Nginx反向代理案例
upstream xx {
server 127.0.0.1:1800 weight=1;
ip_hash;
}
server {
listen 80;
server_name ;
location / {
rewrite ^(.*)$ https://xx.xxcom$1 permanent;
}
}
server {
listen 443 ssl;
server_name ;
server_tokens off;
gzip on;
gzip_comp_level 6;
# gzip_proxied any;
gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript application/x-font-woff;
location / {
proxy_pass http://xx;
proxy_set_header Host jumpserver.factorybi.com;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
ssl_certificate /etc/nginx/ssl/xx.pem;
ssl_certificate_key /etc/nginx/ssl/xx.key;
ssl_session_timeout 5m;
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
}
server 127.0.0.1:1800 weight=1;
ip_hash;
}
server {
listen 80;
server_name ;
location / {
rewrite ^(.*)$ https://xx.xxcom$1 permanent;
}
}
server {
listen 443 ssl;
server_name ;
server_tokens off;
gzip on;
gzip_comp_level 6;
# gzip_proxied any;
gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript application/x-font-woff;
location / {
proxy_pass http://xx;
proxy_set_header Host jumpserver.factorybi.com;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
ssl_certificate /etc/nginx/ssl/xx.pem;
ssl_certificate_key /etc/nginx/ssl/xx.key;
ssl_session_timeout 5m;
ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
}