(1)XFF¤È¤Ï
¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È¤Î²áµîÌä¡ÊR1NW¸á¸å­µÌä2¡Ë¤ò¸«¤Þ¤·¤ç¤¦¡£
¡¦WAF¥µ¡¼¥Ó¥¹¤Ï¡¤¥¢¥¯¥»¥¹¤òµö²Ä¤·¤¿HTTP¥ê¥¯¥¨¥¹¥È¤ÎÁ÷¿®¸µIP¥¢¥É¥ì¥¹¤ò¡¤HTTP¥Ø¥Ã¥À¤ÎX-Forwarded-For¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¥É¡Ê°Ê²¼¡¤XFF¥Ø¥Ã¥À¤È¤¤¤¦¡Ë¤ËÄɲ乤롣
¤³¤³¤Ç¡¢HTTP¥Ø¥Ã¥À¤¬²¿¤À¤Ã¤¿¤«¤Ï¡¢»×¤¤½Ð¤·¤Æ¤¯¤À¤µ¤¤¡£°Ê²¼¤Îµ­»ö¤Î¡ÖHTTP¥ê¥¯¥¨¥¹¥È¤ä¥ì¥¹¥Ý¥ó¥¹¤Î¹½À®¡×¤Ëµ­ºÜ¤·¤Æ¤¤¤Þ¤¹¡£
http://nw.seeeko.com/archives/50915346.html

XFF¡ÊX-Forwarded-For¡Ë¤Ï¡¤HTTP¥Ø¥Ã¥À¤Î¥Õ¥£¡¼¥ë¥É¡Ê¹àÌܡˤΰì¤Ä¤Ç¤¹¡£
XFF¤Ë¤è¤ê¡¢Àܳ¸µ¡Ê¥¯¥é¥¤¥¢¥ó¥È¡Ë¤ÎIP¥¢¥É¥ì¥¹¾ðÊó¤òÄɲäǤ­¤Þ¤¹¡£¤¿¤È¤¨¤Ð¡¢³§¤µ¤ó¤Ë¤âÆëÀ÷¤ß¿¼¤¤¥×¥í¥­¥·¥µ¡¼¥Ð·Ðͳ¤Ç¥¤¥ó¥¿¡¼¥Í¥Ã¥È¤ËÀܳ¤¹¤ë¹½À®¤Ç¹Í¤¨¤Þ¤¹¡£¹½À®¿Þ¤Ï°Ê²¼¤Ç¤¹¡£
xff
192.168.1.11¤ÎPC¤«¤é¡¢Proxy¥µ¡¼¥Ð·Ðͳ¤ÇWeb¥µ¡¼¥Ð¤ËÄÌ¿®¤·¤Þ¤¹¡£
 ¤³¤Î¾ì¹ç¡¢Proxy¥µ¡¼¥Ð¤¬¡¢PC¤«¤é¤ÎHTTP¥ê¥¯¥¨¥¹¥È¤ÎXFF¥Ø¥Ã¥À¤ËPC¤ÎIP¥¢¥É¥ì¥¹¤òÄɲä·¤Þ¤¹¡£¤½¤·¤Æ¡¢Web¥µ¡¼¥Ð¤ËHTTP¥ê¥¯¥¨¥¹¥È¤òžÁ÷¤·¤Þ¤¹¡£°Ê²¼¤¬¤½¤ÎHTTP¥Ø¥Ã¥À¤ÎÎã¤Ç¤¹¡£PC¤ÎIP¥¢¥É¥ì¥¹192.168.1.11¤¬Äɵ­¤µ¤ì¤Æ¤¤¤ë¤³¤È¤¬Ê¬¤«¤ê¤Þ¤¹¡£
GET / HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: ja
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;Windows NT 5.1; SVl)
X-Forwarded-For: 192.168.1.11¡¡¢«Proxy¥µ¡¼¥Ð¤¬Äɲä·¤¿PC¤ÎIP¥¢¥É¥ì¥¹
Host: nw.seeeko.com
Connection: keep-alive

(2)XFF¤ÎÌÜŪ
LB¤äProxy¥µ¡¼¥Ð¤Ë¤Æ¡¢¤³¤Î¥Õ¥£¡¼¥ë¥É¤Ë¡¢Àܳ¸µ¡Ê¥¯¥é¥¤¥¢¥ó¥È¡Ë¤ÎIP¥¢¥É¥ì¥¹¾ðÊó¤òÄɵ­¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£
Äɵ­¤¹¤ë¤«¤ÏÀßÄ꼡Âè¤Ê¤Î¤Ç¡¢¤¿¤È¤¨¤ÐProxy¥µ¡¼¥Ð¤Îsquid¤Ç¤¢¤ì¤Ð¡¢forwarded_for on¡¡¤ÈÀßÄꤷ¤Þ¤¹¡£¤â¤Á¤í¤óOFF¤Ë¤·¤ÆIP¥¢¥É¥ì¥¹¤òÄɵ­¤·¤Ê¤¤¤³¤È¤â²Äǽ¤Ç¤¹¡£
 
¤³¤ÎÅÀ¤Ï¡¢²áµîÌä¡ÊH24SC¸á¸å­µÌä4¡Ë¤Ë¤Æ¡¢LB¤Îµ¡Ç½¤È¤·¤Æ¡Ö¤Þ¤¿¡¤HTTP¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¥É¤È¤·¤ÆX-Forwarded-For¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¥É¤òÄɲòÄǽ¤Ç¤¢¤ë¤¬¡¤¸½ºß¤ÏÍøÍѤ·¤Æ¤¤¤Ê¤¤¡×¤È¤¢¤ê¤Þ¤¹¡£
°ìÈÌŪ¤Ë¤Ï¤É¤Ã¤Á¤¬Â¿¤¤¤È»×¤¤¤Þ¤¹¤«¡©
¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È¤òÌܻؤ¹½÷À­SE¤¢¤ì¡©

¥í¥°¤ò¼è¤ë¤¿¤á¤Ë¤ÏON¤Ç¤¹¤«¡©
´ë¶È¦¤Ï¼è¤é¤ì¤¿¤¯¤Ê¤¤¤Ç¤¹¤è¤Í¡£¼ÒÆâ¾ðÊó¤¬Ï³¤¨¤¤¤·¤Þ¤¹¤«¤é¡£Ä̾ï¤Ï¡¤PC¤ÎIP¥¢¥É¥ì¥¹¤ò¸«¤»¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤¿¤á¡¤OFF¤Ë¤¹¤ë¤³¤È¤¬Â¿¤¤¤Ç¤¹¡£

²áµî¤Ë¡¢X-Forwarded-For¤Ë´Ø¤¹¤ë½ÐÂ꤬²¿ÅÙ¤«¤µ¤ì¤Æ¤¤¤Þ¤¹¡£
LB¤Ë¸Â¤é¤ºProxy¥µ¡¼¥Ð¤Ç¤â¤½¤¦¤Ç¤¢¤ë¤¬¡¢IP¥¢¥É¥ì¥¹¤¬ÊÑ´¹¤µ¤ì¤ë¾ì¹ç¤¬¤¢¤ë¡£¤¿¤È¤¨¤Ð¡¢Proxy¥µ¡¼¥Ð¤«¤é¤ÎÄÌ¿®¤Ç¤¢¤ì¤Ð¡¢Á÷¿®¸µIP¥¢¥É¥ì¥¹¤ÏÁ´¤ÆProxy¤Ë¤Ê¤ê¡¢¼ÂºÝ¤ËÄÌ¿®¤¹¤ëüËö¤ÎIP¥¢¥É¥ì¥¹¤Ïʬ¤«¤é¤Ê¤¤¡£LB¤âLB¤Ë¤Æ¿¶¤êʬ¤±¤¿¾ì¹ç¤Ë¡¢Á÷¿®¸µIP¥¢¥É¥ì¥¹¤òLB¤Ë¤·¤Æ¤·¤Þ¤¦¤È¡¢¥µ¡¼¥Ð¤Ë¤Ï¤¹¤Ù¤ÆLB¤«¤é¤ÎÄÌ¿®¤Ë¸«¤¨¤ë¡£
¤½¤³¤Ç¡¢HTTP¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¤É¤Ë¡¢X-Forwarded-For¤È¤·¤Æ¡¢IP¥¢¥É¥ì¥¹ÊÑ´¹¤ò¤¹¤ëÁ°¤ÎüËö¤ÎIP¥¢¥É¥ì¥¹¤ò¥»¥Ã¥È¤¹¤ë¤Î¤Ç¤¢¤ë¡£

(3)²áµîÌä¤ò¤ß¤Æ¤ß¤Þ¤·¤ç¤¦¡£
²áµîÌä¡ÊH28SC½©¸á¸å£±Ì䣳¡Ë¤ò¸«¤Æ¤ß¤Þ¤·¤ç¤¦¡£¤â¤È¤â¤È¤Ï¿ÃÊ¥×¥í¥­¥·¤ÎÌäÂê¤À¤Ã¤¿¤Î¤Ç¤¹¤¬¡¢¤ï¤«¤ê¤Ë¤¯¤¤¤Î¤Ç»ä¤Ë¤ÆÊѹ¹¤·¤Æ¤¢¤ê¤Þ¤¹¡£
¤¢¤ë´ë¶È¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ï¡¢¥×¥í¥­¥·¥µ¡¼¥Ð¤ò·Ðͳ¤·¡¢FW¤«¤é¥¤¥ó¥¿¡¼¥Í¥Ã¥È¤Ë¥¢¥¯¥»¥¹¤·¤Þ¤¹¡£¤·¤«¤·¡¢­¡FW¤ÎÄÌ¿®¥í¥°¤À¤±¤Ç¤ÏÁ÷¿®¸µPC¤¬ÆÃÄê¤Ç¤­¤Ê¤¤¡£
¤½¤³¤Ç¡¢¥×¥í¥­¥·¤Ç¤Ï¡¢HTTP¥Ø¥Ã¥À¤È¤·¤Æ[¡¡d¡¡]¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¥É¤òÄɲ乤ë¤è¤¦¤ËÀßÄꤷ¡¢FW¤Ç¤Ï¡¢[¡¡d¡¡]¥Ø¥Ã¥À¥Õ¥£¡¼¥ë¥É¤ò¥í¥°¤Ë½ÐÎϤ¹¤ë¤è¤¦¤ËÀßÄꤷ¤¿¡£

ÀßÌä(1)¡¡ËÜÊ¸Ãæ¤Î²¼Àþ­¡¤Ë¤Ä¤¤¤Æ¡¢FW¤Î¥í¥°¤À¤±¤Ç¤ÏÁ÷¿®¸µPC¤¬ÆÃÄê¤Ç¤­¤Ê¤¤Íýͳ¤ò¡¢30»ú°ÊÆâ¤Ç½Ò¤Ù¤è¡£
(2)ËÜÊ¸Ãæ¤Î[¡¡d¡¡]¤ËÆþ¤ëŬÀڤʻú¶ç¤òÅú¤¨¤è¡£
(1)Á÷¿®¸µIP¥¢¥É¥ì¥¹¤¬¥×¥í¥­¥·¤ÎIP¥¢¥É¥ì¥¹¤È¤Ê¤ë¤Î¤Ç(2)X-Forwarded-For

¼ÂºÝ¤ËSquid¤Ë¤è¤ë¥×¥í¥­¥·¥µ¡¼¥Ð¤ò»È¤Ã¤ÆXFF¤òÀßÄꤷ¤¿ÍͻҤϰʲ¼¤Ç¤¹¡£
http://sm.seeeko.com/archives/21495764.html

¥¹¥Ý¥ó¥µ¡¼¥É¥ê¥ó¥¯