nginx做反向負載均衡,后端服務器獲取真實客戶端ip
首先,在前端nginx上需要做如下配置:
location /
proxy_set_hearder host $host;
proxy_set_header X-forwarded-for $proxy_add_x_forwarded_for;
proxy_set_header X-real-ip $remote_addr;
};
nginx會在把請求轉向后台real-server前把http報頭中的ip地址進行替換;這樣操作完成后,real-server也需要做一些操作;
可是,如果通過了多級反向代理的話,X-Forwarded-For的值並不止一個,而是一串Ip值,此時取第一個Ip地址就可以了,相關代碼如下:
public String getClientIp(HttpServletRequest request) { String ip = request.getHeader("x-forwarded-for"); if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("Proxy-Client-IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("WL-Proxy-Client-IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getRemoteAddr(); } if(ip.trim().contains(",")){//為什么會有這一步,因為經過多層代理后會有多個代理,取第一個ip地址就可以了 String [] ips=ip.split(","); ip=ips[0]; } return ip; }
