# 創(chuàng)建ASP.NET Core Web API項目
dotnet new webapi -n IpAccessDemo
cd IpAccessDemo

// Program.cs
var builder = WebApplication.CreateBuilder(args);

// 關(guān)鍵配置：允許監(jiān)聽特定IP和端口
builder.WebHost.ConfigureKestrel(options =>
{
    options.ListenAnyIP(5000); // 監(jiān)聽所有IP的5000端口
    options.ListenLocalhost(5001); // 保留localhost的5001端口
});

var app = builder.Build();

app.MapGet("/", () => "Hello from IP access!");

app.Run();

using System.Net;

public static class NetworkHelper
{
    public static string GetLocalIpAddress()
    {
        foreach (var host in Dns.GetHostEntry(Dns.GetHostName()).AddressList)
        {
            if (host.AddressFamily == System.Net.Sockets.AddressFamily.InterNetwork)
            {
                return host.ToString(); // 返回IPv4地址
            }
        }
        return "127.0.0.1";
    }
}

# 開放5000端口入站規(guī)則
New-NetFirewallRule -DisplayName "Allow 5000" -Direction Inbound -LocalPort 5000 -Protocol TCP -Action Allow

curl http://192.168.1.100:5000

# nginx.conf
events {}

http {
    server {
        listen 80;
        server_name localhost;

        location / {
            proxy_pass http://127.0.0.1:5000; # 指向本地服務(wù)
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }
}

<!-- applicationHost.config -->
<rewrite>
  <rules>
    <rule name="ReverseProxyInboundRule1" stopProcessing="true">
      <match url="(.*)" />
      <action type="Rewrite" url="http://127.0.0.1:5000/{R:1}" />
    </rule>
  </rules>
</rewrite>

app.UseForwardedHeaders(new ForwardedHeadersOptions
{
    ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto
});

// 獲取真實客戶端IP（支持反向代理）
public static class HttpContextExtensions
{
    public static string GetClientIpAddress(this HttpContext context)
    {
        var ip = context.Request.Headers["X-Forwarded-For"].FirstOrDefault();
        if (string.IsNullOrEmpty(ip))
        {
            ip = context.Connection.RemoteIpAddress?.ToString();
        }
        return ip ?? "Unknown";
    }
}

[ApiController]
[Route("[controller]")]
public class IpController : ControllerBase
{
    [HttpGet]
    public IActionResult GetIp()
    {
        var clientIp = HttpContext.GetClientIpAddress();
        return Ok(new { ClientIp = clientIp });
    }
}

// 啟用IP限流中間件（Startup.cs/Program.cs）
services.AddMemoryCache();
services.Configure<IpRateLimitOptions>(Configuration.GetSection("IpRateLimiting"));
services.AddSingleton<IIpPolicyStore, MemoryCacheIpPolicyStore>();
services.AddSingleton<IRateLimitCounterStore, MemoryCacheRateLimitCounterStore>();
services.AddSingleton<IRateLimitConfiguration, RateLimitConfiguration>();

app.UseIpRateLimiting();

{
  "IpRateLimiting": {
    "EnableEndpointRateLimiting": true,
    "GeneralRules": [
      {
        "Endpoint": "*",
        "Period": "1m",
        "Limit": 100
      }
    ]
  }
}

# Dockerfile
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
WORKDIR /app
EXPOSE 80
EXPOSE 5000

FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
WORKDIR /src
COPY ["IpAccessDemo.csproj", "./"]
RUN dotnet restore "./IpAccessDemo.csproj"
COPY . .
WORKDIR "/src/."
RUN dotnet build "IpAccessDemo.csproj" -c Release -o /app/build

FROM build AS publish
RUN dotnet publish "IpAccessDemo.csproj" -c Release -o /app/publish

FROM base AS final
WORKDIR /app
COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "IpAccessDemo.dll"]

# 構(gòu)建鏡像
docker build -t ip-access-demo .

# 運行容器并映射端口
docker run -d -p 5000:80 -p 5001:5001 --name ip-access-container ip-access-demo

builder.WebHost.ConfigureKestrel(serverOptions =>
{
    serverOptions.Limits.MaxConcurrentConnections = 10000;
    serverOptions.Limits.MaxConcurrentUpgradedConnections = 10000;
    serverOptions.Limits.MaxRequestBodySize = 10 * 1024 * 1024; // 10MB
});

// 添加請求計數(shù)中間件
app.Use(async (context, next) =>
{
    var requestCount = Interlocked.Increment(ref _requestCounter);
    Console.WriteLine($"當(dāng)前請求數(shù)量: {requestCount}");
    await next.Invoke();
});

telnet <IP>:5000

dotnet IpAccessDemo.dll --urls "http://*:5000"

// 顯式綁定到特定IP
var ipAddress = IPAddress.Parse("192.168.1.100");
options.Listen(ipAddress, 5000);