Dorado7 AjaxAction Java获取客户端IP Java获取IP IP地址 nginx转发后ip地址变为127.0.0.1

新2023

/**
 * 获取IP地址
 * @param request
 * @param response
 * @return
 */
@Expose
public String getIp(HttpServletRequest request,
		HttpServletResponse response) {
	//Nginx转发时走这里
	String ip = request.getHeader("x-forwarded-for");
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getHeader("Proxy-Client-IP");
	}
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getHeader("WL-Proxy-Client-IP");
	}
	//无Nginx转发时走这里
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		ip = request.getRemoteAddr();
	}
	//System.out.println("IP:" + ip);
	
	if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
		return "fail";
	}
	return ip;
}

/**
 * 获取IP地址(兼容Nginx转发)
 * @param request
 * @param response
 * @return
 */
@Expose
public String getIp(HttpServletRequest request,
		HttpServletResponse response) {
	if (request == null) {
		return "fail";
    }
	
	//Nginx转发时走这里
    String ip = request.getHeader("x-forwarded-for");

    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("Proxy-Client-IP");
    }
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("X-Forwarded-For");
        if (!StringUtils.isBlank(ip) && !"unknown".equalsIgnoreCase(ip)) {
            // 多次反向代理后会有多个IP值，第一个为真实IP。
            int index = ip.indexOf(',');
            if (index != -1) {
                ip =  ip.substring(0, index);
            }
        }
    }
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("WL-Proxy-Client-IP");
    }
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("X-Real-IP");
    }
    //无Nginx转发时走这里
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getRemoteAddr();
    }
    if("0:0:0:0:0:0:0:1".equals(ip)){
        return "127.0.0.1";
    }else {
        if(ip.equals("127.0.0.1") || ip.equalsIgnoreCase("localhost") && StringUtils.isBlank(request.getRemoteAddr())){
            ip = request.getRemoteAddr();
        }
    }
    //System.out.println("IP:" + ip);
    return ip;
}
    /*Nginx设置为:
    # 解决“nginx转发后ip地址变为127.0.0.1”的问题
    # 保留代理之前的host 包含客户端真实的域名和端口号
    proxy_set_header    Host  $host; 
    # 保留代理之前的真实客户端ip
    proxy_set_header    X-Real-IP  $remote_addr;  
    # 这个Header和X-Real-IP类似，但它在多级代理时会包含真实客户端及中间每个代理服务器的IP
    proxy_set_header    X-Forwarded-For  $proxy_add_x_forwarded_for;
    # 表示客户端真实的协议（http还是https）
    proxy_set_header X-Forwarded-Proto $scheme;
    # 指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值
    # 如果使用"default"参数，将根据location和proxy_pass参数的设置来决定。
    # proxy_redirect [ default|off|redirect replacement ];
    proxy_redirect off;
    proxy_pass http://127.0.0.1:8081/;*/

	location / {
            # 解决“nginx转发后ip地址变为127.0.0.1”的问题
            # 保留代理之前的host 包含客户端真实的域名和端口号
            proxy_set_header    Host  $host; 
            # 保留代理之前的真实客户端ip
            proxy_set_header    X-Real-IP  $remote_addr;  
            # 这个Header和X-Real-IP类似，但它在多级代理时会包含真实客户端及中间每个代理服务器的IP
            proxy_set_header    X-Forwarded-For  $proxy_add_x_forwarded_for;
            # 表示客户端真实的协议（http还是https）
            proxy_set_header X-Forwarded-Proto $scheme;
            # 指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值
            # 如果使用"default"参数，将根据location和proxy_pass参数的设置来决定。
            # proxy_redirect [ default|off|redirect replacement ];
            proxy_redirect off;
            proxy_pass http://127.0.0.1:8087/;
        }

 old

@Expose
@DataProvider
public String getCurrentEmployeeUserPrivilege(HttpServletRequest request,
HttpServletResponse response){
    //Java获取IP
    String ip = request.getHeader("x-forwarded-for");
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("Proxy-Client-IP");
    }
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getHeader("WL-Proxy-Client-IP");
    }
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
        ip = request.getRemoteAddr();
    }
    System.out.println("---Dorado7 AjaxAction获取客户端IP:" + ip);

    return employeeDS.findEmployeeById(getCurrentEmployeeId()).getUserPrivilege();
}