update apisix_conf

apisix-stack/apisix_conf/config.yaml

@@ -20,9 +20,17 @@ deployment:
 nginx_config:
   http_configuration_snippet: |
     lua_shared_dict oauth_cache 1m;
+    map $http_cf_connecting_ip $client_ip_from_cf_or_xff {
+      default $http_cf_connecting_ip;
+      "" $http_x_forwarded_for;
+    }
+    map $client_ip_from_cf_or_xff $client_real_ip {
+      default $client_ip_from_cf_or_xff;
+      "" $remote_addr;
+    }
   http:
     access_log: "/dev/stdout"
-    access_log_format: '{"time_local":"$time_local","client_ip":"$remote_addr","request":"$request","status":$status,"body_bytes_sent":$body_bytes_sent,"request_time":$request_time,"upstream_response_time":"$upstream_response_time"}'
+    access_log_format: '{"time_local":"$time_local","client_ip":"$client_real_ip","request":"$request","status":$status,"body_bytes_sent":$body_bytes_sent,"request_time":$request_time,"upstream_response_time":"$upstream_response_time"}'
     access_log_format_escape: json
     error_log: "/dev/stderr"
     error_log_level: "warn"

apisix-stack/apisix_conf/route_create.sh

@@ -102,6 +102,16 @@ cat > "$PAYLOAD_FILE" <<EOF
   "name": "${ROUTE_ID_JSON}",
   "plugins": {
     "key-auth": {},
+    "real-ip": {
+      "source": "client_real_ip",
+      "trusted_addresses": [
+        "127.0.0.1",
+        "10.0.0.0/8",
+        "172.16.0.0/12",
+        "192.168.0.0/16"
+      ],
+      "recursive": true
+    },
     "proxy-rewrite": {
       "regex_uri": [
         "${REWRITE_REGEX_JSON}",