How can I get Ansible client IP from target host?

On an isolated network (without internet access to do public IP address lookups), I want to run a playbook from a controller against a number of target hosts where one of the tasks is to download a file via HTTP/HTTPS from the controller without hard-coding the controller IP as part of the task. E.g.

Controller: 192.168.0.5
Target 1: 192.168.0.10
Target 2: 192.168.0.11
Target 3: 192.168.0.12

The controller can have different IPs configured via DHCP, and there could be multiple network interfaces listed in ansible_all_ipv4_addresses (some of which may not be available to the target hosts) so it may not be straight forward to determine which network interface the target hosts should use from ansible_facts on localhost without exploring the idea of looping through them with a timeout until the file has been downloaded. It seems as though the most robust way to determine the public IP of the controller (assuming the web server is listening on 0.0.0.0) would be to determine the originating IP of the established connection (192.168.0.5) from the target host - is there a way to do this?

The motivation for downloading the file from the controller rather than sending it to remote hosts is that some of the target hosts are running Windows and the win_copy module is incredibly slow via WinRM so the Ansible documentation includes the following note:

> Because win_copy runs over WinRM, it is not a very efficient transfer
> mechanism. If sending large files consider hosting them on a web
> service and using ansible.windows.win_get_url instead.

Limited test on my machine which has a single ip and with a single target. But I don't see why it would not work in your scenario.

Given the following inventories/default/hosts.yml

all:
  hosts:
    target1:
      ansible_host: 192.168.0.10
    target2:
      ansible_host: 192.168.0.11
    target3:
      ansible_host: 192.168.0.12

The following test playbook should do what you expect. Replace the dummy debug task with get_url/uri to initiate the download.

Notes:

• this playbook infers you have access to the ip command line tool on the controller.
• I took for granted that the controller IP used to connect to target is the one that the target has access to in the other direction. If this isn't the case then the below will not work in your situation.

---
- hosts: all
  gather_facts: false

  tasks:
    - name: Check route on controller for each target destination
      ansible.builtin.command: ip route get {{ ansible_host }}
      register: route_cmd
      delegate_to: localhost

    - name: Register the controller outgoing ip for each target
      ansible.builtin.set_fact:
        controller_ip: "{{ route_cmd.stdout_lines[0] | regex_replace('^.* src (\\d*(\\.\\d*){3}).*$', '\') }}"

    - name: Show result
      ansible.builtin.debug:
        msg: "I would connect from target {{ inventory_hostname }} ({{ ansible_host }}) 
          to controller using ip {{ controller_ip }}"

</details>



# 答案2
**得分**: 0

是的，当然可以，至少如果托管节点仅运行Linux操作系统的话。可以参考示例 [Find the IP address of the client in an SSH session](https://stackoverflow.com/a/50703599/6771046)。以下是一个简单的示例Playbook：

```lang-yaml
---
- hosts: test
  become: false
  gather_facts: false

  tasks:

  - name: 获取控制节点连接的IP
    shell:
      cmd:  who | cut -d "(" -f2 | cut -d ")" -f1
    changed_when: false
    check_mode: false
    register: connected_from

  - name: 显示连接来源
    debug:
      msg: "{{ connected_from.stdout }}"

或者更简单的方式，如果已经收集了Ansible facts：

---
- hosts: test
  become: false
  gather_facts: true
  gather_subset:
    - "env"
    - "!all"
    - "!min"

  tasks:

  - name: 显示连接来源
    debug:
       msg: "{{ ansible_env.SSH_CONNECTION.split(' ') | first }}"

这将提供所需的信息。

任务 [显示连接来源] ******
ok: [test.example.com] =>
  msg: 192.0.2.1

背景信息

• Ansible setup min 的确切列表是什么？
• 在Ansible中是否可以仅收集特定的事实？

请注意，此方法不适用于运行Windows操作系统且使用WinRM连接的托管节点，详见：

• 当托管节点是Windows主机时如何查找env？

---
- hosts: test
  become: false
  gather_facts: false

  tasks:

  - name: Gather Control Node Connection IP
    shell:
      cmd:  who | cut -d "(" -f2 | cut -d ")" -f1
    changed_when: false
    check_mode: false
    register: connected_from

  - name: Show Connected From
    debug:
      msg: "{{ connected_from.stdout }}"

---
- hosts: test
  become: false
  gather_facts: true
  gather_subset:
    - "env"
    - "!all"
    - "!min"

  tasks:

  - name: Show Connected From
    debug:
       msg: "{{ ansible_env.SSH_CONNECTION.split(' ') | first }}"
    # when: ansible_os_family != 'Windows' # and if more facts were gathered

TASK [Show Connected From] ******
ok: [test.example.com] =>
  msg: 192.0.2.1