替代客户端的IP地址 [英] Alternative to Ip address of client

问题描述

我有一个现有的Web服务，其中我使用用户名，密码和用户身份的IP地址来验证用户身份，现在我将我的Web服务移动到云端，客户端的IP地址将根据负载而变化是否有任何交替用于验证用户的IP地址？

i have an existing web service in which i used username , password and Ip address of user for authenticating user identity,now i am moving my web services to cloud and the ip address of client will changing according to load is there any alternating for ip address for authenticating user?

推荐答案

成员10506003写道：

Member 10506003 wrote:

实际上我们正在为客户提供服务，客户有很多用户，因此我们会跟踪我们匹配客户端IP地址的所有用户，以确保客户的用户是否有效。如果我们只使用用户名和密码，那么它不能确保客户端的用户是有效的，因为所有用户名和密码都相同，我们必须跟踪请求来自哪个客户端或用户属于哪个客户端。使用客户端证书后，它没有满足我的要求。我们可以通过哪些方式跟踪客户的用户身份。

Actually we are providing services to clients and client have many users so for tracking all the users we match the ip address of the client to ensure client's user is validate or not. If we only use username name and password then it not ensure the client's user is validate because all have same username and password also we have to track by which client the request is coming or and user belong to which client. After using client side certificate it didn't full fill my requirement. Anything By which we can track client's user identity.

抱歉，这些注意事项看起来很荒谬。为什么？当您创建新的用户配置文件并且新人为您提供与现有名称匹配的用户名时，您将显示用户名已存在消息并拒绝创建帐户。这就是它在各地的表现。



通过IP跟踪用户会适得其反，因为1）同一个用户经常更改IP（尤其是当人们变得更多时2）大多数用户使用 动态IP地址 ，所以同样如此用户可以在同一位置的不同时间拥有不同的IP地址;所以，在不同的时刻，同一个用户使用不同的IP地址，不同的用户可以拥有相同的IP地址。



此外，你的论点显然与你自己的观察结果相矛盾以及你对问题的表述。看起来你完全意识到发生了什么，只是不愿意接受它。

-SA

Sorry, such considerations look ridiculous. Why? When you create a new user profile and a new person gives you the user name matching one of existing names, you show "user name already exist" message and deny account creation. This is how it's done everywhere.

Tracking the user by IP is counter-productive, because 1) the same user often changes IP (especially these days when people become more and more mobile), 2) most users use dynamic IP addresses, so the same user can have different IP address at different time at the same location; so, at different moments of time, the same user uses different IP addresses and different users can have the same IP address.

Besides, your arguments apparently contradict your own observations and your formulation of the problem. It looks like you fully realize what's going on and only are reluctant to accept it.

—SA

这篇关于替代客户端的IP地址的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！