您可以动态注册Tomcat的远程地址过滤器。
http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#Remote_Address_Filter
看起来像这样：
@WebListenerpublic class MyServletContextListener implements ServletContextListener { @Override public void contextInitialized(ServletContextEvent sce) { // Get IP addresses from the DB or text file. ... ServletContext sc = sce.getServletContext(); FilterRegistration fr; fr = sc.addFilter("RemoteAddrFilter", "org.apache.catalina.filters.RemoteAddrFilter"); fr.addMappingForUrlPatterns(EnumSet.of(DispatcherType.REQUEST), true, "/*"); fr.setInitParameter("allow", "127\.0\.0\.1"); fr.setInitParameter("denyStatus", "403"); }}
