fastly-ips 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: '09a11f2e6134e5eea71fbf1cd0618cbde6275667250f2b4b5bdf6653da8b89e1'
+  data.tar.gz: 2b4cae63d0251c0d570309154aab6c9db29d36d8540436726efc26691432e6e1
+SHA512:
+  metadata.gz: 217165fcb4ff88d6a9fbc8ecbe24d55540b8824334e89a84000d008742fff96efbf4af9d927e9f599bdef50e565d7d501de37ceb735915f6b3aa164ca38910d4
+  data.tar.gz: b35f6ba94c95597ed991f9a3d69cab0f4c2cbb0195ee4c452c91dd278366f030065d89a85dbc605e2350f08ccbc7a9cc1e0f3ca134112a634ba9426781b2d727

data/LICENSE

@@ -0,0 +1,20 @@
+Copyright Kevin Sylvestre
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,29 @@
+# Fastly IPs
+
+[![LICENSE](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/ksylvest/fastly-ips/blob/main/LICENSE)
+[![RubyGems](https://img.shields.io/gem/v/fastly-ips)](https://rubygems.org/gems/fastly-ips)
+[![GitHub](https://img.shields.io/badge/github-repo-blue.svg)](https://github.com/ksylvest/fastly-ips)
+[![Yard](https://img.shields.io/badge/docs-site-blue.svg)](https://fastly-ips.ksylvest.com)
+[![CircleCI](https://img.shields.io/circleci/build/github/ksylvest/fastly-ips)](https://circleci.com/gh/ksylvest/fastly-ips)
+
+FastlyIPs assigns the proxy [IPv4](https://www.fastly.com/ips-v4/) and [IPv6](https://www.fastly.com/ips-v6/) fastly IPs allowing `request.remote_ip` to return back the actual IP instead of a fastly datacenter IP.
+
+## Installation
+
+Configure the fastly IPs gem for any environment needed:
+
+```ruby
+gem "fastly-ips"
+```
+
+```bash
+$ bundle
+```
+
+## Usage
+
+Use `request.remote_ip` instead of `request.ip` to properly retrieve IPs:
+
+```ruby
+request.remote_ip
+```

data/Rakefile

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'bundler/setup'
+
+require 'bundler/gem_tasks'
+
+namespace :fastly do
+  desc 'Dump current Fastly IP ranges (v4 and v6)'
+  task :ips do
+    require 'fastly'
+
+    api = Fastly::PublicIpListApi.new
+    result = api.list_fastly_ips
+
+    puts '=== IPv4 ==='
+    result.addresses.each do |address|
+      puts address
+    end
+
+    puts
+
+    puts '=== IPv6 ==='
+    result.ipv6_addresses.each do |address|
+      puts address
+    end
+  end
+end

data/lib/fastly/ips/railtie.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Fastly
+  module IPs
+    # Configure trusted_proxies with Fastly IPv4 and IPv6 addresses.
+    class Railtie < ::Rails::Railtie
+      initializer 'fastly-ips.configure_rails_initialization' do |app|
+        app.config.action_dispatch.trusted_proxies = ActionDispatch::RemoteIp::TRUSTED_PROXIES + ::Fastly::IPs::IPS
+      end
+    end
+  end
+end

data/lib/fastly/ips/version.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Fastly
+  module IPs
+    VERSION = '1.0.0'
+  end
+end

data/lib/fastly/ips.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require 'fastly/ips/version'
+require 'fastly/ips/railtie'
+
+module Fastly
+  module IPs
+    IPS_V4 = %w[
+      23.235.32.0/20
+      43.249.72.0/22
+      103.244.50.0/24
+      103.245.222.0/23
+      103.245.224.0/24
+      104.156.80.0/20
+      140.248.64.0/18
+      140.248.128.0/17
+      146.75.0.0/17
+      151.101.0.0/16
+      157.52.64.0/18
+      167.82.0.0/17
+      167.82.128.0/20
+      167.82.160.0/20
+      167.82.224.0/20
+      172.111.64.0/18
+      185.31.16.0/22
+      199.27.72.0/21
+      199.232.0.0/16
+    ].freeze
+
+    IPS_V6 = %w[
+      2a04:4e40::/32
+      2a04:4e42::/32
+    ].freeze
+
+    IPS = IPS_V4 + IPS_V6
+  end
+end

metadata

@@ -0,0 +1,63 @@
+--- !ruby/object:Gem::Specification
+name: fastly-ips
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Kevin Sylvestre
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: This library ensures Fastly IPs are trusted with by Ruby on Rails applications.
+email:
+- kevin@ksylvest.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- Rakefile
+- lib/fastly/ips.rb
+- lib/fastly/ips/railtie.rb
+- lib/fastly/ips/version.rb
+homepage: https://github.com/ksylvest/fastly_ips
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/ksylvest/fastly_ips
+  changelog_uri: https://github.com/ksylvest/fastly_ips/releases
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '4.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.7
+specification_version: 4
+summary: A library to configure Fastly trusted IPs.
+test_files: []