nginx通过云负载均衡后作反向代理并限制制定ip访问

server {
listen       80;
server_name   xxx.xxx.xxx;

set $x $remote_addr;
if ($http_ali_cdn_real_ip) {
set $x $http_ali_cdn_real_ip;
}
#cms
location ^~ /cms {
proxy_pass http://pool_yyyy_8000/; proxy_set_header  Host  $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
client_max_body_size    100m;
set $allow true;
if ($http_x_forwarded_for !~ "xxx.xxx.xxx.xxx|yyy.yyy.yyy.yyy") {
set $allow false;
}
if ($allow = false) {
return 403;
}
}
}