Real IP not working about plugin-cloudflaresupport

[MrMicky-FR]

The Request::setTrustedProxies will rewrite IP when the request is from a Cloudflare server (see Symfony documentation):

Plugin-CloudflareSupport/src/Middleware/TrustCloudflare.php

Line 55 in ec25777

Request::setTrustedProxies($this->proxies, Request::HEADER_X_FORWARDED_ALL);

What’s the output of $request->ip() ? A Cloudflare IP ?

[magrigry]

The result of $request->ip() is the IP of the docker container 172.23.0.1 (I am running Azuriom with the official docker-compose)
But If I add

Now I am getting the correct one

While writting this, I just realized that it might be due to the fact that I am using an other proxy between Cloudflare and the Docker Container. Docker maybe also proxies something ? I don't know...

Anyway the source IP is not replaced by CF-Connecting-IP because the source IP is not trusted
My solution works because it just bypass the trusted proxies which is not very good

[MrMicky-FR]

Yes, the ideal solution would be to configure Docker to forward the request ip.
Otherwise it’s also possible to replace Request::setTrustedProxies($this->proxies, Request::HEADER_X_FORWARDED_ALL); by Request::setTrustedProxies(['REMOTE_ADDR'], Request::HEADER_X_FORWARDED_ALL); which is nicer than changing the REMOTE_ADDR but this will rewrite the IP even if the request doesn’t come from Cloudflare which can lead to IP spoofing

[magrigry]

Yup, I just disallowed everything but Cloudflare IPs in my nginx config to avoid spoofing. I think I will stick with this dirty fix.
Anyway thanks a lot for your help