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] -> A Self-hosted Comment System.

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] -> https://artalk.js.org

2024-05-12T08:30:20.258 app[148ed5d5a79748] nrt [info] -------------------------------

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] ┌───────────────────────────────────────────────────┐

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ Fiber v2.52.4 │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ http://127.0.0.1:23366 │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ (bound on host 0.0.0.0 and port 23366) │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ Handlers ............ 95 Processes ........... 1 │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] │ Prefork ....... Disabled PID ............... 319 │

2024-05-12T08:30:20.262 app[148ed5d5a79748] nrt [info] └───────────────────────────────────────────────────┘

2024-05-12T08:30:51.642 app[148ed5d5a79748] nrt [info] 2024/05/12 16:30:51.642 ERROR [handler/comment_get.go:34] 评论未找到 {"id": "ec42312e-ee6f-44b8-a2b4-123aec52ceb8", "path": "/api/v2/comments/310", "method": "GET", "ip": "172.16.147.82", "remote_addr": "172.16.147.82:52572", "host": "talk.itansuo.info", "referer": "", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36", "status": 404}

2024-05-12T08:30:51.642 app[148ed5d5a79748] nrt [info] 2024/05/12 16:30:51.642 ERROR [HTTP] 16:30:51 | 404 | 30.399431ms | 172.16.147.82 | GET | /api/v2/comments/310 | - | ec42312e-ee6f-44b8-a2b4-123aec52ceb8

2.8.6

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] ________ ________ _________ ________ ___ ___ __

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] |\ __ \|\ __ \|\___ ___\\ __ \|\ \ |\ \|\ \

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] \ \ \|\ \ \ \|\ \|___ \ \_\ \ \|\ \ \ \ \ \ \/ /|_

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] \ \ __ \ \ _ _\ \ \ \ \ \ __ \ \ \ \ \ ___ \

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] \ \ \ \ \ \ \\ \| \ \ \ \ \ \ \ \ \ \____\ \ \\ \ \

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] \ \__\ \__\ \__\\ _\ \ \__\ \ \__\ \__\ \_______\ \__\\ \__\

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] \|__|\|__|\|__|\|__| \|__| \|__|\|__|\|_______|\|__| \|__|

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] Artalk (v2.8.6/4dd0ae4)

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] -> A Self-hosted Comment System.

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] -> https://artalk.js.org

2024-05-12T07:10:51.388 app[148ed5d5a79748] nrt [info] -------------------------------

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] ┌───────────────────────────────────────────────────┐

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ Fiber v2.52.4 │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ http://127.0.0.1:23366 │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ (bound on host 0.0.0.0 and port 23366) │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ Handlers ........... 107 Processes ........... 1 │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] │ Prefork ....... Disabled PID ............... 319 │

2024-05-12T07:10:51.391 app[148ed5d5a79748] nrt [info] └───────────────────────────────────────────────────┘

2024-05-12T07:12:07.621 app[148ed5d5a79748] nrt [info] 2024/05/12 15:12:07.621 INFO [handler/setting_apply.go:63] [Apply Settings] 服务重启完毕

2024-05-12T07:19:51.664 app[148ed5d5a79748] nrt [info] 2024/05/12 15:19:51 INFO New SSH session email=artalk@11111.xyz verified=true

2024-05-12T08:09:00.712 app[148ed5d5a79748] nrt [info] 2024/05/12 16:09:00.712 ERROR [handler/comment_get.go:34] 评论未找到 {"id": "a96f7617-789a-4276-8d45-3081b33f9d41", "path": "/api/v2/comments/21", "method": "GET", "ip": "172.16.147.82", "remote_addr": "172.16.147.82:43960", "host": "talk.itansuo.info", "referer": "", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36", "status": 404}

2024-05-12T08:09:00.712 app[148ed5d5a79748] nrt [info] 2024/05/12 16:09:00.712 ERROR [HTTP] 16:09:00 | 404 | 22.798906ms | 172.16.147.82 | GET | /api/v2/comments/21 | - | a96f7617-789a-4276-8d45-3081b33f9d41

[qwqcode]

设置里面：服务器、代理标头（http.proxy_header）填一下 X-Forwarded-For，手动重启容器

[aaro-n]

添加变量解决，关闭问题。

变量

ATK_HTTP_PROXY__HEADER = "X-Forwarded-For"