request nginx 透传获取真实的ip

admin

nginx.conf配置:
' B8 z$ O+ M, z/ K( n7 w; V
/ ]9 ^6 ~- U" Ulocation / {   
9 x% T& V/ Q* s' f+ R     proxy_pass http://127.0.0.1:8081/myweb/;  
& {" F, A' N# l& K( J: ^     proxy_redirect    off;  
! F9 R/ f, l3 X0 \7 l3 I     proxy_set_header  Host             $host;  
  F9 m; z; W' p1 p     proxy_set_header  X-Real-IP        $remote_addr;  
2 X$ u- a: e4 |( z$ X0 x( X     proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;  
}  

0 P4 e& }0 R0 q# ?/ X6 n后端获取方式:

/***
( {" E; l3 [  I; S* B4 U * 获取客户端IP地址;这里通过了Nginx获取;X-Real-IP,
' n) O( U) U( u * @param request
* @return
. G0 ~8 K" H! a: e */  
public static String getClientIP(HttpServletRequest request) {  
4 r2 ~3 H) G& K- Y) e. x    String fromSource = "X-Real-IP";  
+ k$ z3 D8 Z4 ~' ?( B    String ip = request.getHeader("X-Real-IP");  
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
) ^3 n% K1 O% M5 w! J9 I( R        ip = request.getHeader("X-Forwarded-For");  
        fromSource = "X-Forwarded-For";  
    }  
2 x) e+ x9 j/ Z  j* x( {) X. G    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
        ip = request.getHeader("Proxy-Client-IP");  
        fromSource = "Proxy-Client-IP";  
4 @! M  ~# z) w/ D+ V( W5 Y    }  
# M' _& {$ ]1 N+ l* N5 t5 f( x: `* `+ }    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
7 X$ Z9 F; B  ~( h        ip = request.getHeader("WL-Proxy-Client-IP");  
        fromSource = "WL-Proxy-Client-IP";  
    }  
2 U; P7 \0 u9 a2 Q& z1 d4 r    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
        ip = request.getRemoteAddr();  
% j, c1 V) k/ l# H        fromSource = "request.getRemoteAddr";  
    }  
; c; |& r3 |1 O7 o    appLog.info("App Client IP: "+ip+", fromSource: "+fromSource);  
4 ]* ]3 b3 H7 p2 Y+ s    return ip;  
/ z3 h; {3 r! W}  

% z7 K: b3 q" j  ~, A4 u! E/ H这样就不会一直获取的是服务器的Ip了。
4 X% v5 b+ U- m, w1 Z2 J) P1 w7 D

1 z/ x) f: V0 R$ z1 c

admin

举个例子，Nginx 中的代理配置假如是这样配置的：

4 Q! R. o' _# z$ v1 C- ~+ k) y* f    location / {
        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
7 k9 c- t' N9 \9 l) U5 @        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_pass http://127.0.0.1:8080$request_uri;
        proxy_redirect off;
, h7 S8 a# E* J+ @8 i    }
代理的配置中添加了一个自定义 header X-Real-IP，所以你可以在目标服务器中通过 X-Real-IP 这个 header 取到用户的真实 IP。

或者也可以通过取 X-Forwarded-For，这个 header 比较常见，一般的负载均衡器也会添加这个 header 以传递用户的真实 IP。