[GH-ISSUE #4693] [Feature Request] 使用nginx反向代理frps时，客户端使用proxy protocol无法获取真实ip的问题

gitea-mirror commented

2026-05-05 14:22:37 -06:00

Owner

Originally created by @1332881954 on GitHub (Mar 4, 2025).
Original GitHub issue: https://github.com/fatedier/frp/issues/4693

Describe the feature request

流量路径：浏览器->云服务器nginx（port 80）->frps (vhostHTTPPort 7080)->frpc->内网nginx

问题描述：公网服务器上nginx监听80端口，nginx反向代理frps的7080端口，frpc上开启proxy_protocol_v2，访问时，内网nginx服务器$proxy_protocol_addr获取到的ip总是为127.0.0.1

配置文件：
公网nginx:

server {
    listen 80;
    listen [::]:80;
    server_name _;
    # root /var/www/;
    # index index.html index.htm index.php;
    port_in_redirect off;
    location / {
        proxy_pass http://127.0.0.1:7080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

frps:

bindAddr = "0.0.0.0"
bindPort = 7070

auth.method = "token"
auth.token = "xxx"

transport.tls.force = true

vhostHTTPPort = 7080
vhostHTTPSPort = 7443

log.to = "/var/log/frp/frps.log"
log.level = "info"
log.maxDays = 7

frpc:

[[proxies]]
name = "test"
type = "http"
localIP = "172.16.64.156"
localPort = 80
transport.useEncryption = true
transport.useCompression = true
customDomains = ["test.xxx.com"]
transport.proxyProtocolVersion = "v2"

内网nginx：

    server {
        listen 80 proxy_protocol;
        server_name _;
        location /{
                add_header X-Proxy-Protocol-IP $proxy_protocol_addr;
               (省略)
        }

Describe alternatives you've considered

个人猜测问题的原因在于真正请求frps的是本机上的nginx（80端口反向代理7080），因此frps认为用户ip为127.0.0.1，修改云服务器nginx的proxy_pass一行（例如[::1]，云服务器内网ip 10.78.xx.xx等），发现内网nginx获取到的proxy_protocol的ip也会随之改变。
这种设计其实本身没有问题，但是我想问一下有没有一种方法可以将客户端的ip传递过去，例如在反向代理的时候增加一项配置（或者直接读取X-Real-IP），可以额外将客户端的ip发送给frps，frps使用此地址作为proxy protocol的source ip，而不是实际请求frps的ip。搜索了相关issue，没有找到一个很好的解决方案，thanks！

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @1332881954 on GitHub (Mar 4, 2025). Original GitHub issue: https://github.com/fatedier/frp/issues/4693 ### Describe the feature request 流量路径：浏览器->云服务器nginx（port 80）->frps (vhostHTTPPort 7080)->frpc->内网nginx 问题描述：公网服务器上nginx监听80端口，nginx反向代理frps的7080端口，frpc上开启proxy_protocol_v2，访问时，内网nginx服务器$proxy_protocol_addr获取到的ip总是为127.0.0.1 配置文件：公网nginx: ``` server { listen 80; listen [::]:80; server_name _; # root /var/www/; # index index.html index.htm index.php; port_in_redirect off; location / { proxy_pass http://127.0.0.1:7080; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } ``` frps: ``` bindAddr = "0.0.0.0" bindPort = 7070 auth.method = "token" auth.token = "xxx" transport.tls.force = true vhostHTTPPort = 7080 vhostHTTPSPort = 7443 log.to = "/var/log/frp/frps.log" log.level = "info" log.maxDays = 7 ``` frpc: ``` [[proxies]] name = "test" type = "http" localIP = "172.16.64.156" localPort = 80 transport.useEncryption = true transport.useCompression = true customDomains = ["test.xxx.com"] transport.proxyProtocolVersion = "v2" ``` 内网nginx： ``` server { listen 80 proxy_protocol; server_name _; location /{ add_header X-Proxy-Protocol-IP $proxy_protocol_addr; (省略) } ``` ### Describe alternatives you've considered 个人猜测问题的原因在于真正请求frps的是本机上的nginx（80端口反向代理7080），因此frps认为用户ip为127.0.0.1，修改云服务器nginx的proxy_pass一行（例如[::1]，云服务器内网ip 10.78.xx.xx等），发现内网nginx获取到的proxy_protocol的ip也会随之改变。这种设计其实本身没有问题，但是我想问一下有没有一种方法可以将客户端的ip传递过去，例如在反向代理的时候增加一项配置（或者直接读取X-Real-IP），可以额外将客户端的ip发送给frps，frps使用此地址作为proxy protocol的source ip，而不是实际请求frps的ip。搜索了相关issue，没有找到一个很好的解决方案，thanks！ ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [x] Security - [x] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [ ] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror closed this issue

2026-05-05 14:22:38 -06:00

gitea-mirror commented

2026-05-05 14:22:40 -06:00

Author

Owner

@xqzr commented on GitHub (Mar 4, 2025):

使用 X-Forwarded-For
https://gofrp.org/zh-cn/docs/features/common/realip/
Nginx http 模块 proxy_pass 不支持 Proxy Protocol

@xqzr commented on GitHub (Mar 4, 2025): 使用 `X-Forwarded-For` https://gofrp.org/zh-cn/docs/features/common/realip/ Nginx http 模块 `proxy_pass` 不支持 Proxy Protocol