Servlet中过滤器：放行指定IP
前言：
在一些业务需求中有的是只能当前主机登录熊系统，或者说是当前的网段内用户可以访问，这时候就需要用到了servlet中的过滤器了。
放行指定IP：
1、编写过滤器：
package com.mixky.app.bjcc.filter;
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;
import java.io.PrintWriter;
import java.io.UnsupportedEncodingException;
/**
* @author zhangzhixi
* @version 1.0
* @date 2021-8-16 16:38
*/
public class NoteFilter implements Filter {
private FilterConfig config = null;
//ip白名单
private String ipTable = null;
@Override
public void init(FilterConfig filterConfig) throws ServletException {
System.out.println("note filter initial");
this.config = filterConfig;
/*获取白名单*/
this.ipTable = config.getInitParameter("ipTable");
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
System.out.println("do filter starting");
/*校验ip地址：不是白名单就直接结束*/
if (!verifyIP(request, response)) {
return;
}
long befor = System.currentTimeMillis();
config.getServletContext().log("before call note Filter");
chain.doFilter(request, response);
config.getServletContext().log("after call note Filter");
long after = System.currentTimeMillis();
String name = "";
if (request instanceof HttpServletRequest) {
name = ((HttpServletRequest) request).getRequestURI();
}
config.getServletContext().log("Note Filter : name:" + name + " time :" + (after - befor) + "ms");
}
@Override
public void destroy() {
}
/**
* 验证IP
*
* @param request 请求
* @param response 响应
* @return 校验结果
*/
private boolean verifyIP(ServletRequest request, ServletResponse response) {
/*获取本机IP地址*/
String ip = request.getLocalAddr();
/*windows下本机测试*/
if ("0:0:0:0:0:0:0:1".equals(ip)) {
ip = "127.0.0.1";
System.out.println("请求ip:" + ip);
}
System.out.println("本机IP是：" + ip);
System.out.println("ipTable白名单:" + ipTable);
/*是白名单用户*/
if (ipTable.equals(ip)) {
return true;
} else {
System.out.println("校验不通过");
/*设置编码*/
try {
request.setCharacterEncoding("UTF-8");
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = null;
try {
out = response.getWriter();
out.print("<h1>对不起，你的ip不能访问服务器</h1>");
out.flush();
out.close();
} catch (IOException e) {
e.printStackTrace();
}
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
}
return false;
}
}
}
2、编写web.xml配置文件：
<!--IP过滤--> <filter> <filter-name>ip</filter-name> <filter-class>com.mixky.app.bjcc.filter.NoteFilter</filter-class> <init-param> <param-name>ipTable</param-name> <!--设置的白名单IP--> <param-value>127.0.0.1</param-value> </init-param> </filter> <filter-mapping> <filter-name>ip</filter-name> <!--过滤所有请求--> <url-pattern>/*</url-pattern> </filter-mapping>
放行指定IP以及相应的网段：
说明：
在上一个的基础上增加了可以过滤掉不是当前局域网的IP，使他们不能够访问系统
并且加入了配置文件，可以在配置文件中手动更改设置白名单IP
1、编写过滤器：
package com.mixky.app.bjcc.filter;
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.*;
import java.util.Arrays;
import java.util.Properties;
/**
* @author zhangzhixi
* @version 1.0
* @date 2021-8-16 16:38
*/
public class IPFilter implements Filter {
private FilterConfig config;
@Override
public void init(FilterConfig config) throws ServletException {
this.config = config;
}
@Override
public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2) throws IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) arg0;
HttpServletResponse response = (HttpServletResponse) arg1;
/*1、获得不过滤的IP段：192.168.31*/
String noFilterIp = config.getInitParameter("FilteredIP");
/*2、获取本机的IP地址*/
String ipAddress = request.getLocalAddr();
System.out.println("获取本机的IP地址：" + ipAddress);
/*3、读取配置文件：可以自定义放行的IP*/
String url = this.getClass().getResource("").getPath();
String path = url.substring(0, url.indexOf("WEB-INF")) + "WEB-INF/ipwhitelist.properties";
Properties config = new Properties();
InputStream inputStream = new FileInputStream(path);
config.load(inputStream);
final String ips = config.getProperty("ips");
/*4、按照,进行分割放行IP*/
String[] split = null;
/*5.1、判断网段过滤*/
if (ipAddress.contains(noFilterIp)) {
System.out.println("=======================通过了网段IP过滤器=====================");
arg2.doFilter(request, response);
return;
}
/*5.2、配置文件中有数据情况下，判断白名单过滤*/
if (ips != null) {
split = ips.split(",");
for (String ip : split) {
/*包含不过滤的IP地址，通过过滤器*/
if (ipAddress.equals(ip)) {
System.out.println("=======================通过了白名单IP过滤器=====================");
arg2.doFilter(request, response);
return;
}
}
}
/*6、没有匹配成功~*/
request.setCharacterEncoding("UTF-8");
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = null;
out = response.getWriter();
out.print("<h1>对不起，你的ip不能访问服务器</h1>");
out.flush();
out.close();
}
@Override
public void destroy() {
}
}
2、编写web.xml配置文件：
<!--IP过滤：指定网段-->
<filter>
<filter-name>FilterIP</filter-name>
<filter-class>com.mixky.app.bjcc.filter.IPFilter</filter-class>
<!-- 配置初始化参数 -->
<init-param>
<!-- 配置允许通过的IP网段 -->
<param-name>FilteredIP</param-name>
<param-value>192.168.31</param-value>
</init-param>
</filter>
<!-- 配置映射 -->
<filter-mapping>
<filter-name>FilterIP</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
3、ipwhitelist.properties配置文件(白名单IP)
#自定义放行的IP，用,进行分割 ips=192.168.31.144,127.0.0.1
测试一下：
注释掉peoperties配置文件：
这里我的网段并不在配置文件中，因为我的地址是本地回环地址，所以就主要看配置文件中设置的白名单了：
浙公网安备 33010602011771号