云原生-IP透传

七层IP透传

#实验环境

root@haproxy \~# vim /etc/haproxy/haproxy.cfg

root@haproxy \~# systemctl restart haproxy.service

#测试环境

#在rs主机中默认是未开启透传功能的

#开启ip透传的方式

#在rs中设定采集透传IP

root@webserver1\~# vim /etc/httpd/conf/httpd.conf

root@webserver1 \~# systemctl restart httpd

#测试效果

root@webserver1 \~# cat /etc/httpd/logs/access_log

四层IP透传

#环境设置

#在RS中把apache停止

#部署nginx

webserver1

webserver2

#测环境

#启用nginx的四层访问控制

webserver1

webserver2

#测试

这里报错是正常的，出现下述报错标识nginx只支持四层访问

#设定haproxy访问4层

root@haproxy \~# systemctl restart haproxy.service

#测试四层访问

#设置4层ip透传

root@webserver1\~# vim /etc/nginx/nginx.conf

root@webserver2\~# vim /etc/nginx/nginx.conf

root@webserver1 \~# systemctl restart nginx.service

root@webserver2 \~# systemctl restart nginx.service

#测试

root@webserver1 \~# cat /var/log/nginx/access.log

192.168.0.100 - - 26/Jan/2026:10:52:40 +0800 "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-"

192.168.0.100 - - 26/Jan/2026:10:53:49 +0800 "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-"

192.168.0.100 - - 26/Jan/2026:10:53:50 +0800 "GET / HTTP/1.1" "172.25.254.1"200 19 "-" "curl/7.65.0" "-"