How to Get the True User IP Address in Django When Using a Reverse Proxy?

How to Retrieve User IP Address in Django

When developing Django applications, you may encounter the need to obtain the user's IP address. This is useful for localization, traffic analysis, or security purposes.

One common approach is to use the request.META['REMOTE_ADDR'] attribute. However, if your Django application is deployed behind a reverse proxy, the REMOTE_ADDR header may not contain the user's real IP address.

To address this issue, Django provides the get_client_ip helper function. This function checks for the HTTP_X_FORWARDED_FOR header, which is commonly used by reverse proxies to indicate the original IP address of the client. If this header is present, the function returns the first IP address in the list. Otherwise, it falls back to the REMOTE_ADDR header.

Here's how to use the get_client_ip function:

<code class="python">def get_client_ip(request):
    x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
    if x_forwarded_for:
        ip = x_forwarded_for.split(',')[0]
    else:
        ip = request.META.get('REMOTE_ADDR')
    return ip</code>

Ensure that your reverse proxy is configured correctly for the get_client_ip function to work properly. For example, for Apache, you may need to install the mod_rpaf module.

Once you have implemented the get_client_ip function, you can retrieve the user's IP address by passing the request object as an argument:

<code class="python">ip_address = get_client_ip(request)</code>

The above is the detailed content of How to Get the True User IP Address in Django When Using a Reverse Proxy?. For more information, please follow other related articles on the PHP Chinese website!