tomcat中限制ip访问

起因

起因

部署在tomcat下的一个Spring Boot项目，遭到恶意攻击，查看访问历史后，想限制这些ip的访问。

Tomcat 版本
apache-tomcat-7.0.88

设置方法：

找到tomcat目录下的conf/server.xml文件，打开后

在 Host 节点下添加一个子节点

<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="" deny="66.249.71.137,66.249.71.139,54.36.150.107,66.249.71.135,213.174.146.212,213.174.146.213,66.249.71.135,54.36.149.20,66.249.71.139"/>

完整示例：

<Host name="java.sqber.com"  appBase="webapps"
            unpackWARs="true" autoDeploy="true">
        <!-- SingleSignOn valve, share authentication between web applications
             Documentation at: /docs/config/valve.html -->
        <!--
        <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
        -->
        <!-- Access log processes all example.
             Documentation at: /docs/config/valve.html
             Note: The pattern used is equivalent to using pattern="common" -->
        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log." suffix=".txt"
               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
        <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="" deny="66.249.71.137,66.249.71.139,54.36.150.107,66.249.71.135,213.174.146.212,213.174.146.213,66.249.71.135,54.36.149.20,66.249.71.139"/>
</Host>