一般来说,如果没有使用反向代理的话,获取客户端IP地址:request.getRemoteAddr()。但如果使用了反向代理,则上述代码返回的就是127.0.0.1或者192.168.1.110,而不是真实的客户端ip,因为经过代理之后,客户端和服务端增加了中间层,服务端无法拿到客户端的IP,也无法直接转发请求的地址到客户端,故可以采用以下代码,在转发请求的HTTP头信息中,增加X-FORWARD-FOR信息,用以跟踪客户端ip地址和原客户端请求的服务器地址:
public String getIpAddr(HttpServletRequest request) {
String ip = request.getHeader("x-forwarded-for");
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
ip = request.getHeader("Proxy-Client-IP");
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
ip = request.getHeader("WL-Proxy-Client-IP");
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
ip = request.getRemoteAddr();
}
return ip;
}