Load balancer and IP Question Questions

Some of my apps verify that the ip address is allowed to access the app… but this isn’t working because all requests are going through the load balancer and the cgi.remote_host (what i currently use to verify a users ip) is always going to show the load balancer.  How do I work around this issue?
polobruceAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
SidFishesConnect With a Mentor Commented:
afaik, not in CF. From what I've read some load balancers can be set up to modify http headers with http-proxy information and some can be set to "transparent" mode...but this really is dependant on what you are using for LB (and is certainly beyond me)
0
 
SidFishesCommented:
AFAIK, don't think there's much to do about it except create a "proper" user authentication scheme using a login and password. IP solutions are dodgy at best and as you are seeing can all sorts of unforseen issues. Plus services like AOL route all traffic through a few IPs in Virginia and anyone with a dynamic address (dialup) would be SOL. Maybe that's not an issue for your app but it does show the weakness of IP authentication.
0
 
polobruceAuthor Commented:
So SideFishes, there is no way to get the clients ip instead of the load balancers ip?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.