Skip to main content

extract_client_ip

modo::ip

Function extract_client_ip 

Source 
pub fn extract_client_ip(
    headers: &HeaderMap,
    trusted_proxies: &[IpNet],
    connect_ip: Option<IpAddr>,
) -> IpAddr
Expand description

Resolve the real client IP from headers and connection info.

Resolution order:

  1. If trusted_proxies is non-empty, connect_ip is Some, and connect_ip is NOT contained in any trusted range → return connect_ip (the peer connected directly, so proxy headers must be ignored to avoid spoofing).
  2. X-Forwarded-For → leftmost entry that parses as an IpAddr.
  3. X-Real-IP → value parsed as an IpAddr.
  4. connect_ip if provided.
  5. 127.0.0.1 as final fallback.

This is the low-level primitive used by ClientIpLayer; prefer the layer in HTTP handlers and call this directly only when you already have a HeaderMap without a Tower stack.