获取客户端的真实ip代码改进

现在系统中常用的获取客户端真实ip的代码如下:

   

// 获取IP地址

protected string GetIPAddress()

{

	string result = "";

	try

	{

		//透过代理取客户端ip

		result = HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] ?? "";

		if (result == "")

		{

			//连接主机ip

			result = HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] ?? "";

		}

		if (result == "")

		{

			result = HttpContext.Current.Request.UserHostAddress;

		}

	}

	catch (Exception ex)

	{

	}

	return result;

}

这段代码有两个问题:

1、根据这篇文章说明,当请求经常多个代理时,HTTP_X_FORWARDED_FOR可能会附加上多个服务器ip,格式如下:

X-Forwarded-For: client1, proxy1, proxy2, ...

正确的客户端ip应该只是第一个ip地址 2、当用户手机是用CMWAP访问网站时,上面代码返回的是10.xxx的私有网络ip,而真实的服务器ip是在REMOTE_ADDR中,如下图所示:

获取客户端的真实ip代码改进

所以对于获取来的ip,需要做是否私有网络ip的判断。所有私有网络的ip段如下:

private static readonly long[,] privateIpRange = {    //私有网络ip段,长整形表示

	{0,50331647},                   //{"0.0.0.0","2.255.255.255"},

	{167772160,184549375},          //{"10.0.0.0","10.255.255.255"},

	{2130706432,2147483647},        //{"127.0.0.0","127.255.255.255"},

	{2851995648,2852061183},        //{"169.254.0.0","169.254.255.255"},

	{2886729728,2887778303},        //{"172.16.0.0","172.31.255.255"},

	{3221225984,3221226239},        //{"192.0.2.0","192.0.2.255"},

	{3232235520,3232301055},        //{"192.168.0.0","192.168.255.255"},

	{4294967040,4294967295}};       //{"255.255.255.0","255.255.255.255"}

你可能感兴趣的:(客户端)