版块 › 新IT类 › 应用交付AD › AD上如何实现 透传源IP给服务器
AD上如何实现 透传源IP给服务器 5

太原_力挺村长   2019-10-10 21:52  3369  

{{ttag.title}}
本帖最后由 太原_力挺村长 于 2019-10-11 17:44 编辑

大概了解过 ，如果需要做路由模式的源IP透传，需要做如下操作
1、开X-Forwarded-For>>>

2添加一个虚拟服务（就能完成）
困惑的地方：
按照文档的部署方式部署之后，在服务器上仍然还能看见是AD的lan口地址在交互；希望能够在nginx代理服务器和业务服务器上都能看到真实的客户端IP。



那么下面说下架构

ad（总出口）—af（透明）—ac（透明）—核心(网关都在这)—（1、业务服务器；2、内网终端）
ad做的LAN-LAN 和映射；
二期新加了一堆业务系统，业务系统使用Nginx做反向代理（192.168.99.24）

说实话，做虚拟服务配置之后自己也没验证，目前没有什么思路


下附Nginx的配置
[root@localhost conf]# ls
fastcgi.conf          fastcgi_params          im       koi-win     mime.types.default  nginx.conf.default           nginx.conf.dingbak  scgi_params.default  uwsgi_params.default
fastcgi.conf.default  fastcgi_params.default  koi-utf  mime.types  nginx.conf          nginx.conf.ding20190725.bak  scgi_params         uwsgi_params         win-utf
[root@localhost conf]# cat nginx.conf

#user  nobody;
worker_processes        auto;
worker_rlimit_nofile    100000;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

pid        /u01/nginx/logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request"'
                      '$status $body_bytes_sent "$http_referer" '
                      '"$upstream_addr" "$http_x_forwarded_for"';

    access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  80;
    #client_header_timeout 10;
    #client_body_timeout 10;
    #send_timeout 10;

    gzip on;
    gzip_min_length 2k;
    gzip_buffers 4 16k;
    #gzip_http_version 1.1;
    gzip_comp_level 2;
    gzip_types text/xml text/plain text/css text/javascript application/javascript;
    gzip_vary off;
    gzip_disable "MSIE [1-6]\.";
    #reset_timedout_connection on;

    #server_tokens off;

    #tcp_nopush on;
    #tcp_nodelay on;


    #open_file_cache max=100000 inactive=20s;
    #open_file_cache_valid 30s;
    #open_file_cache_min_uses 2;
    #open_file_cache_errors on;
    proxy_temp_path   /data/proxy_temp_dir;
    proxy_cache_path  /data/proxy_cache_dir  levels=1:2   keys_zone=cache_one:200m inactive=1d max_size=500m;

    upstream cas {
                #sticky;
                ip_hash;
                server 192.168.99.7:90;
                server 192.168.99.20;
                server 192.168.99.21;
                #jvm_route $cookie_JSESSIONID|sessionid reverse;
    }
    upstream im {
                #sticky;
                ip_hash;
                server 192.168.99.7:91;
                server 192.168.99.20:91;
                server 192.168.99.21:91;
                #jvm_route $cookie_JSESSIONID|sessionid reverse;
    }


    server {
        listen       90;
        server_name  i.xztu.edu.cn;
        #charset koi8-r;
        error_log  /u01/nginx/log/nginxcas.log debug;
        #access_log  logs/host.access.log  main;

        location /cas {
            proxy_pass http://cas;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header   x-forwarded-for  $http_x_forwarded_for;
                proxy_connect_timeout 300;
            proxy_read_timeout 300;
            proxy_send_timeout 300;
                #proxy_cache scache;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }

    server {
        listen       91;
        server_name  i.xztu.edu.cn;
        #charset koi8-r;
        error_log  /u01/nginx/log/nginxim.log debug;
        #access_log  logs/host.access.log  main;

            location /im {
            proxy_pass http://im;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header   x-forwarded-for  $http_x_forwarded_for;
                proxy_connect_timeout 300;
            proxy_read_timeout 300;
            proxy_send_timeout 300;
                #proxy_cache scache;
        }
#           location /zftal-ui-v5-1.1.0 {
#           root   html;
#
#       }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

}



nginx的日志：
[root@localhost log]# tail -100f nginxcas.log   //统一认证应用的日志//
2019/10/10 20:50:35 [info] 6281#0: *172 client 172.17.254.251 closed keepalive connection
2019/10/10 20:52:34 [info] 6284#0: *181 client 172.17.254.251 closed keepalive connection
2019/10/10 20:54:59 [warn] 6286#0: *192 an upstream response is buffered to a temporary file /data/proxy_temp_dir/0000000001 while reading upstream, client: 171.117.40.23, server: i.xztu.edu.cn, request: "GET /cas/assets/images/login_bg
.jpg HTTP/1.1", upstream: "http://192.168.99.7:90/cas/assets/images/login_bg.jpg", host: "i.xztu.edu.cn:90", referrer: "http://i.xztu.edu.cn:90/cas/assets/css/style.css"
2019/10/10 20:55:00 [error] 6285#0: *198 open() "/u01/nginx/html/favicon.ico" failed (2: No such file or directory), client: 171.117.40.23, server: i.xztu.edu.cn, request: "GET /favicon.ico HTTP/1.1", host: "i.xztu.edu.cn:90"
2019/10/10 20:55:17 [info] 6285#0: *222 client 172.17.254.251 closed keepalive connection
2019/10/10 20:56:18 [info] 6285#0: *252 client 172.17.254.251 closed keepalive connection
2019/10/10 21:01:56 [info] 6284#0: *268 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/10 21:18:37 [info] 6285#0: *357 client 172.17.254.251 closed keepalive connection
2019/10/10 21:24:01 [warn] 6280#0: *433 an upstream response is buffered to a temporary file /data/proxy_temp_dir/0000000002 while reading upstream, client: 172.17.254.245, server: i.xztu.edu.cn, request: "GET /cas/assets/images/login_b
g.jpg HTTP/1.1", upstream: "http://192.168.99.7:90/cas/assets/images/login_bg.jpg", host: "192.168.99.24:90", referrer: "http://192.168.99.24:90/cas/assets/css/style.css"
2019/10/10 22:02:56 [info] 6285#0: *605 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/10 22:42:38 [info] 6285#0: *731 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/10 23:03:55 [info] 6282#0: *809 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/10 23:27:12 [info] 6284#0: *919 client 172.17.254.251 closed keepalive connection
2019/10/10 23:27:12 [info] 6284#0: *922 client 172.17.254.251 closed keepalive connection
2019/10/11 00:04:56 [info] 6285#0: *1060 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 00:56:34 [info] 6286#0: *1240 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:06:01 [info] 6285#0: *1296 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:33:50 [info] 6281#0: *1437 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:35:17 [info] 6287#0: *1446 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:37:24 [info] 6285#0: *2522 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:38:29 [info] 6287#0: *2524 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 01:55:20 [info] 6285#0: *2619 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 02:06:55 [info] 6287#0: *2663 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 02:23:16 [info] 6285#0: *2719 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 02:25:15 [info] 6284#0: *2730 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 03:08:01 [info] 6287#0: *2916 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 04:06:06 [info] 6287#0: *3149 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 04:08:55 [info] 6287#0: *3159 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 05:09:55 [info] 6285#0: *3407 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 05:41:51 [info] 6286#0: *3557 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 06:07:10 [info] 6285#0: *3693 client 172.17.254.251 closed keepalive connection
2019/10/11 06:07:10 [info] 6283#0: *3690 client 172.17.254.251 closed keepalive connection
2019/10/11 06:07:11 [info] 6286#0: *3713 client 172.17.254.251 closed keepalive connection
2019/10/11 06:07:11 [info] 6285#0: *3719 client 172.17.254.251 closed keepalive connection
2019/10/11 06:07:11 [info] 6284#0: *3723 client 172.17.254.251 closed keepalive connection
2019/10/11 06:07:11 [info] 6284#0: *3727 client 172.17.254.251 closed keepalive connection
2019/10/11 06:11:01 [info] 6287#0: *3757 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 06:57:01 [info] 6287#0: *3970 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 06:57:01 [info] 6287#0: *3972 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 07:11:56 [info] 6286#0: *4044 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 07:34:50 [info] 6286#0: *4154 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 07:36:15 [info] 6287#0: *4167 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 07:38:23 [info] 6287#0: *5257 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 07:39:29 [info] 6285#0: *5271 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 08:12:56 [info] 6283#0: *5488 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 09:13:55 [info] 6285#0: *5820 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 09:29:25 [info] 6283#0: *5904 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 10:14:55 [info] 6287#0: *6160 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 10:17:10 [info] 6284#0: *6194 client 172.17.254.251 closed keepalive connection
2019/10/11 10:17:10 [info] 6284#0: *6197 client 172.17.254.251 closed keepalive connection
2019/10/11 10:17:10 [info] 6285#0: *6215 client 172.17.254.251 closed keepalive connection
2019/10/11 10:17:10 [info] 6287#0: *6223 client 172.17.254.251 closed keepalive connection
2019/10/11 10:17:10 [info] 6285#0: *6227 client 172.17.254.251 closed keepalive connection
2019/10/11 10:17:10 [info] 6280#0: *6231 client 172.17.254.251 closed keepalive connection
2019/10/11 11:16:00 [info] 6287#0: *6565 client 172.17.254.251 closed keepalive connection (104: Connection reset by peer)
2019/10/11 12:30:17 [info] 6287#0: *6875 client closed connection while waiting for request, client: 172.17.254.251, server: 0.0.0.0:90
2019/10/11 16:48:59 [error] 6283#0: *6922 open() "/u01/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.254.245, server: i.xztu.edu.cn, request: "GET /favicon.ico HTTP/1.1", host: "192.168.99.24:90"
2019/10/11 16:48:59 [warn] 6280#0: *6923 an upstream response is buffered to a temporary file /data/proxy_temp_dir/0000000004 while reading upstream, client: 172.17.254.245, server: i.xztu.edu.cn, request: "GET /cas/assets/images/login_
bg.jpg HTTP/1.1", upstream: "http://192.168.99.7:90/cas/assets/images/login_bg.jpg", host: "192.168.99.24:90", referrer: "http://192.168.99.24:90/cas/assets/css/style.css"
2019/10/11 17:10:09 [info] 6286#0: *6957 client 172.17.254.251 closed keepalive connection
2019/10/11 17:10:09 [info] 6284#0: *6958 client 172.17.254.251 closed keepalive connection
2019/10/11 17:10:24 [error] 6287#0: *6959 open() "/u01/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.254.251, server: i.xztu.edu.cn, request: "GET /favicon.ico HTTP/1.1", host: "i.xztu.edu.cn:88"
2019/10/11 17:10:24 [info] 6287#0: *6959 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6960 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6961 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6285#0: *6962 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6963 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6964 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6965 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6282#0: *6966 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:00 [info] 6287#0: *6967 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6280#0: *6968 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6285#0: *6969 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6285#0: *6970 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6287#0: *6971 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6287#0: *6972 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6287#0: *6973 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6287#0: *6974 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:01 [info] 6285#0: *6975 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:02 [info] 6287#0: *6976 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:02 [info] 6287#0: *6977 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:31 [info] 6286#0: *6978 client 172.17.254.251 closed keepalive connection
2019/10/11 17:11:32 [info] 6285#0: *6979 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:03 [info] 6287#0: *6981 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:03 [info] 6282#0: *6982 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:03 [info] 6282#0: *6983 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:36 [info] 6282#0: *6985 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:36 [info] 6280#0: *6986 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:36 [info] 6284#0: *6987 client 172.17.254.251 closed keepalive connection
2019/10/11 17:12:36 [info] 6284#0: *6988 client 172.17.254.251 closed keepalive connection
2019/10/11 17:14:17 [error] 6282#0: *6990 open() "/u01/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.17.254.251, server: i.xztu.edu.cn, request: "GET /favicon.ico HTTP/1.1", host: "i.xztu.edu.cn:91"
2019/10/11 17:14:22 [info] 6284#0: *6991 client 172.17.254.251 closed keepalive connection
2019/10/11 17:14:22 [info] 6284#0: *6992 client 172.17.254.251 closed keepalive connection
2019/10/11 17:14:45 [info] 6282#0: *6990 client 172.17.254.251 closed keepalive connection
2019/10/11 17:15:09 [info] 6286#0: *6993 client 172.17.254.251 closed keepalive connection
2019/10/11 17:15:09 [info] 6286#0: *6994 client 172.17.254.251 closed keepalive connection
2019/10/11 17:15:52 [info] 6285#0: *6995 client 172.17.254.251 closed keepalive connection
2019/10/11 17:17:36 [info] 6286#0: *6997 client 172.17.254.251 closed keepalive connection
2019/10/11 17:17:36 [info] 6286#0: *6998 client 172.17.254.251 closed keepalive connection
2019/10/11 17:17:36 [info] 6287#0: *6999 client 172.17.254.251 closed keepalive connection
2019/10/11 17:17:36 [info] 6287#0: *7000 client 172.17.254.251 closed keepalive connection


[root@localhost logs]# tail -100f access.log     //nginx代理成功的日志部分//
172.17.254.251 - - [11/Oct/2019:12:31:21 +0800] "GET /cas/v2/getKaptchaStatus HTTP/1.1"200 15 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:21 +0800] "GET /cas/kaptcha?time=1570768279593 HTTP/1.1"200 2778 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F HTTP/1.1"200 7241 "-" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/i18n/strings.properties?_=1570768289897 HTTP/1.1"200 555 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/i18n/strings_zh.properties?_=1570768289898 HTTP/1.1"200 661 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/i18n/strings_zh_CN.properties?_=1570768289899 HTTP/1.1"302 0 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/login?_=1570768289899 HTTP/1.1"500 942 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/v2/getKaptchaStatus HTTP/1.1"200 15 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:31 +0800] "GET /cas/kaptcha?time=1570768289999 HTTP/1.1"200 2716 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F HTTP/1.1"200 7239 "-" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/i18n/strings.properties?_=1570768291519 HTTP/1.1"200 555 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/i18n/strings_zh.properties?_=1570768291520 HTTP/1.1"200 661 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/i18n/strings_zh_CN.properties?_=1570768291521 HTTP/1.1"302 0 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/login?_=1570768291521 HTTP/1.1"500 942 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/v2/getKaptchaStatus HTTP/1.1"200 15 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:31:33 +0800] "GET /cas/kaptcha?time=1570768291611 HTTP/1.1"200 2726 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:46 +0800] "GET /cas/v2/getPubKey HTTP/1.1"200 172 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:48 +0800] "GET /cas/v2/getPubKey HTTP/1.1"200 172 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F HTTP/1.1"200 7247 "-" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/i18n/strings.properties?_=1570768376425 HTTP/1.1"200 555 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/i18n/strings_zh.properties?_=1570768376426 HTTP/1.1"200 661 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/i18n/strings_zh_CN.properties?_=1570768376427 HTTP/1.1"302 0 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/login?_=1570768376427 HTTP/1.1"500 942 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:32:58 +0800] "GET /cas/kaptcha?time=1570768376509 HTTP/1.1"200 2779 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:34:13 +0800] "GET /cas/v2/getKaptchaStatus HTTP/1.1"200 15 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:12:35:28 +0800] "GET /cas/v2/getPubKey HTTP/1.1"200 172 "http://i.xztu.edu.cn:90/cas/login?service=http%3A%2F%2Fi.xztu.edu.cn%3A88%2F" "192.168.99.7:90" "-"
172.17.254.251 - - [11/Oct/2019:17:10:09 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:10:09 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:10:24 +0800] "GET / HTTP/1.1"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:10:24 +0800] "GET /favicon.ico HTTP/1.1"404 169 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:00 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:01 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:02 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:11:02 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:14:17 +0800] "GET /favicon.ico HTTP/1.1"404 571 "-" "-" "111.53.196.3"
172.17.254.251 - - [11/Oct/2019:17:14:22 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:14:22 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:15:09 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:15:09 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:15:52 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.100.83"
172.17.254.251 - - [11/Oct/2019:17:16:36 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.252.152"
172.17.254.251 - - [11/Oct/2019:17:17:36 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.252.152"
172.17.254.251 - - [11/Oct/2019:17:17:36 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.252.152"
172.17.254.251 - - [11/Oct/2019:17:17:36 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.252.152"
172.17.254.251 - - [11/Oct/2019:17:17:36 +0800] "GET / HTTP/1.0"200 612 "-" "-" "172.17.252.152"

关键IP地址说明：
172.17.254.251 //AD lan口地址//
172.17.100.83 & 172.17.252.152   //内网测试终端地址//

该疑问已被 解决，获得了 25 S豆

回帖即可获得
2S豆
，被楼主采纳即奖励20S豆+悬赏奖励5S豆+10分钟内回帖奖励10S豆 [已过期] ，了解更多S豆奖励信息

完善手机号和公司名称，让服务更省心更便捷！立即完善
 直达楼层 誓言落寞了年华 Lv8
服务器上有安装插件来读取读取XFF的IP信息吗
本答案是否对你有帮助？
誓言落寞了年华  发表于 2019-10-11 01:13
  
服务器上有安装插件来读取读取XFF的IP信息吗
Sangfor_闪电回_小丸子  发表于 2019-10-12 18:22
  
您好 您的问题需要工程师远程协助，麻烦您关注下私信内容，并私信提供下相关的信息，这边协调工程师远程协助您处理 谢谢！
新手548437  发表于 2019-10-13 11:54
  
感谢分享。
发表新帖 收藏 回复本帖
分享

等我来答：

换一批

发表新帖
作者其他文章
AC12.012版本如何配置LDAP
热门标签
全部标签>
安全效果
西北区每日一问
高手请过招
【 社区to talk】
纪元平台
每日一问
产品连连看
新版本体验
社区新周刊
干货满满
GIF动图学习
标准化排查
自助服务平台操作指引
技术咨询
功能体验
社区帮助指南
每周精选
VPN 对接
秒懂零信任
技术笔记
技术盲盒
信服课堂视频
畅聊IT
答题自测
专家问答
技术圆桌
在线直播
MVP
网络基础知识
安装部署配置
升级
安全攻防
上网策略
测试报告
日志审计
问题分析处理
流量管理
每日一记
运维工具
云计算知识
用户认证
原创分享
解决方案
sangfor周刊
项目案例
SANGFOR资讯
专家分享
技术顾问
信服故事
SDP百科
功能咨询
终端接入
授权
设备维护
资源访问
地址转换
虚拟机
存储
迁移
加速技术
排障笔记本
产品预警公告
玩转零信任
信服圈儿
S豆商城资讯
技术争霸赛
「智能机器人」
追光者计划
深信服技术支持平台
答题榜单公布
2023技术争霸赛专题
通用技术
卧龙计划
华北区拉练
天逸直播
以战代练
技术晨报
山东区技术晨报
文档捉虫活动
齐鲁TV
华北区交付直播
2024年技术争霸赛
北京区每日一练
场景专题
故障笔记
排障那些事
升级&主动服务
高频问题集锦
POC测试案例
全能先锋系列
云化安全能力
转盘
任务
商城
勋章
成长计划

本版热帖

本版达人

新手61940...

本周建议达人

zhao_HN

本周分享达人

ZSFKF

本周提问达人