能否从ALB访问日志中获取用户客户端域名？

Great question! Let's break this down clearly based on how ALB logs work and what options you have:

First, to confirm your initial observation: You're absolutely right that the domain_name field in ALB access logs refers to the server domain being requested (the value from the Host header in the client's request), not the client's own domain. That's a common point of confusion, so it's good you caught that.

Now, when it comes to getting the client's domain name, we need to clarify what exactly you mean by "client domain"—here are the scenarios and corresponding solutions:

Scenario 1: You want the domain associated with the client's IP address (reverse DNS) #

ALB access logs don't include this directly. The closest field you'll get is client_ip (or via the X-Forwarded-For header if you've enabled that). To get the domain linked to this IP, you'll need to:

• Pass the client IP to your backend service
• Perform a reverse DNS lookup on that IP within your backend code (using tools like nslookup, dig, or language-specific DNS libraries)

Keep in mind that not all client IPs have reverse DNS records, so this won't work 100% of the time.

Scenario 2: You want a custom domain identifier the client sends in a request header #

If your clients can include a custom header (like X-Client-Domain) that specifies their domain, you can configure your ALB to log this header. Here's how:

• Edit your ALB's access log configuration
• Add a custom field using the pattern $http_<header-name> (e.g., $http_x_client_domain for the X-Client-Domain header)
• Once saved, this custom field will appear in your ALB access logs alongside standard fields

Scenario 3: You want the domain the client came from (referrer) #

If you're looking for the domain that directed the client to your ALB (e.g., from a link on another website), check the referer field in ALB logs. This field contains the full URL the client was on before making the request, and you can extract the domain from that string. Note that this field is only populated if the request was triggered by a link click or redirect—direct requests will have an empty referer value.

Quick comparison to Nginx #

Just to tie this back to your Nginx reference: Nginx doesn't have a built-in "client domain" field either. The $remote_host variable does resolve the client IP to a domain, but it requires enabling reverse DNS in your Nginx config (which can impact performance). So in that sense, the approach is similar to ALB—you're either relying on reverse DNS lookups or custom headers to get client domain info.

内容的提问来源于stack exchange，提问作者Dev93