o

Returns the Internet Protocol (IP) address of the client that sent the request. This will first check the request headers Forwarded, X-Forwarded-For and X-Real-IP and if any is present, then return its first IP address, else just return HttpServletRequest#getRemoteAddr() unmodified.

The client controls these request headers, unless a trusted proxy overwrites them. Do not use this method for security decisions such as rate limiting or access control; use HttpServletRequest#getRemoteAddr() instead, with the servlet container configured to resolve the client IP address from the proxy headers of trusted proxies only.

This is also available in EL as #{faces.remoteAddr}.