logger.debug("Client IP from X-Real-IP: clientIp={}, remoteAddr={}", clientIp, remoteAddr);
                }
                return clientIp;
            }
        }

        if (logger.isDebugEnabled()) {
            logger.debug("Client IP from remoteAddr: ip={}", remoteAddr);
        }
        return remoteAddr;
    }

    /**
     * Check if the IP is a trusted proxy.

        // When remoteAddr is not a trusted proxy, headers should be ignored
        final MockletHttpServletRequest request = getMockRequest();
        request.setRemoteAddr("192.168.1.100");
        request.addHeader("X-Forwarded-For", "203.0.113.50");
        request.addHeader("X-Real-IP", "203.0.113.75");
        // Should return remoteAddr, not the spoofed headers

    delegate!!.bind(localAddr)
  }

  @Throws(IOException::class)
  override fun connect(remoteAddr: SocketAddress) {
    delegate!!.connect(remoteAddr)
  }

  @Throws(IOException::class)
  override fun connect(
    remoteAddr: SocketAddress,
    timeout: Int,
  ) {
    delegate!!.connect(remoteAddr, timeout)
  }

  override fun isInputShutdown(): Boolean = delegate!!.isInputShutdown

	// We manage our own deadlines.
	conn = deadlineconn.Unwrap(conn)
	remoteAddr := conn.RemoteAddr().String()
	// will write an OpConnectResponse message to the remote and log it once locally.
	defer conn.Close()
	writeErr := func(err error) {
		if err == nil {
			return
		}
		if errors.Is(err, io.EOF) {
			return
		}
		gridLogOnceIf(ctx, err, remoteAddr)
		resp := connectResp{
			ID:             m.ID,

    void setUp() throws UnknownHostException {
        InetAddress localAddr = InetAddress.getByName("192.168.1.100");
        InetAddress remoteAddr = InetAddress.getByName("192.168.1.200");

        localInterface = new NetworkInterfaceInfo(localAddr, 1000);
        remoteInterface = new NetworkInterfaceInfo(remoteAddr, 1000);

        channelInfo = new ChannelInfo("test-channel", mockTransport, localInterface, remoteInterface);
    }

    @Test

        InetAddress localAddr = InetAddress.getByName("192.168.1.10");
        InetAddress remoteAddr = InetAddress.getByName("192.168.1.100");

        NetworkInterfaceInfo localNic = new NetworkInterfaceInfo(localAddr, 1);
        NetworkInterfaceInfo remoteNic = new NetworkInterfaceInfo(remoteAddr, 445);

        // Mock transport doesn't have isConnected, but we can work around it

	return []byte{}
}

func (m *MockConnMeta) ClientVersion() []byte {
	return []byte{}
}

func (m *MockConnMeta) ServerVersion() []byte {
	return []byte{}
}

func (m *MockConnMeta) RemoteAddr() net.Addr {
	return nil
}

func (m *MockConnMeta) LocalAddr() net.Addr {
	return nil
}

func newSSHConnMock(username string) ssh.ConnMetadata {
	return &MockConnMeta{username: username}
}

		}
	}

	return addr
}

// GetSourceIPRaw retrieves the IP from the request headers
// and falls back to r.RemoteAddr when necessary.
// however returns without bracketing.
func GetSourceIPRaw(r *http.Request) string {
	addr := GetSourceIPFromHeaders(r)
	if addr == "" {
		addr = r.RemoteAddr
	}

	// Default to remote address if headers not set.
	raddr, _, _ := net.SplitHostPort(addr)
	if raddr == "" {

func ipv6fix(clientIP string) string {
	return strings.Split(clientIP, "%")[0]
}

func (rw *headerRewriter) Rewrite(req *http.Request) {
	if clientIP, _, err := net.SplitHostPort(req.RemoteAddr); err == nil {
		clientIP = ipv6fix(clientIP)
		if req.Header.Get(xRealIP) == "" {
			req.Header.Set(xRealIP, clientIP)
		}
	}

	xfProto := req.Header.Get(xForwardedProto)
	if xfProto == "" {

	}

	sshConfig.AddHostKey(private)

	handleSFTPSession := func(channel ssh.Channel, sconn *ssh.ServerConn) {
		var remoteIP string

		if host, _, err := net.SplitHostPort(sconn.RemoteAddr().String()); err == nil {
			remoteIP = host
		}
		server := sftp.NewRequestServer(channel, NewSFTPDriver(sconn.Permissions, remoteIP), sftp.WithRSAllocator())
		defer server.Close()
		server.Serve()
	}