request nginx 透传获取真实的ip

admin

nginx.conf配置:
& d1 `& D- T' I
location / {   
     proxy_pass http://127.0.0.1:8081/myweb/;  
( v2 ~) n1 V; f& N) }     proxy_redirect    off;  
     proxy_set_header  Host             $host;  
     proxy_set_header  X-Real-IP        $remote_addr;  
     proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;  
- m8 i0 u& |( ~8 L5 q3 Q}  
% r9 I2 V. I- k* `' s
后端获取方式:
9 |& s% ^/ C# h
7 c5 H0 ^( S5 H$ A( d: J/ H/***
* 获取客户端IP地址;这里通过了Nginx获取;X-Real-IP,
4 {0 h0 d- r1 m$ a9 b2 o * @param request
- v0 L  f8 ~5 ~+ V% [/ i* ~ * @return
*/  
public static String getClientIP(HttpServletRequest request) {  
    String fromSource = "X-Real-IP";  
: J, p4 A& _$ x, [( J% O& z    String ip = request.getHeader("X-Real-IP");  
0 a/ k0 O% E5 S8 d$ r    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
( X8 M* `2 w7 h# p9 i9 n, u        ip = request.getHeader("X-Forwarded-For");  
" H9 d1 h6 d0 k& n; g        fromSource = "X-Forwarded-For";  
. X+ P+ Q& w8 v9 a) E: A    }  
+ I0 K+ d# ^+ {% P, S    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
% N3 F9 w$ }' p+ m$ V        ip = request.getHeader("Proxy-Client-IP");  
        fromSource = "Proxy-Client-IP";  
    }  
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
+ Y( p# p1 W6 ^+ w  b- V        ip = request.getHeader("WL-Proxy-Client-IP");  
        fromSource = "WL-Proxy-Client-IP";  
    }  
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
        ip = request.getRemoteAddr();  
! b$ @) I0 p- A7 e        fromSource = "request.getRemoteAddr";  
% V' m  A) F$ J) A. b8 A. N, l) f8 k    }  
) u, \3 P+ H( H, K) ?, R    appLog.info("App Client IP: "+ip+", fromSource: "+fromSource);  
! X% g) A( y% Q    return ip;  
}  
( k& w: o% f: N$ A" D2 [- M: G! o$ K
" O2 ^7 l% z  V这样就不会一直获取的是服务器的Ip了。
) l: p- Y& n. h( t4 `" T7 o- A
9 e9 R+ ^2 |% w7 ]2 a9 l

admin

举个例子，Nginx 中的代理配置假如是这样配置的：

: A7 f: n+ I: p9 O/ ?! ]7 |    location / {
! Z/ W4 s' z( y- p        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
$ e. c3 u8 i5 }% F0 m/ t        proxy_pass http://127.0.0.1:8080$request_uri;
% X# p# L4 v' A( l) ?        proxy_redirect off;
1 k( l/ a. R9 @" H9 f3 z    }
代理的配置中添加了一个自定义 header X-Real-IP，所以你可以在目标服务器中通过 X-Real-IP 这个 header 取到用户的真实 IP。

" V5 S/ ~' V7 [或者也可以通过取 X-Forwarded-For，这个 header 比较常见，一般的负载均衡器也会添加这个 header 以传递用户的真实 IP。