x-forwarded-for-wrangler

Wrangles the x-forwarded-for header value to get a best guess client ip address (left most non private ip)

Why

When using X-Forwarded-For, the assumption is that the left most ip address is the originating client.

This is however often not the case when a corportate network or a public wifi is being used.

In this case the rule "Always use the leftmost non-private address" is the best practice.

Private ip ranges are:

This module inplements the points discussed here Wrangling the x forwarded for header by Rod Vagg

var getClientIp = require('x-forwarded-for-wrangler');
 
getClientIp(request.headers['x-forwarded-for'])