如何在Django中获取用户IP地址?

def get_client_ip(request):
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
if x_forwarded_for:
ip = x_forwarded_for.split(',')[0]
else:
ip = request.META.get('REMOTE_ADDR')
return ip

确保你已经正确配置了反向代理(如果有的话)(例如为Apache安装mod_rpaf)。

注意:上面使用了X-Forwarded-For中的第一个项，但你可能想使用最后的项(例如，在Heroku: 在Heroku上获取客户端的真实IP地址的情况下)。

然后把请求作为参数传递给它;

get_client_ip(request)

Django HttpRequest文档。元< / >

最简单的解决方案(如果你正在使用fastcgi+nignx)是itgorilla评论的:

谢谢你这个好问题。我的fastcgi没有传递REMOTE_ADDR元键。我在nginx.conf中添加了下面的行，并修复了这个问题: - itgorilla

Ps:我添加这个答案只是为了让他的解决方案更明显。

Alexander的回答很好，但是缺少对代理的处理，代理有时会在HTTP_X_FORWARDED_FOR报头中返回多个IP。

真实IP通常在列表的末尾，如这里解释的:http://en.wikipedia.org/wiki/X-Forwarded-For

解决方案是对Alexander的代码进行简单的修改:

def get_client_ip(request):
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
if x_forwarded_for:
ip = x_forwarded_for.split(',')[-1].strip()
else:
ip = request.META.get('REMOTE_ADDR')
return ip

我想对yanchenko的回答提出一个改进。

而不是在X_FORWARDED_FOR列表中取第一个ip，我取第一个不知道内部ip，因为一些路由器不尊重协议，你可以看到内部ip作为列表的第一个值。

PRIVATE_IPS_PREFIX = ('10.', '172.', '192.', )


def get_client_ip(request):
"""get the client ip from the request
"""
remote_address = request.META.get('REMOTE_ADDR')
# set the default value of the ip to be the REMOTE_ADDR if available
# else None
ip = remote_address
# try to get the first non-proxy ip (not a private ip) from the
# HTTP_X_FORWARDED_FOR
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
if x_forwarded_for:
proxies = x_forwarded_for.split(',')
# remove the private ips from the beginning
while (len(proxies) > 0 and
proxies[0].startswith(PRIVATE_IPS_PREFIX)):
proxies.pop(0)
# take the first ip which is not a private one (of a proxy)
if len(proxies) > 0:
ip = proxies[0]


return ip

我希望这能帮助那些有同样问题的谷歌同事。

你可以使用django-ipware，它支持Python 2 &3.和处理IPv4 &IPv6。

安装:

pip install django-ipware

简单的用法:

# In a view or a middleware where the `request` object is available


from ipware import get_client_ip
ip, is_routable = get_client_ip(request)
if ip is None:
# Unable to get the client's IP address
else:
# We got the client's IP address
if is_routable:
# The client's IP address is publicly routable on the Internet
else:
# The client's IP address is private


# Order of precedence is (Public, Private, Loopback, None)

先进的用法:

• ipware查看的自定义请求头:

  i, r = get_client_ip(request, request_header_order=['X_FORWARDED_FOR'])
  i, r = get_client_ip(request, request_header_order=['X_FORWARDED_FOR', 'REMOTE_ADDR'])
  

• Proxy Count - Django server is behind a fixed number of proxies:

  i, r = get_client_ip(request, proxy_count=1)
  

• Trusted Proxies - Django server is behind one or more known & trusted proxies:

  i, r = get_client_ip(request, proxy_trusted_ips=('177.2.2.2'))
  
  
  # For multiple proxies, simply add them to the list
  i, r = get_client_ip(request, proxy_trusted_ips=('177.2.2.2', '177.3.3.3'))
  
  
  # For proxies with fixed sub-domain and dynamic IP addresses, use partial pattern
  i, r = get_client_ip(request, proxy_trusted_ips=('177.2.', '177.3.'))
  

Note: read this notice.

在我的情况下，上面没有一个工作，所以我必须检查uwsgi + django源代码，并在nginx中传递静态参数，看看为什么/如何，下面是我发现的。

Django配置信息:

USE_X_FORWARDED_HOST = True # with or without this line does not matter

nginx配置:

uwsgi_param      X-Real-IP              $remote_addr;
// uwsgi_param   X-Forwarded-For        $proxy_add_x_forwarded_for;
// uwsgi_param   HTTP_X_FORWARDED_FOR   $proxy_add_x_forwarded_for;


// hardcode for testing
uwsgi_param      X-Forwarded-For        "10.10.10.10";
uwsgi_param      HTTP_X_FORWARDED_FOR   "20.20.20.20";

获取django应用程序中的所有参数:

X-Forwarded-For :       10.10.10.10
HTTP_X_FORWARDED_FOR :  20.20.20.20

结论:

所以基本上，你必须在nginx中指定完全相同的字段名/参数名，并在django app中使用request.META[field/param]。

现在你可以决定是添加一个中间件(拦截器)，还是在某些视图中解析HTTP_X_FORWARDED_FOR。

最初从Django中删除该功能的原因是头文件最终不能被信任。原因是它很容易被恶搞。例如，配置Nginx反向代理的推荐方法是:

add_header X-Forwarded-For $proxy_add_x_forwarded_for;
add_header X-Real-Ip       $remote_addr;

当你这样做时:

curl -H 'X-Forwarded-For: 8.8.8.8, 192.168.1.2' http://192.168.1.3/

你在myhost.example中的Nginx将发送:

X-Forwarded-For: 8.8.8.8, 192.168.1.2, 192.168.1.3

X-Real-IP将是前面第一个代理的IP，如果你盲目地遵循指示。

如果信任你的用户是一个问题，你可以尝试像django-xff: https://pypi.python.org/pypi/django-xff/这样的东西

我在上面的回答中也缺少了代理。我使用了django_easy_timezones中的get_ip_address_from_request。

from easy_timezones.utils import get_ip_address_from_request, is_valid_ip, is_local_ip
ip = get_ip_address_from_request(request)
try:
if is_valid_ip(ip):
geoip_record = IpRange.objects.by_ip(ip)
except IpRange.DoesNotExist:
return None

下面是方法get_ip_address_from_request, IPv4和IPv6就绪:

def get_ip_address_from_request(request):
""" Makes the best attempt to get the client's real IP or return the loopback """
PRIVATE_IPS_PREFIX = ('10.', '172.', '192.', '127.')
ip_address = ''
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR', '')
if x_forwarded_for and ',' not in x_forwarded_for:
if not x_forwarded_for.startswith(PRIVATE_IPS_PREFIX) and is_valid_ip(x_forwarded_for):
ip_address = x_forwarded_for.strip()
else:
ips = [ip.strip() for ip in x_forwarded_for.split(',')]
for ip in ips:
if ip.startswith(PRIVATE_IPS_PREFIX):
continue
elif not is_valid_ip(ip):
continue
else:
ip_address = ip
break
if not ip_address:
x_real_ip = request.META.get('HTTP_X_REAL_IP', '')
if x_real_ip:
if not x_real_ip.startswith(PRIVATE_IPS_PREFIX) and is_valid_ip(x_real_ip):
ip_address = x_real_ip.strip()
if not ip_address:
remote_addr = request.META.get('REMOTE_ADDR', '')
if remote_addr:
if not remote_addr.startswith(PRIVATE_IPS_PREFIX) and is_valid_ip(remote_addr):
ip_address = remote_addr.strip()
if not ip_address:
ip_address = '127.0.0.1'
return ip_address

下面是一个简短的一行代码来完成这个任务:

request.META.get('HTTP_X_FORWARDED_FOR', request.META.get('REMOTE_ADDR', '')).split(',')[0].strip()

sock=request._stream.stream.raw._sock
#<socket.socket fd=1236, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=0, laddr=('192.168.1.111', 8000), raddr=('192.168.1.111', 64725)>
client_ip,port=sock.getpeername()

如果你调用以上代码两次，你可能会得到

AttributeError(“_io。BytesIO的对象没有属性“stream”

AttributeError("'LimitedStream'对象没有'raw'属性")

request.META.get("REMOTE_ADDR")

有关更多信息，请检查Django文档

简单的添加

\{\{ request.META.REMOTE_ADDR }}

在Django-Template中，你想让用户看到他们的IP地址。这是在您不感兴趣将其保存到DB的情况下。

在获得ip地址后，您需要找到位置

# pip install geocoder


import geocoder


def get_client_ip(request):
x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
if x_forwarded_for:
ip = x_forwarded_for.split(',')[0]
ip_location = geocoder.ip(f"{ip}")
ip_location = geocoder.ip("me")
print(ip_location.city)
# you can get city such as "New York"
else:
ip = request.META.get('REMOTE_ADDR')
return ip