...
需要在ingress日志中拿到用户真实IP
ingress配置文件
Code Block |
---|
--- apiVersion: v1 data: add-headers: ingress-nginx/custom-headers-default allow-backend-server-header: 'true' compute-full-forwarded-for: 'true' enable-underscores-in-headers: 'true' error-log-level: notice forwarded-for-header: X-Forwarded-For generate-request-id: 'true' hsts: 'false' ignore-invalid-headers: 'true' log-format-escape-json: 'true' log-format-upstream: >- {"tags":"nginx-h5", "time_local":"$time_local", "status":"$status", "domain_name":"$host", "upstream_status":"$upstream_status", "request":"$request", "client_ip":"$http_x_forwarded_for", - [ "remote_addr":"$remote_addr] - $remote_user [$time_local]", "upstream_addr":"$upstream_addr", "msec":"$request$msec" $status $body_bytes_sent "$http_referer" "$http_user_agent", "upstream_connect_time":"$upstream_connect_time", "upstream_response_time":"$upstream_response_time", "request_time":"$request_time", "request_length ":"$request_time [$proxy_upstream_name] $upstream_addrlength", "upstream_response_length":"$upstream_response_length", $upstream_response_length $upstream_response_time $upstream_status $req_id"body_bytes_sent":"$body_bytes_sent", "upstream_header_time":"$upstream_header_time", $host [$proxy_alternative_upstream_name]"http_referer":"$http_referer", "http_user_agent":"$http_user_agent"} max-worker-connections: '65535' proxy-body-size: 4096M proxy-connect-timeout: '3600' proxy-read-timeout: '3600' proxy-send-timeout: '3600' ssl-ciphers: >- ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl-protocols: TLSv1.2 TLSv1.1 TLSv1 upstream-keepalive-connections: '40000' use-forwarded-headers: 'true' use-http2: 'false' use-proxy-protocol: 'true' worker-processes: '2' worker-shutdown-timeout: 2hs kind: ConfigMap metadata: name: ingress-nginx-controller-default namespace: ingress-nginx |
...