Varnish 反向代理，让后端服务器日志记录真实来源IP

Apache :

LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" varnishcombined
 
ServerName www.example.com
  # [...]
  CustomLog /var/log/apache2/www.example.com/access.log varnishcombined
  # [...]
 

这样在apache的日志文件中就可以看到客户端真实的IP地址了。如果无法显示，则需要修改Varnish的配置文件

sub vcl_recv {
# Add a unique header containing the client address
remove req.http.X-Forwarded-For;
set req.http.X-Forwarded-For = client.ip;
# [...]
}
 

我这里测试的情况是如果我添加上面的两行，apache的日志就会输出两个客户端的ip地址。因此我没添加这两行。

Nginx:

log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '
 '$status $body_bytes_sent "$http_referer" '
 '"$http_user_agent" $http_x_forwarded_for';
 access_log      /usr/local/nginx/logs/access.log  access;