云原生-IP透传

七层IP透传

#实验环境

root@haproxy \~\]# vim /etc/haproxy/haproxy.cfg  \[root@haproxy \~\]# systemctl restart haproxy.service #测试环境  #在rs主机中默认是未开启透传功能的  #开启ip透传的方式  #在rs中设定采集透传IP \[root@webserver1\~\]# vim /etc/httpd/conf/httpd.conf  \[root@webserver1 \~\]# systemctl restart httpd #测试效果 \[root@webserver1 \~\]# cat /etc/httpd/logs/access_log  ### 四层IP透传 #环境设置 #在RS中把apache停止   #部署nginx webserver1   webserver2   #测环境  #启用nginx的四层访问控制 webserver1    webserver2   #测试 这里报错是正常的，出现下述报错标识nginx只支持四层访问  #设定haproxy访问4层   \[root@haproxy \~\]# systemctl restart haproxy.service #测试四层访问 #设置4层ip透传 \[root@webserver1\~\]# vim /etc/nginx/nginx.conf \[root@webserver2\~\]# vim /etc/nginx/nginx.conf  \[root@webserver1 \~\]# systemctl restart nginx.service \[root@webserver2 \~\]# systemctl restart nginx.service #测试  \[root@webserver1 \~\]# cat /var/log/nginx/access.log 192.168.0.100 - - \[26/Jan/2026:10:52:40 +0800\] "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-" 192.168.0.100 - - \[26/Jan/2026:10:53:49 +0800\] "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-" 192.168.0.100 - - \[26/Jan/2026:10:53:50 +0800\] "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-"