带有CDN的Tomcat RemoteIpValve配置

Question

我在IIS 8后面配置了tomcat 8

主机已启用了远程IPVALVE为

<Valve className="org.apache.catalina.valves.RemoteIpValve"         
        remoteIpHeader="x-forwarded-for" 
        proxiesHeader="x-forwarded-by" 
        protocolHeader="x-forwarded-proto"/>

日志显示为

org.apache.catalina.valves.RemoteIpValve.invoke Incoming request /api/service/dealer/getStates with originalRemoteAddr '127.0.0.1', originalRemoteHost='127.0.0.1', originalSecure='false', originalScheme='http' will be seen as newRemoteAddr='121.244.190.83', newRemoteHost='121.244.190.83', newScheme='http', newSecure='false'

访问日志配置

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="web.hyundai.co.in_access_log" suffix=".txt"
               pattern="x-forwarded-for : %{x-forwarded-for}i %h %t &quot;%r&quot; %s %b"/>

和访问日志

x-forwarded-for : 121.243.37.18, 121.244.190.83 127.0.0.1 [01/Mar/2017:09:02:52 +0530] "GET /api/service/dealer/getStates HTTP/1.1" 200 436

现在，tomcat没有选择实际客户端IP 121.243.37.18而不是选择CDN服务器IP。我无法将CDN服务器IP添加为代理，因为，会有许多CDN Edge服务器。如何配置tomcat以获取正确的远程IP地址

Answer 1

CDN是否提供" X-Real-IP"标头？X-Forward-For可以是IPS，其中通过一个以上的代理。