我不完全明白我应该如何获得一个远程用户IP地址。
假设我有一个简单的请求路由，如:
app.get(/, function (req, res){
var forwardedIpsStr = req.header('x-forwarded-for');
var IP = '';
if (forwardedIpsStr) {
IP = forwardedIps = forwardedIpsStr.split(',')[0];
}
});
上面的方法是否正确，以获得真实的用户IP地址或有更好的方法? 那么代理呢?
当前回答
将所有的witk @kakopappa解决方案加上morgan客户端ip地址的日志记录:
morgan.token('client_ip', function getId(req) {
return req.client_ip
});
const LOG_OUT = ':remote-addr - :remote-user [:date[clf]] ":method :url HTTP/:http-version" :status :res[content-length] ":referrer" ":user-agent" :client_ip'
self.app.use(morgan(LOG_OUT, {
skip: function(req, res) { // custom logging: filter status codes
return res.statusCode < self._options.logging.statusCode;
}
}));
// could-flare, nginx and x-real-ip support
var getIpInfoMiddleware = function(req, res, next) {
var client_ip;
if (req.headers['cf-connecting-ip'] && req.headers['cf-connecting-ip'].split(', ').length) {
var first = req.headers['cf-connecting-ip'].split(', ');
client_ip = first[0];
} else {
client_ip = req.headers['x-forwarded-for'] || req.headers['x-real-ip'] || req.connection.remoteAddress || req.socket.remoteAddress || req.connection.socket.remoteAddress;
}
req.client_ip = client_ip;
next();
};
self.app.use(getIpInfoMiddleware);
其他回答
headers对象有你需要的一切，只需要这样做:
var ip = req.headers['x-forwarded-for'].split(',')[0];
这只是这个答案的附加信息。
如果你正在使用nginx，你需要添加proxy_set_header X-Real-IP $remote_addr;到站点的位置块。例如:/etc/nginx/sites-available/www.example.com。下面是一个服务器块示例。
server {
listen 80;
listen [::]:80;
server_name example.com www.example.com;
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://127.0.1.1:3080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
}
重新启动nginx后，你将能够使用req访问你的节点/express应用程序路由中的ip。headers['x-real-ip'] || req.connection.remoteAddress;
在我的案例中，类似于这个解决方案，我最终使用了以下x-forward for方法:
let ip = (req.headers['x-forwarded-for'] || '').split(',')[0];
x-forward -for报头将继续添加从源服务器到最终目标服务器的IP路由，因此如果需要检索源客户端的IP，这将是数组的第一项。
与could-flare, nginx和x-real-ip支持
var user_ip;
if(req.headers['cf-connecting-ip'] && req.headers['cf-connecting-ip'].split(', ').length) {
let first = req.headers['cf-connecting-ip'].split(', ');
user_ip = first[0];
} else {
let user_ip = req.headers['x-forwarded-for'] || req.headers['x-real-ip'] || req.connection.remoteAddress || req.socket.remoteAddress || req.connection.socket.remoteAddress;
}
如果你在运行一个像NGiNX之类的代理，那么你应该检查'x-forward -for':
var ip = req.headers['x-forwarded-for'] || req.socket.remoteAddress
如果代理不是“你的”，我不会相信“x-forward -for”报头，因为它可能被欺骗。
