1
xiaoz 2022-05-24 22:12:41 +08:00 via Android
为啥不直接在 nginx 中转机那一层屏蔽呢?开启 nginx stream 日志,然后配合 fail2ban 自动屏蔽高屏 IP ?
|
2
des 2022-05-24 22:25:16 +08:00
你需要用 proxy_protocol 协议或者 X-Real-IP headers 来传递客户端 IP
https://nginx.org/en/docs/http/ngx_http_proxy_module.html https://nginx.org/en/docs/http/ngx_http_realip_module.html https://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_protocol https://nginx.org/en/docs/http/ngx_http_core_module.html#listen |
3
des 2022-05-24 22:28:33 +08:00
|
4
des 2022-05-24 22:30:18 +08:00
但是有一点,屏蔽 ip 得在 nginx 里面做,不然依旧不能屏蔽
https://nginx.org/en/docs/http/ngx_http_access_module.html |