diff options
Diffstat (limited to 'internal/net/server.go')
| -rw-r--r-- | internal/net/server.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/internal/net/server.go b/internal/net/server.go index c818eef..daf3e47 100644 --- a/internal/net/server.go +++ b/internal/net/server.go @@ -151,6 +151,14 @@ func (sess *Session) RemoteAddr() string { return "" } +// RemoteHost returns the client's IP/host without the ephemeral source port. +// Rate-limit keys must use this: RemoteAddr includes a fresh port on every +// reconnect, so keying on it lets a reconnecting attacker reset the limiter. +// Synthetic/test connections without a transport address return "". +func (sess *Session) RemoteHost() string { + return remoteHost(sess.RemoteAddr()) +} + // sessionSeq is the source of Session.seq values. It is incremented under the // adding Hub's mutex, so no extra atomicity is needed for correctness; atomic // access keeps the package-level default counter safe if Hub.Add is ever |