On Wed, Apr 11, 2012 at 12:50:59AM -0400, activa wrote:
> i'm using nginx as proxy fro apache .
>
> my users ask why 90% of thier vistors has the same IP of the servers .
>
> and some php application block the server IP adresse as flood ip .
>
> [root@server4 ]# netstat -lanp | grep :8081 | awk '{print $5}' | cut -d:
> -f1 | sort | uniq -c | sort -n
> 1 0.0.0.0
> 3 127.0.0.1
> 1588 xxx.xxx.xxx.xxx (this is server ip)
>
>
> [root@server4 ]# netstat -lanp | grep :80 | awk '{print $5}' | cut -d:
> -f1 | sort | uniq -c | sort -n
> 1 94.111.122.97
> 2 150.70.172.203
> 2 197.162.58.71
> 2 41.141.1.104
> 2 41.250.191.48
> 2 41.250.200.157
> 3 0.0.0.0
> 3 196.217.214.235
> 3 41.137.75.212
> 3 41.248.144.207
> 3 41.92.15.186
> 4 41.250.91.158
> 5 196.12.254.12
> 6 37.105.108.27
> 6 41.143.100.215
> 7 41.141.169.127
> 9 197.194.27.175
> 9 67.167.101.181
> 1679 xxx.xxx.xxx.xxx (this is server ip)
>
> the RPAF configurations well done (include the ip servers) .
>
> nginx 1.1.18 config
>
> user nobody;
> # no need for more workers in the proxy mode
> worker_processes 2;
> error_log /var/log/nginx/error.log info;
> worker_rlimit_nofile 20480;
> events {
> worker_connections 5120; # increase for busier servers
> use epoll; # you should use epoll here for Linux kernels 2.6.x
> }
> http {
> server_name_in_redirect off;
> server_names_hash_max_size 10240;
> server_names_hash_bucket_size 1024;
> include mime.types;
> default_type application/octet-stream;
> server_tokens off;
> sendfile on;
> tcp_nopush on;
> tcp_nodelay on;
> keepalive_timeout 5;
> gzip on;
> gzip_vary on;
> gzip_disable "MSIE [1-6]\.";
> gzip_proxied any;
> gzip_http_version 1.1;
> gzip_min_length 1000;
> gzip_comp_level 6;
> gzip_buffers 16 8k;
> # You can remove image/png image/x-icon image/gif image/jpeg if you have
> slow CPU
> gzip_types text/plain text/xml text/css application/x-javascript
> application/xml image/png image/x-icon image/gif image/jpeg
> application/xml+rss text/javascript application/atom+xml;
> ignore_invalid_headers on;
> client_header_timeout 3m;
> client_body_timeout 3m;
> send_timeout 3m;
> reset_timedout_connection on;
> connection_pool_size 256;
> client_header_buffer_size 256k;
> large_client_header_buffers 4 256k;
> client_max_body_size 200M;
> client_body_buffer_size 128k;
> request_pool_size 32k;
> output_buffers 4 32k;
> postpone_output 1460;
> proxy_temp_path /tmp/nginx_proxy/;
> client_body_in_file_only on;
> disable_symlinks if_not_owner;
> log_format bytes_log "$msec $bytes_sent .";
> include "/etc/nginx/vhosts/*";
> }
>
>
>
> is this have relation to mod realip ?
>
> any solution to make nginx forward the proccess with the visitor ip not
> with the server ip ?

proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_set_header
http://nginx.org/en/docs/http/ngx_http_proxy_module.html#variables

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx