ADJ網路實驗室
打印

[介紹] 透過Apache mod_rpaf 來得知 reverse proxy server訪客的真實IP

透過Apache mod_rpaf 來得知 reverse proxy server訪客的真實IP

何謂reverse proxy?就是反向代理,網站的訪客越多越有有效果,省去90%的apache process,等於也節省了相當多的資源,若是reverse proxy再加上cache的功能,那麼網站的速度真的會大幅度提升



由於大家都只對revere proxy連線,實際存取apache的就只有reverse proxy而已,若是不透過reverse proxy,apache的log可以清楚的紀錄每一個連線的ip,但是透過了reverse proxy之後,所有瀏覽紀錄會變成只剩下一個..雖然說reverse proxy也可以留下紀錄,但是遇到有問題要比對時就相當麻煩了,所以還是希望apache可以記錄到原始的ip。

這時候可以安裝mod_rpaf的模組,來達到透過reverse proxy也可以得到真實ip的功能~~

1. Retrieve and Extract mod_rpaf packages:
引用:

# cd /usr/local/src
# wget http://stderr.net/apache/rpaf/download/mod_rpaf-0.6.tar.gz
# tar xzvf mod_rpaf-0.6.tar.gz
# cd mod_rpaf-0.6


2. Build and install mod_rpaf
引用:

# apxs -i -c -n mod_rpaf-2.0.so mod_rpaf-2.0.c


3. Add mod_rpaf to Apache configuration
引用:

# vi /etc/httpd/conf/httpd.conf

- Find the “LoadModule” list (near the top)
- Add the following lines at the bottom of the “LoadModule” list:

LoadModule rpaf_module modules/mod_rpaf-2.0.so
# mod_rpaf Configuration
RPAFenable On
RPAFsethostname On
RPAFproxy_ips 127.0.0.1 10.0.0.1
RPAFheader X-Forwarded-For


Where “127.0.0.1 10.0.0.1″ is, add your proxy server IP address(es). This will ensure that mod_rpaf checks for the X-Forwarded-For header from these hosts only.

4. Finish
Restart Apache for the changes to take effect
#service httpd restart

5. Troubleshooting

The following dependencies may need to be installed before installing mod_rpaf:

httpd-devel, gcc

They can be installed using the following commands:

引用:

#yum install httpd-devel gcc


這樣就可以囉~~






TOP

ARTERY.cn