Nginx配置proxy protocol代理获取真实ip的全过程

sudo su

vi /etc/nginx/nginx.conf

http {  # 使用 http 模块处理 HTTP 流量
   
server {
        listen 8888 proxy_protocol;  # 启用 PROXY Protocol 解析
        server_name localhost;

        location / {
            proxy_pass http://192.168.1.80:7890/;#转发目标地址（应用程序部署服务器）
            # 传递真实 IP 到后端（需后端支持）
            proxy_set_header X-Real-IP       $proxy_protocol_addr;  # 真实客户端 IP
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  # 兼容性头部
            proxy_set_header Host             $host;
        }
    }
 log_format tcp_log 'http->[$time_local] $proxy_add_x_forwarded_for → $server_addr ($status)';
         access_log /var/log/nginx/tcp_access.log tcp_log;#记录日志

}

sudo ufw allow 8888/tcp

stream {
    server {
        listen 8880 proxy_protocol;  # 启用PROXY协议解析
        proxy_pass 192.168.1.80:7890;#转发目标地址（应用程序部署服务器）
        proxy_protocol on; #显示启动代理协议透传
    }
    log_format tcp_log 'tcp->[$time_local] $proxy_protocol_addr → $server_addr ($status)';
    access_log /var/log/nginx/tcp_access.log tcp_log;#记录日志
}

sudo ufw allow 8880/tcp

nginx -s reload

systemctl restart nginx

listen 8880 proxy_protocol

sudo netstat -na | grep LIST | grep 8888

curl -H “X-Forwarded-For: 203.0.113.42” 192.168.1.70 8888

http->[22/Jul/2025:09:40:16 +0800] 203.0.113.42, 192.168.1.85 → 192.168.1.73 (200)

static void Main(string[] args)
{    try
        {
        // 创建 Socket
        Socket socket = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);

        // 连接到Nginx
        IPAddress ipAddress = IPAddress.Parse("192.168.1.73");
        IPEndPoint remoteEP = new IPEndPoint(ipAddress, 8880);
        socket.Connect(remoteEP);

        // 构造并发送PROXY Protocol v1头部
        string proxyHeader = $"PROXY TCP4 {GetLocalIP()} 192.168.1.73 {GetLocalPort(socket)} 8880\r\n";
        byte[] proxyHeaderBytes = Encoding.ASCII.GetBytes(proxyHeader);
        socket.Send(proxyHeaderBytes);

        // 发送实际数据
        string request = "123465";
        byte[] requestData = Encoding.ASCII.GetBytes(request);
        socket.Send(requestData);

        // 辅助函数：获取本地IP
        
        string GetLocalIP()
        {
            return Dns.GetHostEntry(Dns.GetHostName())
                .AddressList.First(ip => ip.AddressFamily == AddressFamily.InterNetwork)
                .ToString();
        }

        // 辅助函数：获取本地端口
         int GetLocalPort(Socket _socket)
        {
            return ((IPEndPoint)_socket.LocalEndPoint).Port;
        }
    }
        catch (Exception ex)
        {
            Console.WriteLine($"发生错误: {ex.Message}");
        }
}

tcp->[22/Jul/2025:10:16:32 +0800] 192.168.1.181 → 192.168.1.73 (200)