'limiter加IP段白名单'

@@ -13,16 +13,23 @@ const captchaPolicy = require('./policies/captcha');
 // const reporterPolicy = require('./policies/reporter');
 
 const IP_WHITE_LIST = [
-    '106.38.38.146',
-    '106.38.38.147',
-    '106.39.86.227',
-    '218.94.75.58',
-    '218.94.75.50',
-    '218.94.77.166',
+    '106.38.38.146', // 北京办公区域
+    '106.38.38.147', // 北京办公区域
+    '106.39.86.227', // 北京办公区域
+    '218.94.75.58', // 南京办公区域
+    '218.94.75.50', // 南京办公区域
+    '218.94.77.166', // 南京办公区域
     '10.66.70.21', // 联盟 生产 IP
-    '222.73.196.18' // B站合作方单击次数快加白名单
+    '222.73.196.18', // B站合作方单击次数快加白名单
+    '123.206.73.107', // 腾讯云出口IP
+    '139.199.35.21', // 腾讯云出口IP
+    '139.199.29.44', // 腾讯云出口IP
+    '123.206.21.19' // 腾讯云出口IP
 ];
-
+const IP_WHITE_SEGMENT = {
+    '10.66.', // 内网IP段
+    '192.168.' // 内网IP段
+};
 const PATH_WHITE_LIST = [
     '/3party/check',
     '/3party/check/submit',
@@ -57,6 +64,7 @@ module.exports = (req, res, next) => {
 
     // 排除条件：ip白名单/路径白名单/异步请求/登录用户
     const excluded = _.includes(IP_WHITE_LIST, remoteIp) ||
+        _.includes(IP_WHITE_SEGMENT, `${remoteIp.split('.').slice(0, 2).join('.')}.`) ||
         _.includes(PATH_WHITE_LIST, req.path) || req.xhr || !_.isEmpty(_.get(req, 'user.uid'));
     const enabled = !_.get(req.app.locals, 'wap.sys.noLimiter');