1

I can't find out customer real IP address when apache-php enviroment runs in google container. Without modifying anything, I get ip address from container address range, when using mod_remoteip, I can add

RemoteIPHeader X-Client-IP
RemoteIPInternalProxyList ournet/proxy-list

and add rows into "proxy-list"-file:

10.240.0.0/16 # google internal network
10.244.0.0/14 # Cluster aadress range

Only the row 10.244.0.0/14 gives any result. In this case I get the cluster node's ip as REMOTE_ADDR value from the 10.240.0.0/16 network.

It seems, that the node itself acts as forwarder, without adding needed headers to the request or I am looking it from totally wrong perspective?

4

1 回答 1

1

一些流量被伪装了，但它是在 L3 而不是 L7 完成的，因此无法添加标头。:(

对于集群内流量，这将很快变得更好，但我们必须等待云负载均衡器赶上来，然后才能正确处理集群外流量。

于 2015-09-18T21:45:22.500 回答