fleet/docs/Deploy/public-ip.md
Lucas Manuel Rodriguez 37885d0932
Remove filtering of private IPs in public IP field (#17352)
#11102

- [X] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-03-08 12:57:18 -03:00

904 B

Public IPs of devices

Fleet attempts to deduce the public IP of devices from well-known HTTP headers received on requests made by the osquery agent.

The HTTP request headers are checked in the following order:

  1. If True-Client-IP header is set, then Fleet will extract its value.
  2. If X-Real-IP header is set, then Fleet will extract its value.
  3. If X-Forwarded-For header is set, then Fleet will extract the first comma-separated value.
  4. If none of the above headers are present in the HTTP request then Fleet will attempt to use the remote address of the TCP connection (note that on deployments with ingress proxies the remote address seen by Fleet is the IP of the ingress proxy).