NGINX反代获取真实IP

清夏晚风
  2026-01-13 16:48:23 2026-01-13 16:48:23 Created   2026-01-13 16:48:23 2026-01-13 16:48:23 Updated      

反代获取真实IP

1
2
3
4
5
proxy_set_header Host $host;                                  # 传递原始请求的Host头
proxy_set_header X-Real-IP $remote_addr;                      # 传递客户端真实IP到X-Real-IP头
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  # 构建IP转发链
proxy_set_header X-Forwarded-Proto $scheme;                   # 传递请求协议(http/https)
proxy_set_header X-Forwarded-Port $server_port;               # 传递请求端口

安全增强配置

1
2
real_ip_header X-Forwarded-For;                               # 指定从哪个头获取真实IP
set_real_ip_from 0.0.0.0/0;                                   # 允许从任何IP获取真实IP(生产环境应限制为可信代理IP)
  • Title: NGINX反代获取真实IP
  • Author: 清夏晚风
  • Created at : 2026-01-13 16:48:23
  • Updated at : 2026-01-13 16:48:23
  • Link: https://blog.kimikkorow.eu.org/网站服务器/NGINX/NGINX反代获取真实IP/
  • License: This work is licensed under CC BY-NC-SA 4.0.
On this page
NGINX反代获取真实IP
  1. 反代获取真实IP
  2. 安全增强配置