Revert all Rack::Attack changes (#18407)

config/application.rb

@@ -76,7 +76,6 @@ module PracticalDeveloper
     config.eager_load_paths += Dir["#{config.root}/lib"]
 
     config.middleware.use Rack::Deflater
-    config.middleware.insert_after ActionDispatch::RemoteIp, Rack::Attack
 
     config.i18n.load_path += Dir[Rails.root.join("config/locales/**/*.yml")]
 

config/initializers/rack/attack.rb

@@ -1,29 +1,23 @@
-Rails.application.reloader.to_prepare do
-  Dir.glob(Rails.root.join("lib/rack/attack/*.rb")).each do |filename|
-    require_dependency filename
-  end
-end
-
 Rack::Attack.throttled_response_retry_after_header = true
 
 module Rack
   class Attack
     throttle("search_throttle", limit: 5, period: 1) do |request|
       if request.path.starts_with?("/search/")
-        track_and_return_ip(request)
+        track_and_return_ip(request.env["HTTP_FASTLY_CLIENT_IP"])
       end
     end
 
     throttle("api_throttle", limit: 3, period: 1) do |request|
       if request.path.starts_with?("/api/") && request.get?
-        track_and_return_ip(request)
+        track_and_return_ip(request.env["HTTP_FASTLY_CLIENT_IP"])
       end
     end
 
     throttle("api_write_throttle", limit: 1, period: 1) do |request|
       if request.path.starts_with?("/api/") && (request.put? || request.post? || request.delete?)
         Honeycomb.add_field("user_api_key", request.env["HTTP_API_KEY"])
-        ip_address = track_and_return_ip(request)
+        ip_address = track_and_return_ip(request.env["HTTP_FASTLY_CLIENT_IP"])
         if request.env["HTTP_API_KEY"].present?
           "#{ip_address}-#{request.env['HTTP_API_KEY']}"
         elsif ip_address.present?
@@ -33,22 +27,19 @@ module Rack
     end
 
     throttle("site_hits", limit: 40, period: 2) do |request|
-      track_and_return_ip(request)
+      track_and_return_ip(request.env["HTTP_FASTLY_CLIENT_IP"])
     end
 
     throttle("tag_throttle", limit: 2, period: 1) do |request|
       if tag_request?(request)
-        track_and_return_ip(request)
+        track_and_return_ip(request.env["HTTP_FASTLY_CLIENT_IP"])
       end
     end
 
-    def self.track_and_return_ip(req)
-      ip_address = req.env["HTTP_FASTLY_CLIENT_IP"] || req.remote_ip
-
+    def self.track_and_return_ip(ip_address)
       return if ip_address.blank?
 
-      Honeycomb.add_field("fastly_client_ip", req.env["HTTP_FASTLY_CLIENT_IP"])
-      Honeycomb.add_field("remote_ip", req.remote_ip)
+      Honeycomb.add_field("fastly_client_ip", ip_address)
       ip_address.to_s
     end
 

lib/rack/attack/request.rb

@@ -1,9 +0,0 @@
-module Rack
-  class Attack
-    class Request < ::Rack::Request
-      def remote_ip
-        @remote_ip ||= ActionDispatch::Request.new(env).remote_ip
-      end
-    end
-  end
-end

spec/initializers/rack/attack_spec.rb

@@ -6,11 +6,6 @@ describe Rack::Attack, type: :request, throttle: true do
     allow(Rails).to receive(:cache) { cache_db }
     cache_db.redis.flushdb
     allow(Honeycomb).to receive(:add_field)
-    ENV["FASTLY_API_KEY"] = "12345"
-  end
-
-  after do
-    ENV["FASTLY_API_KEY"] = nil
   end
 
   describe "search_throttle" do