# ? 錯(cuò)誤：'IP' 不是Django的標(biāo)準(zhǔn)META key
ip = request.META['IP']  # KeyError!

# ? 錯(cuò)誤：只用REMOTE_ADDR，代理時(shí)會(huì)出錯(cuò)
ip = request.META['REMOTE_ADDR']  # 代理時(shí)返回127.0.0.1

HTTP_X_FORWARDED_FOR > HTTP_X_REAL_IP > REMOTE_ADDR

def get_client_ip(request):
    """
    獲取客戶端真實(shí)IP（支持直連、代理、CDN）
    
    Args:
        request: Django的HttpRequest對(duì)象
    
    Returns:
        str: 客戶端真實(shí)IP
    """
    # 1. 優(yōu)先從 HTTP_X_FORWARDED_FOR 獲?。ù韨鬟f的真實(shí)IP）
    x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
    if x_forwarded_for:
        # 可能有多個(gè)IP（如：client, proxy1, proxy2），取第一個(gè)
        ip = x_forwarded_for.split(',')[0].strip()
    else:
        # 2. 沒有代理，直接用 REMOTE_ADDR
        ip = request.META.get('REMOTE_ADDR', '127.0.0.1')
    
    # 3. 過濾內(nèi)網(wǎng)IP（可選，防止偽造）
    if ip.startswith('127.') or ip.startswith('192.168.'):
        return '0.0.0.0'
    
    return ip

def my_view(request):
    ip = get_client_ip(request)
    print(f"客戶端IP: {ip}")  # 輸出：123.45.67.89
    return JsonResponse({'ip': ip})

def get_client_ip(request):
    """
    獲取客戶端真實(shí)IP（防偽造、支持多層代理）
    """
    # 嘗試多個(gè)可能的IP來源（按優(yōu)先級(jí)排序）
    ip_keys = [
        'HTTP_X_FORWARDED_FOR',
        'HTTP_X_REAL_IP',
        'HTTP_CLIENT_IP',
        'REMOTE_ADDR',
    ]
    
    for key in ip_keys:
        ip = request.META.get(key)
        if ip:
            # HTTP_X_FORWARDED_FOR 可能有多個(gè)IP，取第一個(gè)
            if key == 'HTTP_X_FORWARDED_FOR':
                ip = ip.split(',')[0].strip()
            
            # 過濾內(nèi)網(wǎng)IP和無效IP
            if ip and not ip.startswith(('127.', '192.168.', '0.')):
                return ip
    
    return '0.0.0.0'

# middleware.py
class ClientIPMiddleware:
    """
    中間件：自動(dòng)在request對(duì)象上添加client_ip屬性
    """
    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        # 獲取真實(shí)IP
        x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
        if x_forwarded_for:
            request.client_ip = x_forwarded_for.split(',')[0].strip()
        else:
            request.client_ip = request.META.get('REMOTE_ADDR', '127.0.0.1')
        
        response = self.get_response(request)
        return response

MIDDLEWARE = [
    # ... 其他中間件
    'myapp.middleware.ClientIPMiddleware',  # ? 添加這行
]

def my_view(request):
    ip = request.client_ip  # ? 直接用，超方便！
    print(f"客戶端IP: {ip}")
    return JsonResponse({'ip': ip})

server {
    listen 80;
    server_name example.com;
    location / {
        proxy_pass http://127.0.0.1:8000;
        # ??? 關(guān)鍵：傳遞真實(shí)IP ???
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# ? 現(xiàn)在REMOTE_ADDR就是真實(shí)IP了
ip = request.META.get('REMOTE_ADDR')

# 惡意請(qǐng)求（偽造IP）
curl -H "X-Forwarded-For: 8.8.8.8" http://your-server.com

# 取第一個(gè)（最左邊的是真實(shí)IP）
ip = request.META.get('HTTP_X_FORWARDED_FOR').split(',')[0].strip()

# IPv6地址示例：2001:0db8:85a3::8a2e:0370:7334
# 同樣適用上述方法
ip = get_client_ip(request)  # 支持IPv4和IPv6

# utils.py
class IPUtils:
    @staticmethod
    def get_client_ip(request):
        """獲取客戶端真實(shí)IP（防偽造、支持代理）"""
        for key in ['HTTP_X_FORWARDED_FOR', 'HTTP_X_REAL_IP', 'HTTP_CLIENT_IP', 'REMOTE_ADDR']:
            ip = request.META.get(key)
            if ip:
                if key == 'HTTP_X_FORWARDED_FOR':
                    ip = ip.split(',')[0].strip()
                if ip and not ip.startswith(('127.', '192.168.', '0.')):
                    return ip
        return '0.0.0.0'

# 使用
from myapp.utils import IPUtils
ip = IPUtils.get_client_ip(request)

# ? 最簡(jiǎn)單：復(fù)制這個(gè)函數(shù)就夠了
def get_client_ip(request):
    x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
    if x_forwarded_for:
        return x_forwarded_for.split(',')[0].strip()
    return request.META.get('REMOTE_ADDR', '127.0.0.1')

# 使用
ip = get_client_ip(request)