显示 Nginx 环境背后的真实 TCP/IP 地址

显示 Nginx 环境背后的真实 TCP/IP 地址

当我执行命令时

netstat -atun | awk '{print $5}' | cut -d: -f1 | sed -e '/^$/d' |sort | uniq -c | sort -n

我看到分配给服务器 IP 的连接数很高

我想查看我的服务器 ip 背后的真实 ip 地址

这是我的 nginx 配置

user  nobody;
# no need for more workers in the proxy mode
worker_processes  8;
error_log  /var/log/nginx/error.log info;
worker_rlimit_nofile 20480;
events {
 worker_connections 15120; # increase for busier servers
 use epoll; # you should use epoll here for Linux kernels 2.6.x
}


http {

 server_name_in_redirect off;
 server_names_hash_max_size 512000;
 server_names_hash_bucket_size 640000;
 include    mime.types;
 default_type  application/octet-stream;
 server_tokens off;
# remove/commentout disable_symlinks if_not_owner;if you get Permission denied error
# disable_symlinks if_not_owner;
 sendfile on;
 tcp_nopush on;
 tcp_nodelay on;
 keepalive_timeout  5;
 gzip on;
 gzip_vary on;
 gzip_disable "MSIE [1-6]\.";
 gzip_proxied any;
 gzip_http_version 1.1;
 gzip_min_length  1000;
 gzip_comp_level  6;
 gzip_buffers  16 8k;
# You can remove image/png image/x-icon image/gif image/jpeg if you have slow CPU
 gzip_types    text/plain text/xml text/css application/x-javascript application/xml image/png image/x-icon image/gif image/jpeg application/javascript application/xml+rss text/javascript application/atom+xml;
 ignore_invalid_headers on;
 client_header_timeout  3m;
 client_body_timeout 3m;
 send_timeout     3m;
 reset_timedout_connection on;
 connection_pool_size  256;
 client_header_buffer_size 256k;
 large_client_header_buffers 4 256k;
 client_max_body_size 10M;
 client_body_buffer_size 128k;
 request_pool_size  32k;
 output_buffers   4 32k;
 postpone_output  1460;
 proxy_temp_path  /tmp/nginx_proxy/;
 proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=microcache:5m max_size=1000m;
 client_body_in_file_only on;
 log_format bytes_log "$msec $bytes_sent .";
 log_format custom_microcache '$remote_addr - $remote_user [$time_local] '
        '"$request" $status $body_bytes_sent '
        '"$http_referer" "$http_user_agent" nocache:$no_cache';
include "/etc/nginx/vhosts/*";

rpaf 配置

LoadModule rpaf_module modules/mod_rpaf-2.0.so
#Mod_rpaf settings
RPAFenable On
RPAFproxy_ips 127.0.0.1 <<server ip address>>
RPAFsethostname On
RPAFheader X-Real-IP

答案1

据我所知,您可以使用其他负载均衡器来执行此操作,但不能使用 nginx。

在 LVS 中,这称为 DR 模式:

http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.LVS-DR.html

在 F5 中,这被称为 npath:

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementations_guide_10_1/sol_npath.html

这是 nginx 邮件列表上的一个讨论,其中声称这种行为在 nginx 中是不可能的。

http://forum.nginx.org/read.php?2,212866,212866#msg-212866

您提到了 realip,这是我能找到的最接近的:

http://nginx.org/en/docs/http/ngx_http_realip_module.html

相关内容