Use SLB to get real IP after Nginx and Apache

Source: Internet
Author: User
Tags ip number apache log

The premise is that the "Get real IP" feature is turned on in the SLB setting.

If only need to get real IP in the program, so long as in the program to get the value of http_x_forwarded_for is basically OK, do not need the following operation.

The following operations can be implemented Nginx or Apache log records of the user real IP or in Apache, nginx prohibit certain IP users access.

Nginx

Nginx as SLB to get real IP is using Http_realip_module, the default one-click installation package installed Nginx not installed This module needs to recompile nginx and install.

Take one-click installation package as an example

Recompile nginx Add--with-http_realip_module

wget http://soft.phpwind.me/top/nginx-1.0.12.tar.gz

Tar zxvf nginx-1.0.12.tar.gz

CD nginx-1.0.12

./configure--user=www--group=www--prefix=/alidata/server/nginx--with-http_stub_status_module- Without-http-cache--with-http_ssl_module--with-http_realip_module

Make

Make install

KILL-USR2 ' Cat/alidata/server/nginx/logs/nginx.pid '

Kill-quit ' Cat/alidata/server/nginx/logs/nginx.pid.oldbin '

Modify Nginx.conf

Vi/alidata/server/nginx/conf/nginx.conf

In

Fastcgi_connect_timeout 300;

Fastcgi_send_timeout 300;

Fastcgi_read_timeout 300;

Fastcgi_buffer_size 64k;

Fastcgi_buffers 4 64k;

Fastcgi_busy_buffers_size 128k;

Fastcgi_temp_file_write_size 128k;

Add below

Set_real_ip_from IP address (this IP address is not the first SLB provided by the public network IP, the specific IP number can look at the previous Nginx log, if there are more than one to write on. )

Set_real_ip_from IP address (this IP address is not the first SLB provided by the public network IP, the specific IP number can look at the previous Nginx log, if there are more than one to write on. )

Real_ip_header x-forwarded-for;

Restart Nginx

/alidata/server/nginx/sbin/nginx-s Reload

Apache

Install Apache's Third-party module "MOD_RPAF", official website: http://stderr.net/apache/rpaf/

wget http://stderr.net/apache/rpaf/download/mod_rpaf-0.6.tar.gz

Tar zxvf mod_rpaf-0.6.tar.gz

CD mod_rpaf-0.6

/alidata/server/httpd/bin/apxs-i-c-n mod_rpaf-2.0.so mod_rpaf-2.0.c

Modify Apache Configuration/alidata/server/httpd/conf/httpd.conf

Add at the end

LoadModule Rpaf_module modules/mod_rpaf-2.0.so

Rpafenable on

Rpafsethostname on

Rpafproxy_ips IP Address

Rpafheader x-forwarded-for

Rpafproxy_ips IP address (this IP address is not the first SLB provided by the public network IP, the specific IP how many can look at the Apache log, usually have 2 to write)

Restart Apache after add complete

/alidata/server/httpd/bin/apachectl restart

Specific cases

LoadModule Rpaf_module modules/mod_rpaf-2.0.so

Rpafenable on

Rpafsethostname on

Rpafproxy_ips 10.242.230.65 10.242.230.131

Rpafheader x-forwarded-for

Related Article

E-Commerce Solutions

Leverage the same tools powering the Alibaba Ecosystem

Learn more >

Apsara Conference 2019

The Rise of Data Intelligence, September 25th - 27th, Hangzhou, China

Learn more >

Alibaba Cloud Free Trial

Learn and experience the power of Alibaba Cloud with a free trial worth $300-1200 USD

Learn more >

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.