nginx获取不到真实ip地址，注意这个细节

1 一定要把proxy_pass语句放在最后面

location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        client_max_body_size 1024m;
        # 一定要把这句放在后面
        proxy_pass http://test_app;
}

2 使用代码获取，以java为例

if (ip != null && ip.length() != 0 && !"unknown".equalsIgnoreCase(ip)) {
    // 多次反向代理后会有多个ip值，第一个ip才是真实ip
    if (ip.contains(",")) {
        ip = ip.split(",")[0];
    }
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getHeader("Proxy-Client-IP");
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getHeader("WL-Proxy-Client-IP");
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getHeader("HTTP_CLIENT_IP");
}
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getHeader("HTTP_X_FORWARDED_FOR");
}

//如果上面没有获得代理的IP，则使用获取真实IP的请求头进行尝试
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getHeader("X-Real-IP");
}

//上面都还没有，有可能就是局域网内的IP进行操作的，则获取请求头的局域网IP
if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
    ip = request.getRemoteAddr();
}