快捷導(dǎo)航

java如何根據(jù)HttpServletRequest獲取IP地址

更新時(shí)間：2025年03月08日 13:56:34 作者：北極的企鵝88

文章介紹了幾種代理服務(wù)器轉(zhuǎn)發(fā)服務(wù)請(qǐng)求頭的方法,這些請(qǐng)求頭可能包含真實(shí)IP地址,但并不是所有的代理都會(huì)包括這些請(qǐng)求頭,而且這些IP地址可能被偽造

java根據(jù)HttpServletRequest獲取IP地址

解決辦法：

以下整理了各個(gè)代理服務(wù)器自己開(kāi)發(fā)的轉(zhuǎn)發(fā)服務(wù)請(qǐng)求頭，這些請(qǐng)求頭都不是標(biāo)準(zhǔn)的http請(qǐng)求頭，不一定所有的代理都會(huì)帶上這些請(qǐng)求頭，所以通過(guò)這方式只能盡可能的獲取到真實(shí)ip，但不能保證一定可以獲取到真實(shí)ip，而且代理服務(wù)器請(qǐng)求頭中獲取的ip是可偽造的。

參數(shù)：

X-Forwarded-For：Squid 服務(wù)代理
Proxy-Client-IP：apache 服務(wù)代理
WL-Proxy-Client-IP：weblogic 服務(wù)代理
HTTP_CLIENT_IP：有些代理服務(wù)器
X-Real-IP：nginx服務(wù)代理

方法一

public static String getIPAddress(HttpServletRequest request) {
    String ip = null;    //X-Forwarded-For：Squid 服務(wù)代理
    String ipAddresses = request.getHeader("X-Forwarded-For");
    if (ipAddresses == null || ipAddresses.length() == 0 || "unknown".equalsIgnoreCase(ipAddresses)) {        //Proxy-Client-IP：apache 服務(wù)代理
        ipAddresses = request.getHeader("Proxy-Client-IP");
    }
    if (ipAddresses == null || ipAddresses.length() == 0 || "unknown".equalsIgnoreCase(ipAddresses)) {        //WL-Proxy-Client-IP：weblogic 服務(wù)代理
        ipAddresses = request.getHeader("WL-Proxy-Client-IP");
    }
    if (ipAddresses == null || ipAddresses.length() == 0 || "unknown".equalsIgnoreCase(ipAddresses)) {        //HTTP_CLIENT_IP：有些代理服務(wù)器
        ipAddresses = request.getHeader("HTTP_CLIENT_IP");
    }
    if (ipAddresses == null || ipAddresses.length() == 0 || "unknown".equalsIgnoreCase(ipAddresses)) {        //X-Real-IP：nginx服務(wù)代理
        ipAddresses = request.getHeader("X-Real-IP");
    }    //有些網(wǎng)絡(luò)通過(guò)多層代理，那么獲取到的ip就會(huì)有多個(gè)，一般都是通過(guò)逗號(hào)（,）分割開(kāi)來(lái)，并且第一個(gè)ip為客戶端的真實(shí)IP
    if (ipAddresses != null && ipAddresses.length() != 0) {
        ip = ipAddresses.split(",")[0];
    }    //還是不能獲取到，最后再通過(guò)request.getRemoteAddr();獲取
    if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ipAddresses)) {
        ip = request.getRemoteAddr();
    }
    return ip;
}

方法二

public static String getIpAddr(HttpServletRequest request)
    {
        if (request == null)
        {
            return "unknown";
        }
        String ip = request.getHeader("x-forwarded-for");
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip))
        {
            ip = request.getHeader("Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip))
        {
            ip = request.getHeader("X-Forwarded-For");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip))
        {
            ip = request.getHeader("WL-Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip))
        {
            ip = request.getHeader("X-Real-IP");
        }

        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip))
        {
            ip = request.getRemoteAddr();
        }
        return "0:0:0:0:0:0:0:1".equals(ip) ? "127.0.0.1" : EscapeUtil.clean(ip);
    }