Patch OpenSSH to obtain client IP address

Problem

IP access restriction does not work for GitLab.com as there is a load balancer in front of SSH which obscures the client IP address. This was initially discussed in https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/10954#note_436793419 and gitlab#271673 (closed)

There are already two possible solutions:

• Make gitlab-sshd beta-quality
• Patch OpenSSH to obtain client IP address

There have been some reports that IP access restriction works on IPv6, and if so, this would be a viable workaround until either or both of the defined solutions are fully implemented.

Proposal

Decide best path forwarded between a the two options above.

Links

• https://docs.gitlab.com/ee/user/group/index.html#ip-access-restriction
• https://github.com/openssh/openssh-portable
• https://stackoverflow.com/questions/40652016/how-to-see-real-ips-of-ssh-client-of-ssh-servers-running-behind-aws-elb