Jan 17

Real IP Address

Prior to the introduction of the Eco Relay Servers, modders and server owners could obtain the real `IP Address` the player was connecting from, this information was available as part of `user.Client.Connection` Now, when connected via the relay server, player shows as under the IP of the relay server - rather than their own. This information is vital for servers administration, to avoid trolls and the likes. Currently we have a tool that matches same IP Addresses and alerts the admins about the duplicate IPs, since the change however, this information is no longer reliable. Example of changes: On `Eco.Shared.Networking.INetClient` - it already contains `IsLocal`, `AccountLevel`, `LoginSession`, so seems appropriate to place it there too. a) add bool `IsConnectedThroughRelay` b) add either `IPEndPoint TrueRemoteEndpoint` or even `IPAddress` `TrueClientAddress` from `endPoint.Address` that Relay server gets during `Eco.RelayServer.Handshake` On Relay Server: a) It stores connected client info in `ConcurrentDictionary<IPEndPoint>`, `ClientServerSocketInfo` `proxySockets` which it populates during Handshake. b) client real IP address is contained within `ClientServerSocketInfo socketInfo` -> `socketInfo.ClientEndPoint.Address` -> it would get assigned to mentioned above `TrueRemoteEndpoint` or `TrueClientAddress` whichever approach is chosen, as well as `IsConnectedTrueRelay` would get set to true. Thank you for your consideration.

Pending

Feb 14, 2024

No way. And it's against EU laws.

Feb 20, 2024

Joe Glas this is not against EU laws, otherwise you would not be able to host ANY game server in Europe xD

Feb 22, 2024

DarkMukke Your name sounds german, so here the german version for you: https://www.datenschutz.org/ip-adresse-datenschutz/#:~:text=….

Mar 5, 2024

Joe Glas Thanks .. will you be assuming my gender next ? You are correct that IP is PII, but that doesn't mean it is against the law to use it. Article 46 clearly states Personal Data may be transferred to other countries, even internationally as long as there is appropriate security. https://gdpr-info.eu/art-46-gdpr/ This is also further made clear by Article 25 https://gdpr-info.eu/art-25-gdpr/ "The controller shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed." Meaning, you have a lawful use to PII as long as it is required for a specific purpose. Which in this case it is. Anonymity is not a right, and is the biggest misconception of PII on the internet. These laws only create rights around PII, that doesn't meant it is illegal to use PII, it just means that you have basic right around knowing how it is used ( eg there is documentation ) and that the end user has the Right to Forget ( eg, the end user can ask the proccessor to forget the PII on demand ), etc

Mar 5, 2024

DarkMukke That DGPR is so full of flaws. With "legitimate interests" you can justify almost everything. But bending a bad rule doesn't make it right. Back to topic: The system needs the IP address to work, but the admin doesn't need to see it. About your gender: You refuse to grow a beard and you drink sparkling wine, but you're dressed like a man... Hard to tell! /jk

Mar 5, 2024

Joe Glas being right or wrong doesn't make it against the law ..