Reputation: 581
We are currently working on a program to catch automated attacks (brute force, DoS etc.). We wanted to have a 2nd level handling of it next to Firewall handling. We already developed a logic but the problem is how to accurately get the ip address of the requestor.
The request passes through the ff:
Request -> firewall -> web server -> mobile app server -> app server for APIs(where our web service is deployed).
Its also possible the request can be behind a proxy. With this is it still possible to get the correct ip address of the requestor? so it could be blocked.
Upvotes: 0
Views: 60
Reputation: 11
You web server maybe nginx, consider Using the Forwarded header.But you can only get the ip of the proxy server when the request behind a proxy, because it limited by the tcp/ip layer mechanism.
Upvotes: 1