Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

需要在ingress日志中拿到用户真实IP

ingress配置文件

Code Block
---
apiVersion: v1
data:
  add-headers: ingress-nginx/custom-headers-default
  allow-backend-server-header: 'true'
  compute-full-forwarded-for: 'true'
  enable-underscores-in-headers: 'true'
  error-log-level: notice
  forwarded-for-header: X-Forwarded-For
  generate-request-id: 'true'
  hsts: 'false'
  ignore-invalid-headers: 'true'
  log-format-escape-json: 'true'
  log-format-upstream: >-
    {"tags":"nginx-h5", "time_local":"$time_local", "status":"$status",
    "domain_name":"$host", "upstream_status":"$upstream_status",
    "request":"$request", "client_ip":"$http_x_forwarded_for",
 - [   "remote_addr":"$remote_addr] - $remote_user [$time_local]", "upstream_addr":"$upstream_addr",
    "msec":"$request$msec" $status $body_bytes_sent "$http_referer" "$http_user_agent", "upstream_connect_time":"$upstream_connect_time",
    "upstream_response_time":"$upstream_response_time",
    "request_time":"$request_time", "request_length ":"$request_time [$proxy_upstream_name] $upstream_addrlength",
    "upstream_response_length":"$upstream_response_length",
    $upstream_response_length $upstream_response_time $upstream_status $req_id"body_bytes_sent":"$body_bytes_sent",
    "upstream_header_time":"$upstream_header_time",
    $host [$proxy_alternative_upstream_name]"http_referer":"$http_referer", "http_user_agent":"$http_user_agent"}
  max-worker-connections: '65535'
  proxy-body-size: 4096M
  proxy-connect-timeout: '3600'
  proxy-read-timeout: '3600'
  proxy-send-timeout: '3600'
  ssl-ciphers: >-
    ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
  ssl-protocols: TLSv1.2 TLSv1.1 TLSv1
  upstream-keepalive-connections: '40000'
  use-forwarded-headers: 'true'
  use-http2: 'false'
  use-proxy-protocol: 'true'
  worker-processes: '2'
  worker-shutdown-timeout: 2hs
kind: ConfigMap
metadata:
  name: ingress-nginx-controller-default
  namespace: ingress-nginx

...