中文字幕精品亚洲无线码二区,国产黄a三级三级三级看三级,亚洲七七久久桃花影院,丰满少妇被猛烈进入,国产小视频在线观看网站

springboot~容器化(hua)環境(jing)獲取真實IP地址(zhi)

首先,后端項目springboot,前端項目VUE,兩(liang)個都是運行(xing)(xing)在docker容器里(li),通(tong)過(guo)k8s進行(xing)(xing)編排的。

獲取真實的客戶端IP地址

一 需要在前(qian)端VUE的宿主(zhu)nginx中,添加請求頭規則

location /api {
			proxy_set_header Host $http_host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header REMOTE-HOST $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_pass //localhost:8080/;
}

二 分享springboot下面(mian)獲取IP地址方法

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.util.StringUtils;

import javax.servlet.http.HttpServletRequest;
import java.net.InetAddress;
import java.net.UnknownHostException;


/**
 * Ip地址
 *
 */
public class IpUtils {
  private static Logger logger = LoggerFactory.getLogger(IpUtils.class);
  private static final String IP_UTILS_FLAG = ",";
  private static final String UNKNOWN = "unknown";
  private static final String LOCALHOST_IP = "0:0:0:0:0:0:0:1";
  private static final String LOCALHOST_IP1 = "127.0.0.1";

  /**
   * 獲取IP公網地址
   * <p>
   * 使用Nginx等反向代理軟件, 則不能通過request.getRemoteAddr()獲取IP地址
   * 如果使用了多級反向代理的話,X-Forwarded-For的值并不止一個,而是一串IP地址,X-Forwarded-For中第一個非unknown的有效IP字符串,則為真實IP地址
   */
  public static String getIpAddr(HttpServletRequest request) {
    String ip = null;
    try {
      //以下兩個獲取在k8s中,將真實的客戶端IP,放到了x-Original-Forwarded-For。而將WAF的回源地址放到了 x-Forwarded-For了。
      ip = request.getHeader("X-Original-Forwarded-For");
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("X-Forwarded-For");
      }
      //獲取nginx等代理的ip
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("x-forwarded-for");
      }
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("Proxy-Client-IP");
      }
      if (StringUtils.isEmpty(ip) || ip.length() == 0 || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("WL-Proxy-Client-IP");
      }
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("HTTP_CLIENT_IP");
      }
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getHeader("HTTP_X_FORWARDED_FOR");
      }
      //兼容k8s集群獲取ip
      if (StringUtils.isEmpty(ip) || UNKNOWN.equalsIgnoreCase(ip)) {
        ip = request.getRemoteAddr();
        if (LOCALHOST_IP1.equalsIgnoreCase(ip) || LOCALHOST_IP.equalsIgnoreCase(ip)) {
          //根據網卡取本機配置的IP
          InetAddress iNet = null;
          try {
            iNet = InetAddress.getLocalHost();
          } catch (UnknownHostException e) {
            logger.error("getClientIp error: {}", e);
          }
          ip = iNet.getHostAddress();
        }
      }
    } catch (Exception e) {
      logger.error("IPUtils ERROR ", e);
    }
    //使用代理,則獲取第一個IP地址
    if (!StringUtils.isEmpty(ip) && ip.indexOf(IP_UTILS_FLAG) > 0) {
      ip = ip.substring(0, ip.indexOf(IP_UTILS_FLAG));
    }

    return ip;
  }

}

上面方法在k8s容器中,也是通用(yong)的。

posted @ 2022-01-20 16:44  張占嶺  閱讀(3741)  評論(0)    收藏  舉報