获取Nginx代理后WebSocket、Socket的真实IP

r囧r小猫 2023-10-12 12:42 11阅读 0赞

#### 目录 ####

*   *  1、Nginx配置
     *  2、工具类

--------------------

注意：nginx代理的配置需要加上保留真实IP的相关配置才能获取到真实iIP

--------------------

### 1、Nginx配置 ###

server {
        
           listen 8989;
           server_name 192.168.1.220;
    	   
    	   client_max_body_size 50m;
    	   
           #access_log  logs/access2.log;
    	   #error_log  logs/error2.log;
    	   
    	   #webSocket访问代理
           location ^~ /Test_WEB_SOCKET/ {
        
    			proxy_pass http://192.168.1.178:8088;
    			
    			# WebScoket Support
    			proxy_http_version 1.1;
    			# webscoekt超时时间，如果没有做心跳之类的动作需要配置
    			proxy_read_timeout 700s;
    			proxy_set_header Upgrade $http_upgrade;
    			proxy_set_header Connection "upgrade";
    			
    			proxy_set_header Origin "";
    			proxy_set_header Host $host;
    			proxy_set_header X-Real-IP $remote_addr;
    			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    			# 在多级代理的情况下，记录每次代理之前的客户端真实ip
    			proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
    			# 指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值
    			proxy_redirect default;
    			proxy_set_header X-NginX-Proxy true;
    			break;
    		}
    		
    		#socket访问代理
    		location ^~ /socket.io/ {
        
    			proxy_pass http://192.168.1.178:9901;
    			
    			# WebScoket Support
    			proxy_http_version 1.1;
    			proxy_read_timeout 700s; # webscoekt超时时间，如果没有做心跳之类的动作需要配置
    			proxy_set_header Upgrade $http_upgrade;
    			proxy_set_header Connection "upgrade";
    			
    			proxy_set_header Origin "";
    			proxy_set_header X-Real-IP $remote_addr;
    			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    			proxy_set_header Host $host;
    			proxy_set_header X-NginX-Proxy true;
    			break;
    		}
        }

--------------------

### 2、工具类 ###

package com.xxx;
    
    import com.corundumstudio.socketio.SocketIOClient;
    import org.apache.commons.lang.StringUtils;
    import org.springframework.http.HttpHeaders;
    import org.springframework.web.socket.WebSocketSession;
    
    import java.net.InetSocketAddress;
    import java.util.ArrayList;
    import java.util.List;
    
    public class SocketIpUtil {
        
    
        /**
         * 获取nginx代理后webSocket的真实IP
         *
         * @param session
         * @return
         */
        public static String getWebSocketIp(WebSocketSession session) {
        
            String ip = "";
            //获取Nginx代理后的真实ip地址
            List<String> list = new ArrayList<>();
            HttpHeaders handshakeHeaders = session.getHandshakeHeaders();
            if (handshakeHeaders.containsKey("x-real-ip")) {
        
                list = handshakeHeaders.get("x-real-ip");
            } else if (handshakeHeaders.containsKey("x-forwarded-for")) {
        
                list = handshakeHeaders.get("x-forwarded-for");
            } else if (handshakeHeaders.containsKey("http_x_forwarded_for")) {
        
                list = handshakeHeaders.get("http_x_forwarded_for");
            }
            if (list != null && list.size() > 0) {
        
                ip = list.get(0);
            } else {
        
                //如果未经过Nginx代理
                InetSocketAddress remoteAddress = session.getRemoteAddress();
                if (remoteAddress != null) {
        
                    ip = remoteAddress.getAddress().getHostAddress();
                }
            }
            return ip;
        }
    
        /**
         * 获取nginx代理后socket的真实IP
         *
         * @param client
         * @return
         */
        public static String getSocketIp(SocketIOClient client) {
        
            //获取Nginx代理后的真实ip地址
            String ip = client.getHandshakeData().getHttpHeaders().get("X-Real-IP");
            if (StringUtils.isBlank(ip)) {
        
                ip = client.getHandshakeData().getHttpHeaders().get("X-Forwarded-For");
            }
            if (StringUtils.isBlank(ip)) {
        
                //如果未经过Nginx代理
                ip = client.getHandshakeData().getAddress().getAddress().getHostAddress();
            }
            return ip;
        }
    }