nginx proxy认证proxy 和普通proxy

回复 收藏
认证反向代理
server
{
      listen 443 ssl;
    ssl on;
    ssl_certificate /usr/local/nginx/ssl/cn.crt;
    ssl_certificate_key /usr/local/nginx/ssl/cn.key;

      server_name www.aa.com;
      location / {
       # proxy_redirect off;
       # proxy_set_header Host $host;
       # proxy_set_header X-Real-IP $remote_addr;
       # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        include proxy_setting.conf;
#      proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
#
#               ### Set headers ####
#               proxy_set_header Host $host;
#               proxy_set_header X-Real-IP $remote_addr;
#               proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#
#               ### Most PHP, Python, Rails, Java App can use this header ###
#               proxy_set_header X-Forwarded-Proto https;
#
#               ### By default we don't want to redirect it ####
#               proxy_redirect     off;
        proxy_pass https://ssl1;
           }
}
proxy_setting.conf内容

proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#proxy_cache_use_stale timeout http_502 http_504;
proxy_cache_use_stale updating error timeout;
proxy_set_header X-Forwarded-Proto https;
proxy_ignore_headers X-Accel-Expires Expires Cache-Control Set-Cookie;
add_header X-Cache '$upstream_cache_status from $server_addr';
proxy_max_temp_file_size 0;
proxy_connect_timeout 5;
proxy_send_timeout 5;
proxy_read_timeout 3;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;

反向代理Proxy

~                                 
server
{
      listen 80;
      server_name  api.aaa.com;

      location / {
      #  proxy_redirect off;
      #  proxy_set_header Host $host;
      #  proxy_set_header X-Real-IP $remote_addr;
      #  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        include proxy_setting.conf;
        proxy_pass http://online;
           }
    access_log /data/wwwlogs/api.log access;

}
主要区别为加粗字体其他使用proxy_setting.conf文件就可以
2016-08-06 00:08 举报
已邀请:

回复帖子,请先登录注册

退出全屏模式 全屏模式 回复
评分
可选评分理由: