获取客户端真实ip

location /gameExchange {

            proxy_set_header X-Real-IP $remote_addr;

            proxy_pass http://gameExchange;

            proxy_set_header Host $http_host;

            proxy_set_header REMOTE-HOST $remote_addr;

            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          # proxy_connect_timeout 4;  #nginx跟后端服务器连接超时时间(代理连接超时)

            #proxy_read_timeout 4; #连接成功后，后端服务器响应时间(代理接收超时)

        }

nginx log 格式：

log_format main '$remote_addr [$time_local] request_time[$request_time] upto $upstream_addr,'

                      'upresponse_time[$upstream_response_time], "$request" $status $body_bytes_sent '

                      '"$http_user_agent"';

nginx 中如上配置，查看access.log发现$remote_addr打印出来都是内网地址

java 程序获取真实IP代码如下：

public static String getRequestIP(HttpServletRequest request) {

String ip = request.getHeader("x-forwarded-for");

if (ip ==null || ip.length() ==0 ||"unknown".equalsIgnoreCase(ip)) {

ip = request.getHeader("Proxy-Client-IP");

}

if (ip ==null || ip.length() ==0 ||"unknown".equalsIgnoreCase(ip)) {

ip = request.getHeader("WL-Proxy-Client-IP");

}

if (ip ==null || ip.length() ==0 ||"unknown".equalsIgnoreCase(ip)) {

ip = request.getRemoteAddr();

}

//多次反向代理,取第一个IP地址

    if (ip !=null && ip.length() >15) {

if (ip.indexOf(",") >0) {

ip = ip.substring(0, ip.indexOf(","));

}

}

return ip;

}

调用无法获取真实的IP

---

解决办法: 把$remote_addr替换成$http_x_forwarded_for

location /gameExchange {

            proxy_set_header X-Real-IP $http_x_forwarded_for;

            proxy_pass http://gameExchange;

            proxy_set_header Host $http_host;

            proxy_set_header REMOTE-HOST $remote_addr;

            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          # proxy_connect_timeout 4;  #nginx跟后端服务器连接超时时间(代理连接超时)

            #proxy_read_timeout 4; #连接成功后，后端服务器响应时间(代理接收超时)

        }

log_format main '$http_x_forwarded_for [$time_local] request_time[$request_time] upto $upstream_addr,'

                      'upresponse_time[$upstream_response_time], "$request" $status $body_bytes_sent '

                      '"$http_user_agent"';

---

原因:nginx层前面还经过层F5负载均衡，

其中$http_x_forwarded_for就是nginx接受到的http request header中的X-Forwarded-For的值

$remote_addr是直接与nginx通信的那台主机的ip。nginx层前面还经过层F5负载均衡，所以$remote_addr的地址成了内网地址