skip cf-connecting-ip if it's from a worker

plausible · Aug 28, 2024 · 62911c5 · 62911c5
1 parent 8b06c91
commit 62911c5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/plausible_web/remote_ip.ex b/lib/plausible_web/remote_ip.ex
@@ -14,7 +14,9 @@ defmodule PlausibleWeb.RemoteIP do
       byte_size(x_plausible_ip) > 0 ->
         clean_ip(x_plausible_ip)
 
-      byte_size(cf_connecting_ip) > 0 ->
+      # https://developers.cloudflare.com/fundamentals/reference/http-request-headers/#cf-connecting-ip-in-worker-subrequests
+      # we don't want to use the Cloudflare Worker IP
+      byte_size(cf_connecting_ip) > 0 and cf_connecting_ip != "2a06:98c0:3600::103" ->
         clean_ip(cf_connecting_ip)
 
       byte_size(b_forwarded_for) > 0 ->