Web服务器采用Nginx
最近发现日志查出不少非法请求,如图所示
后续是想通过收集ip,封禁ip
String ip = IpKit.getRealIp(httpServletRequest);
结果打印出来获取的不是真实ip
经排查发现172.17.0.1是docker内部网络
nginx加一行代码即可
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
location /{
proxy_pass http://127.0.0.1:8081/;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #获取用户真实请求ip
}
重启nginx
service nginx restart
能够正常收集了