Monitor Sessions, showing all the same IPs Addresses

[LifeOfJonny]

Hi,

I was monitoring the user sessions and its showing the same 2 RFC1918 IP address for all our sessions.

Guessing its meant to show the IP they are connecting from, Eg their home/work IP address. Eg 88.109.x.x

 

Jonny

[James Ainsworth]

Are the home workers working through a VPN connection into your office?  Hornbill wouldn't be able to see internal IP address so I'm assuming that the listed IP address are those of your gateways.

[Nikolaj]

Hello,

In our monitoring it shows the same IP address.

Nikolaj

[LifeOfJonny]

12 hours ago, James Ainsworth said:

Are the home workers working through a VPN connection into your office?  Hornbill wouldn't be able to see internal IP address so I'm assuming that the listed IP address are those of your gateways.

I connect to Hornbill direct, as we use a Split Tunnel with our Corporate VPN. Some people do connect to Hornbill via our VPN, our corporate ISP starts with 195.x.x.x or 95.x.x.x addresses

RFC1918 networks aren't publicly route-able, so you wouldn't see our internal IPs anyway.

https://www.arin.net/reference/research/statistics/address_filters/#:~:text=According to standards set forth,0.0 – 10.255.

Edited August 28, 2020 by LifeOfJonny

[Martyn Houghton]

@James Ainsworth

IP addresses 10.x.x.x are all internal IP addresses and given all our different instances are showing the same internal IP Addresses and not external IP address, I suspect these addresses being shown are those on the Hornbill infrastructure which is used to route through to our instances.

Cheers

Martyn

[LifeOfJonny]

Will this be getting fixed to show origin IPs instead for example using "X-Forwarded-For" HTTP header instead of showing the load balancer IPs?