How do I get the IP of the client?

[banshandeqie]

Type of issue

• Bug
• Enhancement
• Compliance
• Question
• Help wanted

Current Behavior

The OPCUA service limits some IP addresses and allows only some IP addresses to connect.
How do I get the IP of the client?

Expected Behavior

The OPCUA service disables TCP connections based on disallowed IP addresses.

Steps To Reproduce

No response

Environment

- OS:
- Environment:
- Runtime:
- Nuget Version:
- Component:
- Server:
- Client:

Anything else?

No response

[mrsuciu]

@banshandeqie
As far as I am aware the stack does not expose the IP of the client which tries to establish a session.
However you could identify the client by the information present in the application client certificate on the ActivateSession service call and reject/accept the session at that level.

[banshandeqie]

Session. ValidateBeforeActivate validation is identity, my intention is to limit the IP address of the fixed and OPCUA server to communicate, don't allow other to communicate with the client IP address. If the EVENT is exposed in TcpTransportListener in the code, the IP address can be obtained in OnAccept, and the EVENT can be processed when it is exposed.

[mrsuciu]

@banshandeqie The job of limiting depending on IP address black lists and other network layer fields is done usually on the network administration side and doing it using an IP is also very "weak" from a security point of view since it can be easily bypassed (ex: by spoofing it).

[mregen]

@banshandeqie, would you suggest a feature which allows the application to hook in Tcp OnAccept and filter the possible connections?
E.g. only allow connections from an address range?