Nginx有set_real_ip_from和real_ip_header proxy_protocol指令来限制TCP负载均衡器的可信IP地址。https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/ 但是Apache只有RemoteIPTrustedProxy,它只适用于传统的X转发-For头。 什么是Apache相当于Nginx set_real_ip_from,real_ip_header的代理...
> set_real_ip_from 11.22.33.44; # IP адрес vps_server > real_ip_header proxy_protocol; > >Вовторомслучаедляполученияреального IP клиента - вблоке > server надопрописать: > > set_real_ip_from 173.245...
ssl-proxy service SSL-PROXY key xxx.em cert xxx.pem class-map match-all NGINX-443-VIP 2 match virtual-address 10.99.1.4 tcp eq https class-map match-all NGINX-80-VIP 2 match virtual-address 10.99.1.2 tcp eq www class-map type management match-any remote_access 2 match protoco...
> set_real_ip_from 11.11.11.11; > real_ip_header proxy_protocol; > > set_real_ip_from2 <cloudflare ip>; > ... > set_real_ip_from2 <cloudflare ip>; > real_ip_header2 CF-Connecting-IP; > >сначалаотработаютдирективы set_real_ip_from и real_i...
ssl-proxy service SSL-PROXY key xxx.em cert xxx.pem class-map match-all NGINX-443-VIP 2 match virtual-address 10.99.1.4 tcp eq https class-map match-all NGINX-80-VIP 2 match virtual-address 10.99.1.2 tcp eq www class-map type management match-any remote_access 2 match protocol...