supersongssr / ngx_lua_waf_cf Goto Github PK

demo

-- 获取客户端IP
function getClientIp()
local headers = ngx.req.get_headers()
local clientIp = nil
-- 仅获取真实IP cloudflare:CF-Connecting-IP
-- 取消直接获取CF-Connecting-IP，当多层代理时获取的是假IP
-- clientIp = headers["CF-Connecting-IP"]
if type(headers["X-Forwarded-For"]) == "table" then
clientIp = headers["X-Forwarded-For"][1]
else
clientIp = headers["X-Forwarded-For"]
end

if clientIp == nil then
    clientIp = headers["X-Real-IP"]
end

if clientIp == nil then
    clientIp = ngx.var.remote_addr
end

if preg_match(clientIp,",") then
    local pos  = string.find(clientIp, ",", 1)
    clientIp = string.sub(clientIp,1,pos-1)
end

return clientIp

end