Nginx反向代理多域名的HTTP和HTTPS服务的实现

Nginx反向代理多域名的HTTP和HTTPS服务的实现,第1张

Nginx反向代理多域名的HTTP和HTTPS服务的实现

本文详细介绍了Nginx反向代理多域HTTP和HTTPS服务的实现。原文根据示例代码非常详细,对大家的学习培训或者工作都有一定的参考价值。有必要的朋友陪我去了解一下。

目前Nginx已经做了两家网站的反向代理,分别基于Windows的IIS和Linux的Apachserver来呈现网页服务。

现在,最新项目的网页必须向公众开放,以展示他们的服务,必须在代理服务上推广另一个网站,并应用HTTPS浏览及其到HTTPS的HTTP跳转。因为新网页是静态网页,所以应用Docker部署在Nginx代理服务器上。相关证书是根据let'sencrypt获取的,都是独立的资质证书,没有使用通配符的资质证书申请。

在Nginx代理端部署SSL证书就可以了,后端开发不需要部署SSL就可以完成HTTPS浏览。

Nginx代理服务器配备了:

worker_processesauto; error_log/var/log/nginx/error.logwarn; pid/var/run/nginx.pid; events{ worker_connections1024; } http{ include/usr/local/nginx/conf/mime.types; default_typeapplication/octet-stream; log_formatmain'$remote_addr-$remote_user[$time_local]"$request"' '$status$body_bytes_sent"$http_referer"' '"$http_user_agent""$http_x_forwarded_for"'; access_log/var/log/nginx/access.logmain; sendfileon; tcp_nopushon; tcp_nodelayon; upstreamdx.exzel.co.nz{ server127.0.0.1:8080; } upstreammybusiness.exzel.co.nz{ server192.168.1.252:443; } server{ listen80; server_namedx.exzel.co.nz; rewrite^(.*)https://dx.exzel.co.nzpermanent; } server{ listen443; server_namedx.exzel.co.nz; sslon; ssl_certificate/etc/letsencrypt/live/dx.exzel.co.nz/fullchain.pem; ssl_certificate_key/etc/letsencrypt/live/dx.exzel.co.nz/privkey.pem; ssl_session_timeout5m; ssl_ciphersECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocolsTLSv1TLSv1.1TLSv1.2; ssl_prefer_server_cipherson; access_log/var/log/nginx/ccieerror.log; location/{ proxy_set_headerHost$host; proxy_set_headerX-Real-IP$remote_addr; proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for; proxy_passhttp://dx.exzel.co.nz; } } server{ listen80; server_namemybusiness.exzel.co.nz; rewrite^(.*)https://mybusiness.exzel.co.nzpermanent; } server{ listen443; server_namemybusiness.exzel.co.nz; sslon; ssl_certificate/etc/letsencrypt/live/mybusiness.exzel.co.nz/fullchain.pem; ssl_certificate_key/etc/letsencrypt/live/mybusiness.exzel.co.nz/privkey.pem; ssl_session_timeout5m; ssl_ciphersECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocolsTLSv1TLSv1.1TLSv1.2; ssl_prefer_server_cipherson; access_log/var/log/nginx/mybusiness.log; location/{ proxy_set_headerHost$host; proxy_set_headerX-Real-IP$remote_addr; proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for; proxy_passhttps://mybusiness.exzel.co.nz; } } server{ listen80; server_namewww.empnz.co.nzempnz.co.nz; location/{ proxy_passhttp://192.168.1.15; } } }

关于Nginx反向代理多域HTTP和HTTPS服务的完成,本文到此结束。有关Nginx反向代理HTTP和HTTPS的大量信息,请搜索以前的文章或再次访问下面的相关文章。期待你以后的申请!

欢迎分享,转载请注明来源:内存溢出

原文地址: https://outofmemory.cn/zz/774441.html

(0)
打赏 微信扫一扫 微信扫一扫 支付宝扫一扫 支付宝扫一扫
上一篇 2022-05-03
下一篇 2022-05-03

发表评论

登录后才能评论

评论列表(0条)

保存