java 獲取客戶端真實IP地址

1. 在bs架構中，我們常常需要在日志中獲取登錄的IP和操作的IP地址。

經常我們的代碼如下：

String ip = request.getHeader("X-Forwarded-For");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
int index = ip.indexOf(",");
if (index != -1) {
return ip.substring(0, index);
} else {
return ip;
}
}
}
ip = request.getHeader("X-Real-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getHeader("Proxy-Client-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getHeader("WL-Proxy-Client-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getRemoteAddr();
logger.debug("獲取到客戶端的ip地址為：" + ip);
return ip.equals("0:0:0:0:0:0:0:1") ? "127.0.0.1" : ip;

前端Vue，后端springboot，在本地啟動后測試發現沒有問題。

重點是當部署到nginx上面出現了兩種情況：

1. 在正向代理的情況下：

即 將打包好的內容放到HTML下面啟動即可。這樣的情況下 發現取到所有的IP 都是null。

2. 在反向代理的情況下：

server {
listen 8888;
server_name localhost;
client_max_body_size 200m;
#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root /usr/local/nginx/dist;
try_files $uri $uri/ @router;
index index.html index.htm;

}

location /prod-api {
rewrite ^.+prod-api/?(.*)$ /$1 break;
include uwsgi_params;
proxy_pass http://127.0.0.1:8080;
}
location @router {
rewrite ^.*$ /index.html last;
}

#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
location @router { rewrite ^.*$ /index.html last;
}

}

nginx 配置信息如上。這樣獲取到所有的IP都為null。

解決方案：

1. 正向代理下用如下代碼解決：

InetAddress byName = null;
try {
byName = getByName(request.getRemoteHost());
} catch (UnknownHostException e) {
logger.error(e.getMessage(), e);
}
logger.debug("獲取到客戶端的ip地址為：" + byName.getHostAddress());
System.out.println(byName.getHostAddress());

2. 反向代理的情況下要在NGINX下配置：

location /prod-api {
rewrite ^.+prod-api/?(.*)$ /$1 break;
include uwsgi_params;
proxy_pass http://127.0.0.1:8080;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

代碼用

String ip = request.getHeader("X-Forwarded-For");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
int index = ip.indexOf(",");
if (index != -1) {
return ip.substring(0, index);
} else {
return ip;
}
}
}
ip = request.getHeader("X-Real-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getHeader("Proxy-Client-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getHeader("WL-Proxy-Client-IP");
logger.debug("獲取到客戶端的ip地址為：" + ip);
if (ip != null) {
if (!ip.isEmpty() && !"unKnown".equalsIgnoreCase(ip)) {
return ip;
}
}
ip = request.getRemoteAddr();
logger.debug("獲取到客戶端的ip地址為：" + ip);
return ip.equals("0:0:0:0:0:0:0:1") ? "127.0.0.1" : ip;

總結：用了nginx 之后獲取客戶端IP有好多種辦法。大家一定要注意。