当前位置:网站首页>Realize reverse proxy client IP transparent transmission
Realize reverse proxy client IP transparent transmission
2022-07-05 23:00:00 【wwzroom】
Experimental environment :

1. modify nginx Agent profile
[[email protected]:/apps/nginx/conf.d]#
vim pc.conf
server {
listen 80;
proxy_cache off;
#proxy_cache proxycache;
#proxy_cache_key $request_uri;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 302 301 10m;
proxy_cache_valid any 5m;
add_header class M44;
add_header X-Via $server_addr;
add_header X-Cache $upstream_cache_status;
add_header X-Accel $server_name;
proxy_hide_header ETag;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add client IP And reverse proxy IP To request message header
#listen 443 ssl;
#ssl_certificate /apps/nginx/conf.d/ssl/www.magedu.org.crt;
#ssl_certificate_key /apps/nginx/conf.d/ssl/www.magedu.org.key;
#ssl_session_cache shared:sslcache:20m;
#ssl_session_timeout 10m;
server_name www.magedu.org;
root /data/nginx/html/pc/;
location / {
root /data/nginx/html/pc/;
}
location /api {
proxy_pass http://10.0.0.8:8080/;
}
location ~* \.(jpe?g|png|bmp|gif)$ {
# Implement reverse proxy
proxy_pass http://10.0.0.28;
}
}
[[email protected]:/apps/nginx/conf.d]#
nginx -s reload
2. Add rules for viewing headers to the backend server logs . add to \"%{
X-Real-IP}i\"
[[email protected]:~]#
vim /etc/httpd/conf/httpd.conf
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{X-forwarded-for}i\" " combined
[[email protected]:~]#
systemctl restart httpd
3. Client to test
[[email protected] ~]#curl www.magedu.org/16m.jpg -I
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Jul 2022 01:50:18 GMT
Content-Type: image/jpeg
Content-Length: 16422438
Connection: keep-alive
Last-Modified: Sat, 02 Jul 2022 07:16:41 GMT
Accept-Ranges: bytes
class: M44
X-Via: 10.0.0.58
X-Accel: www.magedu.org
4.web Server production log
[[email protected]:~]#
tail -f /var/log/httpd/access_log
10.0.0.58 - - [03/Jul/2022:09:54:23 +0800] "HEAD /16m.jpg HTTP/1.0" 200 - "-" "curl/7.58.0" "10.0.0.100"
# Realization ip Address transmission .
边栏推荐
- How can easycvr cluster deployment solve the massive video access and concurrency requirements in the project?
- CJ mccullem autograph: to dear Portland
- 关于MySQL的30条优化技巧,超实用
- Binary tree (II) -- code implementation of heap
- Roman numeral to integer
- TypeError: this. getOptions is not a function
- 从 1.5 开始搭建一个微服务框架——日志追踪 traceId
- Codeforces Global Round 19
- Usage Summary of scriptable object in unity
- Negative sampling
猜你喜欢
随机推荐
Nanjing: full use of electronic contracts for commercial housing sales
openresty ngx_lua请求响应
H5c3 advanced - player
媒体查询:引入资源
CJ mccullem autograph: to dear Portland
The countdown to the launch of metaverse ape is hot
TCC of distributed solutions
Postman core function analysis - parameterization and test report
Metasploit (MSF) uses MS17_ 010 (eternal blue) encoding:: undefined conversionerror problem
从 1.5 开始搭建一个微服务框架——日志追踪 traceId
Commonly used probability distributions: Bernoulli distribution, binomial distribution, polynomial distribution, Gaussian distribution, exponential distribution, Laplace distribution and Dirac delta d
Activate function and its gradient
d3dx9_ How to repair 31.dll_ d3dx9_ 31. Solution to missing DLL
First, redis summarizes the installation types
LeetCode145. Post order traversal of binary tree (three methods of recursion and iteration)
APK加固技术的演变,APK加固技术和不足之处
Starting from 1.5, build a micro Service Framework -- log tracking traceid
Metaverse ape received $3.5 million in seed round financing from negentropy capital
[speech processing] speech signal denoising based on Matlab GUI Hanning window fir notch filter [including Matlab source code 1711]
Methods modified by static








