獲取客戶端真實IP地址

Java-Web獲取客戶端真實IP：

　　

發生的場景：服務器端接收客戶端請求的時候，一般需要進行簽名驗證，客戶端IP限定等情況，在進行客戶端IP限定的時候，需要首先獲取該真實的IP。

一般分為兩種情況：

　　方式一、客戶端未經過代理，直接訪問服務器端(nginx,squid,haproxy)；

　　方式二、客戶端通過多級代理，最終到達服務器端(nginx,squid,haproxy)；

 

客戶端請求信息都包含在HttpServletRequest中，可以通過方法getRemoteAddr()獲得該客戶端IP。

　　方式一形式，可以直接獲得該客戶端真實IP。

　　方式二中通過代理的形式，此時經過多級反向的代理，通過方法getRemoteAddr()得不到客戶端真實IP，可以通過x-forwarded-for獲得轉發后請求信息。當客戶端請求被轉發，IP將會追加在其后並以逗號隔開，例如：10.47.103.13,4.2.2.2,10.96.112.230。

 

請求中的參數：

　　request.getHeader("x-forwarded-for") : 10.47.103.13,4.2.2.2,10.96.112.230

　　request.getHeader("X-Real-IP") : 10.47.103.13

　　request.getRemoteAddr():10.96.112.230

 

客戶端訪問經過轉發，IP將會追加在其后並以逗號隔開。最終准確的客戶端信息為：

• x-forwarded-for 不為空，則為逗號前第一個IP ；
• X-Real-IP不為空，則為該IP ；
• 否則為getRemoteAddr() ；

 

相關請求頭的解釋：

• X-Forwarded-For ：這是一個 Squid 開發的字段，只有在通過了HTTP代理或者負載均衡服務器時才會添加該項。　　　　

　　　　格式為X-Forwarded-For:client1,proxy1,proxy2，一般情況下，第一個ip為客戶端真實ip，后面的為經過的代理服務器ip。現在大部分的代理都會加上這個請求頭。

• Proxy-Client-IP/WL- Proxy-Client-IP ：這個一般是經過apache http服務器的請求才會有，用apache http做代理時一般會加上Proxy-Client-IP請求頭，而WL-Proxy-Client-IP是他的weblogic插件加上的頭。
• HTTP_CLIENT_IP ：有些代理服務器會加上此請求頭。
• X-Real-IP  ：nginx代理一般會加上此請求頭。

 

    /** 
     * 獲取用戶真實IP地址，不使用request.getRemoteAddr()的原因是有可能用戶使用了代理軟件方式避免真實IP地址, 
     * 可是，如果通過了多級反向代理的話，X-Forwarded-For的值並不止一個，而是一串IP值 
     */
    private String getIpAddr(HttpServletRequest request) {
        String ip = request.getHeader("x-forwarded-for"); 
        System.out.println("x-forwarded-for ip: " + ip);
        if (ip != null && ip.length() != 0 && !"unknown".equalsIgnoreCase(ip)) {  
            // 多次反向代理后會有多個ip值，第一個ip才是真實ip
            if( ip.indexOf(",")!=-1 ){
                ip = ip.split(",")[0];
            }
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getHeader("Proxy-Client-IP");  
            System.out.println("Proxy-Client-IP ip: " + ip);
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getHeader("WL-Proxy-Client-IP");  
            System.out.println("WL-Proxy-Client-IP ip: " + ip);
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getHeader("HTTP_CLIENT_IP");  
            System.out.println("HTTP_CLIENT_IP ip: " + ip);
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getHeader("HTTP_X_FORWARDED_FOR");  
            System.out.println("HTTP_X_FORWARDED_FOR ip: " + ip);
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getHeader("X-Real-IP");  
            System.out.println("X-Real-IP ip: " + ip);
        }  
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
            ip = request.getRemoteAddr();  
            System.out.println("getRemoteAddr ip: " + ip);
        } 
        System.out.println("獲取客戶端ip: " + ip);
        return ip;  
    }

 

import javax.servlet.http.HttpServletRequest;

/**
* IP校驗
*/
public class IPUtils {
    
    public static String getClientAddress(HttpServletRequest request) {
        if (request == null) {
            return "unknown";
        }
        String ip = request.getHeader("x-forwarded-for");
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("X-Forwarded-For");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("WL-Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("X-Real-IP");
        }

        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getRemoteAddr();
        }
        return ip.equals("0:0:0:0:0:0:0:1") ? "127.0.0.1" : ip;
    }
    
}

public String getIpAddr(HttpServletRequest request){  
        String ipAddress = request.getHeader("x-forwarded-for");  
            if(ipAddress == null || ipAddress.length() == 0 || "unknown".equalsIgnoreCase(ipAddress)) {  
                ipAddress = request.getHeader("Proxy-Client-IP");  
            }  
            if(ipAddress == null || ipAddress.length() == 0 || "unknown".equalsIgnoreCase(ipAddress)) {  
                ipAddress = request.getHeader("WL-Proxy-Client-IP");  
            }  
            if(ipAddress == null || ipAddress.length() == 0 || "unknown".equalsIgnoreCase(ipAddress)) {  
                ipAddress = request.getRemoteAddr();  
                if(ipAddress.equals("127.0.0.1") || ipAddress.equals("0:0:0:0:0:0:0:1")){  
                    //根據網卡取本機配置的IP  
                    InetAddress inet=null;  
                    try {  
                        inet = InetAddress.getLocalHost();  
                    } catch (UnknownHostException e) {  
                        e.printStackTrace();  
                    }  
                    ipAddress= inet.getHostAddress();  
                }  
            }  
            //對於通過多個代理的情況，第一個IP為客戶端真實IP,多個IP按照','分割  
            if(ipAddress!=null && ipAddress.length()>15){ //"***.***.***.***".length() = 15  
                if(ipAddress.indexOf(",")>0){  
                    ipAddress = ipAddress.substring(0,ipAddress.indexOf(","));  
                }  
            }  
            return ipAddress;   
    }

 

太平洋網絡IP地址查詢Web接口：http://whois.pconline.com.cn/

import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.UnsupportedEncodingException;
import java.net.HttpURLConnection;
import java.net.URL;

/**
 *     根據IP地址獲取詳細的地域信息 第一個方法是傳入ip獲取真實地址 最后一個方法是獲取訪問者真實ip 即使通過Nginx多層代理也可以獲取
 */
public class AddressUtils {

    public static String getAddresses(String content, String encodingString) throws UnsupportedEncodingException {
        // 這里調用pconline的接口
        String urlStr = "http://ip.taobao.com/service/getIpInfo.php";
        // 從http://whois.pconline.com.cn取得IP所在的省市區信息
        String returnStr = getResult(urlStr, content, encodingString);
        if (returnStr != null) {
            // 處理返回的省市區信息
            System.out.println(returnStr);
            String[] temp = returnStr.split(",");
            if (temp.length < 3) {
                return "0";// 無效IP，局域網測試
            }
            String country = "";
            String area = "";
            String region = "";
            String city = "";
            String county = "";
            String isp = "";
            for (int i = 0; i < temp.length; i++) {
                switch (i) {
                case 1:
                    country = (temp[i].split(":"))[2].replaceAll("\"", "");
                    country = decodeUnicode(country);// 國家
                    break;
//                  case 3:  
//                      area = (temp[i].split(":"))[1].replaceAll("\"", "");  
//                      area =decodeUnicode(area);//地區  
//                   break;  
                case 5:
                    region = (temp[i].split(":"))[1].replaceAll("\"", "");
                    region = decodeUnicode(region);// 省份
                    break;
                case 7:
                    city = (temp[i].split(":"))[1].replaceAll("\"", "");
                    city = decodeUnicode(city);// 市區
                    break;
                case 9:
                    county = (temp[i].split(":"))[1].replaceAll("\"", "");
                    county = decodeUnicode(county);// 地區
                    break;
                case 11:
                    isp = (temp[i].split(":"))[1].replaceAll("\"", "");
                    isp = decodeUnicode(isp);// ISP公司
                    break;
                }
            }
            System.out.println(country + area + "=" + region + "=" + city + "=" + county + "=" + isp);
            StringBuffer sb = new StringBuffer(country).append(region).append(city).append(county).append(" ")
                    .append(isp);
            return sb.toString();
        }
        return null;
    }

    /**
     * @param urlStr   請求的地址
     * @param content  請求的參數 格式為：name=xxx&pwd=xxx
     * @param encoding 服務器端請求編碼。如GBK,UTF-8等
     * @return
     */
    private static String getResult(String urlStr, String content, String encoding) {
        URL url = null;
        HttpURLConnection connection = null;
        try {
            url = new URL(urlStr);
            connection = (HttpURLConnection) url.openConnection();// 新建連接實例
            connection.setConnectTimeout(3000);// 設置連接超時時間，單位毫秒
            connection.setReadTimeout(3000);// 設置讀取數據超時時間，單位毫秒
            connection.setDoOutput(true);// 是否打開輸出流 true|false
            connection.setDoInput(true);// 是否打開輸入流true|false
            connection.setRequestMethod("POST");// 提交方法POST|GET
            connection.setUseCaches(false);// 是否緩存true|false
            connection.connect();// 打開連接端口
            DataOutputStream out = new DataOutputStream(connection.getOutputStream());// 打開輸出流往對端服務器寫數據
            out.writeBytes(content);// 寫數據(提交表單)
            out.flush();// 刷新
            out.close();// 關閉輸出流
            // 往對端寫完數據對端服務器返回數據,以BufferedReader流來讀取
            BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream(), encoding));
            StringBuffer buffer = new StringBuffer();
            String line = "";
            while ((line = reader.readLine()) != null) {
                buffer.append(line);
            }
            reader.close();
            return buffer.toString();
        } catch (IOException e) {
            e.printStackTrace();
        } finally {
            if (connection != null) {
                connection.disconnect();// 關閉連接
            }
        }
        return null;
    }

    /**
     * unicode 轉換成 中文
     */
    public static String decodeUnicode(String theString) {
        char aChar;
        int len = theString.length();
        StringBuffer outBuffer = new StringBuffer(len);
        for (int x = 0; x < len;) {
            aChar = theString.charAt(x++);
            if (aChar == '\\') {
                aChar = theString.charAt(x++);
                if (aChar == 'u') {
                    int value = 0;
                    for (int i = 0; i < 4; i++) {
                        aChar = theString.charAt(x++);
                        switch (aChar) {
                        case '0':
                        case '1':
                        case '2':
                        case '3':
                        case '4':
                        case '5':
                        case '6':
                        case '7':
                        case '8':
                        case '9':
                            value = (value << 4) + aChar - '0';
                            break;
                        case 'a':
                        case 'b':
                        case 'c':
                        case 'd':
                        case 'e':
                        case 'f':
                            value = (value << 4) + 10 + aChar - 'a';
                            break;
                        case 'A':
                        case 'B':
                        case 'C':
                        case 'D':
                        case 'E':
                        case 'F':
                            value = (value << 4) + 10 + aChar - 'A';
                            break;
                        default:
                            throw new IllegalArgumentException("Malformed      encoding.");
                        }
                    }
                    outBuffer.append((char) value);
                } else {
                    if (aChar == 't') {
                        aChar = '\t';
                    } else if (aChar == 'r') {
                        aChar = '\r';
                    } else if (aChar == 'n') {
                        aChar = '\n';
                    } else if (aChar == 'f') {
                        aChar = '\f';
                    }
                    outBuffer.append(aChar);
                }
            } else {
                outBuffer.append(aChar);
            }
        }
        return outBuffer.toString();
    }

    // 測試
    public static void main(String[] args) {
        AddressUtils addressUtils = new AddressUtils();
        
        /**
         *     測試IP：111.121.72.101  中國貴州省貴陽市 電信
         */
        String ip = "111.121.72.101";
        String address = "";
        try {
            address = addressUtils.getAddresses("ip=" + ip, "utf-8");
        } catch (UnsupportedEncodingException e) {
            e.printStackTrace();
        } catch (Exception e) {
            e.printStackTrace();
        }
        System.out.println(address);//中國貴州省貴陽市 電信
    }
}