100字范文 > 搭建nginx反向代理用做内网域名转发

搭建nginx反向代理用做内网域名转发

时间：2021-05-09 21:02:41

相关推荐

搭建nginx反向代理用做内网域名转发

一、安装nginx

$ sudo yum install nginx

二、修改配置文件

1 先备份配置文件

$ sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak

2 将配置文件/etc/nginx/nginx.conf修改成如下形式：

# For more information on configuration, see:# * Official English Documentation: /en/docs/# * Official Russian Documentation: /ru/docs/user nginx;# Add by vinworker_processes 1;error_log /var/log/nginx/error.log;pid /run/nginx.pid;# Load dynamic modules. See /usr/share/nginx/README.dynamic.include /usr/share/nginx/modules/*.conf;events {# Add by vinworker_connections 65535;}http {log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log /var/log/nginx/access.log main;sendfile on;tcp_nopushon;tcp_nodelay on;keepalive_timeout 65;types_hash_max_size 2048;include /etc/nginx/mime.types;default_type application/octet-stream;# Load modular configuration files from the /etc/nginx/conf.d directory.# See /en/docs/ngx_core_module.html#include# for more information.include /etc/nginx/conf.d/*.conf;# Add by vingzip on;client_max_body_size 50m;client_body_buffer_size 256k;client_header_timeout 3m;client_body_timeout 3m;send_timeout 3m;# nginx跟后端服务器连接超时时间(代理连接超时)proxy_connect_timeout 300s;# 连接成功后，后端服务器响应超时时间(代理接收超时)proxy_read_timeout 300s;# 连接成功后，nginx发往后端服务器超时时间(代理发送超时)proxy_send_timeout 300s;# 设置本代理服务器（nginx）保存用户头信息的缓冲区大小proxy_buffer_size 64k;# proxy_buffers缓冲区，网页平均在32k以下的话，这样设置proxy_buffers 4 32k; # 高负荷下缓冲大小（proxy_buffers*2）proxy_busy_buffers_size 64k; # 设定缓存文件夹大小，大于这个值，将从upstream服务器传递请求，而不缓冲到磁盘proxy_temp_file_write_size 64k;# 不允许本代理主动关闭连接proxy_ignore_client_abort on;server {listen 80 default_server;listen [::]:80 default_server;server_name _;root /usr/share/nginx/html;# Load configuration files for the default server block.include /etc/nginx/default.d/*.conf;location / {}error_page 404 /404.html;location = /40x.html {}error_page 500 502 503 504 /50x.html;location = /50x.html {}}# Settings for a TLS enabled server.## server {# listen 443 ssl http2 default_server;# listen [::]:443 ssl http2 default_server;# server_name _;# root /usr/share/nginx/html;## ssl_certificate "/etc/pki/nginx/server.crt";# ssl_certificate_key "/etc/pki/nginx/private/server.key";# ssl_session_cache shared:SSL:1m;# ssl_session_timeout 10m;# ssl_ciphers HIGH:!aNULL:!MD5;# ssl_prefer_server_ciphers on;## # Load configuration files for the default server block.# include /etc/nginx/default.d/*.conf;## location / {# }## error_page 404 /404.html;# location = /40x.html {# }## error_page 500 502 503 504 /50x.html;# location = /50x.html {# }# }}

3新建反向代理配置文件

$ sudo touch /etc/nginx/conf.d/reverse-proxy.conf

4 编辑反向代理配置文件成如下形式：

server{listen 80;server_name test.vqin.xin;location / {proxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_pass http://10.39.27.125;}access_log /var/log/nginx/test.vqin.xin_access.log;}server{listen 80;server_name ac.vqin.xin;location / {proxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_pass http://10.39.27.125;}access_log /var/log/nginx/ac.vqin.xin_access.log;}server{listen 80;server_name math.vqin.xin;location / {proxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_pass http://10.39.27.203:8080;}access_log /var/log/nginx/math.vqin.xin_access.log;}

5 如果想对后端机器做负载均衡，像下面这配置就可以把对math.vqin.xin的请求分发给内网的202和203这两台机器做负载均衡了。

sudo vim /etc/nginx/conf.d/reverse-proxy.conf

upstream monitor_server {server 10.39.27.202:8080;server 10.39.27.203:8080;}server{listen 80;server_name math.vqin.xin;location / {proxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://monitor_server;}access_log /var/log/nginx/math.vqin.xin_access.log;}