How get user IP when using a 'Proxy'

[BobSquarePants]

HI everyone,

I'm using nginx -> Gunicorn -> Flask

Great, but when I'm doing a

request.environ['REMOTE_ADDR']

I get the localhost (127.0.0.1)

So I suppose I have to setup nginx and Gunicorn (also ?) to forward the header ?

Thanks

[RonnyPfannschmidt]

by applying https://werkzeug.palletsprojects.com/en/2.2.x/middleware/proxy_fix/

this is intentionally not the default to protect apps from being passed those headers with malicious intent

[RonnyPfannschmidt]

whops, see https://flask.palletsprojects.com/en/2.2.x/deploying/proxy_fix/ for the exact fix

[BobSquarePants]

Thank you @RonnyPfannschmidt ,

So in this scenario nginx - > Gunicorn -> Flask

how many number of proxies do I have 1 or 2 I guess 2.. ?

from werkzeug.middleware.proxy_fix import ProxyFix

app.wsgi_app = ProxyFix(
    app.wsgi_app, x_for=2, x_proto=2, x_host=2, x_prefix=2
)

[RonnyPfannschmidt]

Typically gunicorn is not a proxy, but the wsgi server

My initial guess would be 1

You may need to validate proxy pass over in nginx

In case you run on something like kubernetes, there may be a additional ingres/routing proxy

[BobSquarePants]

It worked ! Thanks @RonnyPfannschmidt