我正在使用谷歌云(HTTPS)负载均衡器后面的nginx进行反向代理,因此我添加了X-Forwarded-For标头,以便后端可以提取客户端(浏览器)IP.

今天早上我注意到日志中有一个10.x.x.x的IP,这怎么可能？

最佳答案
日志记录如何解释包含多个IP地址的标头？如果它采用第一个IP地址而不是正确的IP地址,这可能是由某人转发代理而不是您的反向代理添加的地址.

标题及其内容记录在GCP Setting Up HTTP(S) Load Balancing文章中：

X-Forwarded-For: forwarding rule external IP>, (requests
only)

A comma-separated list of IP addresses appended by the intermediaries
the request traveled through. If you are running proxies inside GCP
that append data to the X-Forwarded-For header,then your software
must take into account the existence and number of those proxies. Only
the and
entries are provided by the load balancer. All other entries in the
list are passed along without verification.