Parse forwarding headers to resolve real client IPs for Phoenix requests.
npx skills add https://github.com/agoodway/GoodSkills --skill bootstrap-client-ip
Please help me install this Agent Skill. Skill: bootstrap-client-ip Source: https://github.com/agoodway/GoodSkills/tree/main/skills/bootstrap-client-ip Command: npx skills add https://github.com/agoodway/GoodSkills --skill bootstrap-client-ip
It helps you fix incorrect client IP detection in a Phoenix app running behind reverse proxies by deriving the real originating IP from standard proxy headers.
:client_ip and :client_ip_string onto conn.assigns for downstream controllers and LiveViews.config/config.exs, with optional runtime overrides.Ask your agent to bootstrap client IP handling in your Phoenix 1.8 project by running the bootstrap-client-ip skill and wiring its plug into the browser (and optionally API) pipelines.
High-intent search queries and answers about installing and using this skill.
To resolve the real client IP in Phoenix, you can parse forwarding headers like X-Forwarded-For while skipping trusted proxy hops. This approach extracts the originating IP from the header chain and assigns it to conn.assigns for accurate downstream usage.
A trusted proxy range is a configurable CIDR block identifying legitimate reverse proxies like Cloudflare or Nginx. Skipping these IPs when parsing the X-Forwarded-For chain ensures you extract the actual client IP and reduces the risk of IP spoofing from malicious headers.
You can configure client IP resolution for Phoenix on Fly.io by setting up a dedicated module to parse proxy headers and adding a plug to your router pipelines. Default header priority and trusted proxy ranges can be set in config/config.exs.
Yes, the client IP resolution approach works with both API and LiveView pipelines in Phoenix. By wiring a dedicated plug into your browser and API pipelines, it assigns the resolved client IP and its string representation to conn.assigns for downstream controllers.
The best way to handle X-Forwarded-For spoofing in Phoenix is to configure trusted proxy ranges and parse the header chain from right to left, skipping known proxy IPs. This ensures only legitimate proxy hops are bypassed to find the real client.
gurujadaProvide Phoenix LiveView UI components and CSS-first theming utilities.
joyz0Implement device pairing, token authentication, access control, and audit logging for IoT gateways.
luis2404123Rotate IP addresses per request or sticky session for web scraping.
riandeoliveiraDetect HTTP Host header injection vulnerabilities during authorized security testing.