当前位置:网站首页>Realize reverse proxy client IP transparent transmission

Realize reverse proxy client IP transparent transmission

2022-07-05 23:00:00 wwzroom

Experimental environment :

image-20220703104752756

1. modify nginx Agent profile 
[[email protected]:/apps/nginx/conf.d]#
vim pc.conf 
server {
    
    listen 80;
    proxy_cache off;
    #proxy_cache proxycache;
    #proxy_cache_key $request_uri;
    proxy_cache_key $host$uri$is_args$args;
    proxy_cache_valid 200 302 301 10m;
    proxy_cache_valid any 5m;
    add_header class M44;
    add_header X-Via $server_addr;
    add_header X-Cache $upstream_cache_status;
    add_header X-Accel $server_name;
    proxy_hide_header ETag;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add client IP And reverse proxy IP To request message header  

   #listen 443 ssl;
   #ssl_certificate /apps/nginx/conf.d/ssl/www.magedu.org.crt;
   #ssl_certificate_key /apps/nginx/conf.d/ssl/www.magedu.org.key;
   #ssl_session_cache shared:sslcache:20m;
   #ssl_session_timeout 10m;
    server_name www.magedu.org;
    root /data/nginx/html/pc/;
    location / {
    
        root /data/nginx/html/pc/;
    }
    location /api {
    
        proxy_pass http://10.0.0.8:8080/;
    }
    location ~* \.(jpe?g|png|bmp|gif)$ {
     # Implement reverse proxy 
        proxy_pass http://10.0.0.28;
    }
}
[[email protected]:/apps/nginx/conf.d]#
nginx -s reload 

2. Add rules for viewing headers to the backend server logs . add to \"%{
    X-Real-IP}i\"
[[email protected]:~]#
vim /etc/httpd/conf/httpd.conf 
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{X-forwarded-for}i\" " combined
[[email protected]:~]#
systemctl restart httpd


3. Client to test 
[[email protected] ~]#curl www.magedu.org/16m.jpg -I
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Jul 2022 01:50:18 GMT
Content-Type: image/jpeg
Content-Length: 16422438
Connection: keep-alive
Last-Modified: Sat, 02 Jul 2022 07:16:41 GMT
Accept-Ranges: bytes
class: M44
X-Via: 10.0.0.58
X-Accel: www.magedu.org

4.web Server production log 
[[email protected]:~]#
tail -f /var/log/httpd/access_log 

10.0.0.58 - - [03/Jul/2022:09:54:23 +0800] "HEAD /16m.jpg HTTP/1.0" 200 - "-" "curl/7.58.0" "10.0.0.100" 
# Realization ip Address transmission .
原网站

版权声明
本文为[wwzroom]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/186/202207052244229173.html