Read X-Forwarded-For header

Question

I want to read the value of the X-Forwarded-For header value in a request.

I\'ve tried

HttpContext.Current.Request.Headers[\"X-Forwarded-For\"].Split         


        

Answer 1

Sometimes the first may contain one of the local (private) reserved addresses which is not useful. Also the first position(s) are open to to spoofing.

Update - April 2018: Sampling the cases of a live production website where the first address is local (private) indicates some configuration issue on the end user's network or his ISP. The cases are occurring only rarely (<1%) and consistently for the same end users.

The answer below suggests walking from right to left until you hit a public address. Not sure anyone actually does this but it points out the issue.

https://husobee.github.io/golang/ip-address/2015/12/17/remote-ip-go.html