ingress-nginx--由ECS代理--SLB代理后获取真实IP

配置负载均衡

        location / {
            if ($remote_addr ~ "123.123.123.123" ){
                proxy_pass http://bgkpre51xpx;
            }
            if ($remote_addr ~ "123.123.123.124" ){
                proxy_pass http://bgkpre51xpxlocal-8080;
            }
            proxy_pass http://bgkpre51xpxlocal;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            root /data/xpx_shopcode/;
        }

ECS本地获取真实IP
nginx.conf

http {
    ......
    set_real_ip_from   172.0.0.0/8;
    real_ip_header     X-Forwarded-For;
    ......
}

阿里云ingress配置

kube-system配置
添加配置

use-forwarded-headers: "true"
forwarded-for-header: "X-Forwarded-For"

nginx-configuration

新增两个配置

容器中nginx配置

http {
    ......
    set_real_ip_from   172.0.0.0/8;  #172.0.0.0/8 ingress的地址范围配置
    real_ip_header     X-Forwarded-For;
    ......
}