Nginx透传获取客户端IP地址

最新推荐文章于 2025-10-13 11:25:47 发布

原创最新推荐文章于 2025-10-13 11:25:47 发布 · 729 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#Java #Nginx #X-Real-IP #X-Forwarded-For #request.getRemoteAddr

Apache/Nginx 专栏收录该内容

18 篇文章

订阅专栏

本文介绍了一个Nginx配置示例及其如何与后端应用配合来正确获取客户端的真实IP地址。通过Nginx代理设置，后端可以通过特定头字段获取到原始客户端IP，这对于日志记录和安全验证非常重要。

nginx.conf配置:

location / { 
     proxy_pass http://127.0.0.1:8080/myweb/;
     proxy_redirect    off;
     proxy_set_header  Host             $host;
     proxy_set_header  X-Real-IP        $remote_addr;
     proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
}

myweb后端获取方式:

/***
 * 获取客户端IP地址;这里通过了Nginx获取;X-Real-IP,
 * @param request
 * @return
 */
public static String getClientIP(HttpServletRequest request) {
	String fromSource = "X-Real-IP";
	String ip = request.getHeader("X-Real-IP");
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getHeader("X-Forwarded-For");
		fromSource = "X-Forwarded-For";
	}
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getHeader("Proxy-Client-IP");
		fromSource = "Proxy-Client-IP";
	}
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getHeader("WL-Proxy-Client-IP");
		fromSource = "WL-Proxy-Client-IP";
	}
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getRemoteAddr();
		fromSource = "request.getRemoteAddr";
	}
	appLog.info("App Client IP: "+ip+", fromSource: "+fromSource);
	return ip;
}

参考: http://www.iteye.com/topic/1124492