SSH Authentication Failure Logs Display 127.0.0.1 Due to FRP Proxy #10797

New Issue

GiteaMirror · 2025-11-02T09:18:24-06:00

GiteaMirror commented

2025-11-02 09:18:24 -06:00

Originally created by @zsio on GitHub (May 7, 2023).

Description

Hello Gitea team,

I have been using Gitea to create a self-hosted Git platform on my private network. I am also using FRP (Fast Reverse Proxy) to map the SSH port of my internal network to the public server's port 22. However, I am encountering an issue with the logging of SSH authentication failures.

Since the SSH connection is going through the FRP proxy, all the authentication failure logs are showing the IP address as 127.0.0.1, which is not helpful for identifying the actual source of the failed attempts. I tried enabling the access.log feature in hopes of obtaining more information about the failed SSH authentication attempts, but it appears that these records are not present in the access.log either.

I would like to kindly request assistance in resolving this issue. Ideally, I would like to have the logs show the actual IP addresses of the devices attempting to authenticate, rather than the local loopback address. This would greatly help in identifying and mitigating any potential security risks associated with unauthorized access attempts.

Thank you for your time and support. I look forward to your response and any suggestions on how to address this issue.

Best regards

Gitea Version

1.19.2

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

Git Version

No response

Operating System

No response

How are you running Gitea?

I use binary for installation

Database

SQLite

Originally created by @zsio on GitHub (May 7, 2023). ### Description Hello Gitea team, I have been using Gitea to create a self-hosted Git platform on my private network. I am also using FRP (Fast Reverse Proxy) to map the SSH port of my internal network to the public server's port 22. However, I am encountering an issue with the logging of SSH authentication failures. Since the SSH connection is going through the FRP proxy, all the authentication failure logs are showing the IP address as 127.0.0.1, which is not helpful for identifying the actual source of the failed attempts. I tried enabling the access.log feature in hopes of obtaining more information about the failed SSH authentication attempts, but it appears that these records are not present in the access.log either. I would like to kindly request assistance in resolving this issue. Ideally, I would like to have the logs show the actual IP addresses of the devices attempting to authenticate, rather than the local loopback address. This would greatly help in identifying and mitigating any potential security risks associated with unauthorized access attempts. Thank you for your time and support. I look forward to your response and any suggestions on how to address this issue. Best regards ### Gitea Version 1.19.2 ### Can you reproduce the bug on the Gitea demo site? No ### Log Gist _No response_ ### Screenshots ![image](https://user-images.githubusercontent.com/16083606/236661379-1e859cf2-bdfa-4171-a729-f277ce704901.png) ### Git Version _No response_ ### Operating System _No response_ ### How are you running Gitea? I use binary for installation ### Database SQLite

GiteaMirror added the type/question issue/needs-feedback labels 2025-11-02 09:18:24 -06:00

GiteaMirror closed this issue

2025-11-02 09:18:24 -06:00

GiteaMirror commented

2025-11-02 09:18:25 -06:00

@wxiaoguang commented on GitHub (May 7, 2023):

https://github.com/go-gitea/gitea/blob/release/v1.19/custom/conf/app.example.ini#L137

Make your proxy use PROXY protocol to send real client IP.

@wxiaoguang commented on GitHub (May 7, 2023): https://github.com/go-gitea/gitea/blob/release/v1.19/custom/conf/app.example.ini#L137 Make your proxy use PROXY protocol to send real client IP.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#10797