Get the real ip of the user

Question

I set up a pod of nginx and php on k8s, I want to get the ip of the user of the browser website, but I only get Private IP

Bobby · Accepted Answer

Hello, There has been a similar question here: https://www.digitalocean.com/community/questions/using-digitalocean-loadbalancer-how-to-get-real-ip DigitialOcean Load Balancers set the X-Forwarded-For, X-Forwarded-Proto, and X-Forwarded-Port headers to give backend nodes information about the original request. Though you’ll need to ensure that you web server or application is configured to log that. For example, if you were using Nginx, you could capture the original IP for a request by configuring a custom log_format directive and using it in your access_log directive. On Ubuntu, you would need to edit the main Nginx config located at /etc/nginx/nginx.conf Here’s a very simple example as a proof of concept: log_format from-lb 'Original IP: $http_x_forwarded_for'; access_log /var/log/nginx/access.log from-lb; Of course, you’ll likely want to log more information than that. Here’s a more detailed log format that matches the default output but replaces uses the origin IP address: log_format main '$http_x_forwarded_for - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent "$http_referer" ' '"$http_user_agent"' ; access_log /var/log/nginx/access.log main; If you’re using Nginx, you can find more details about configuring logging in this tutorial . If you aren’t, let us know what web server you’re using, and we can help more. Best, Bobby

Greg · Answer

By default, Kubernetes load balancers perform Source Network Address Translation (SNAT), which replaces the client’s IP address with the load balancer’s IP or a cluster-internal IP. This is why you’re seeing a private IP in the X-Forwarded-For header. To change it, locate your nginx ingress controller configmap with settings. Then add flags as below: apiVersion: v1 kind: ConfigMap metadata: name: nginx-configuration namespace: default data: use-forwarded-headers: "true" compute-full-forwarded-for: "true"

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

Get the real ip of the user

Related questions

How can I improve the speed of an e-commerce website?

How to optimize Nginx reverse proxy caching for media streaming apps?

How to configure Nginx reverse proxy on Ubuntu

How to fix in nginx security config

How to change existing certbot/nginx to wildcard domain?

How do I get Ruby with Hanami to serve dynamic files via Falcon?

Unable to access the URL after deploying Discourse

AstroJS project hosted on DigitalOcean droplet with Nginx – CSS loading as text/html

Setting up a reverse proxy on DigitalOcean App Platform to route main domain and subdomains

using shiny-server with nginx

Django/Nginx/Gunicorn "unknown errors" in nginx logs

Problem running multiple workers with gunicorn/nginx to deploy python/flask web app

Report this

Get the real ip of the user

Related questions

How can I improve the speed of an e-commerce website?

How to optimize Nginx reverse proxy caching for media streaming apps?

How to configure Nginx reverse proxy on Ubuntu

How to fix in nginx security config

How to change existing certbot/nginx to wildcard domain?

How do I get Ruby with Hanami to serve dynamic files via Falcon?

Unable to access the URL after deploying Discourse

AstroJS project hosted on DigitalOcean droplet with Nginx – CSS loading as text/html

Setting up a reverse proxy on DigitalOcean App Platform to route main domain and subdomains

using shiny-server with nginx

Django/Nginx/Gunicorn "unknown errors" in nginx logs

Problem running multiple workers with gunicorn/nginx to deploy python/flask web app