Nginx获取真实IP地址

一、变量说明

$remote_addr

client address

$proxy_add_x_forwarded_for

the “X-Forwarded-For” client request header field with the $remote_addr variable appended to it, separated by a comma. If the “X-Forwarded-For” field is not present in the client request header, the $proxy_add_x_forwarded_for variable is equal to the $remote_addr variable.

$proxy_add_x_forwarded_for变量包含客户端请求头中的"X-Forwarded-For"，与$remote_addr两部分，他们之间用逗号分开。

二、配置如下参数，抓包测试

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 

1.客户端发起请求

2.CDN节点

此时没有X-Forwarded-For，remote_addr地址为172.25.16.163

$proxy_add_x_forwarded_for变量为172.25.16.163

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 之后 X-Forwarded-For为172.25.16.163

 

3.Nginx节点

此时X-Forwarded-For为172.25.16.163，remote_addr地址为172.25.38.109

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 之后 X-Forwarded-For为172.25.16.163,172.25.38.109

 

4.Tomcat节点

获取到的 X-Forwarded-For为172.25.16.163,172.25.38.109