fumingxia 发表于 2018-11-9 13:08:38

nginx http 与 https 配置

log_format qps_access ' $remote_addr$time_iso8601$server_port$request      $status $http_user_agent      $request_time';  

  

  
upstream qps_backend {
  
    ip_hash;
  
    server 127.0.0.1:9090;
  
    server 10.8.45.23:9090;
  
}
  

  
server {
  
    listen      80;
  
    server_name qps.ribuncdn.cn;
  
    client_max_body_size 1g;
  
    rewrite ^(.*) https://$server_name$1 permanent;   #http重定向到https
  
    proxy_connect_timeout 300;
  
    proxy_send_timeout 300;
  
    proxy_read_timeout 300;
  

  
    location /{
  
      proxy_set_header Host $http_host;
  
      proxy_pass   http://qps_backend;
  
      proxy_http_version 1.1;
  
      proxy_set_header Upgrade $http_upgrade;
  
      proxy_set_header Connection "upgrade";
  

  
      proxy_set_header X-Real-IP $remote_addr;
  
      proxy_set_header REMOTE-HOST $remote_addr;
  
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  
      access_log /data/proclog/log/qps_gsvc/nginx/access.log;
  
      error_log /data/proclog/log/qps_gsvc/nginx/error.log;
  
    }
  
}
  

  
server {
  
    listen443;
  
    ssl on;
  

  
    server_name qps.ribuncdn.cn;
  
    client_max_body_size 1g;
  
    ssl_certificate   /etc/nginx/ssl/_.ribuncdn.cn.crt;    #指定证书位置
  
    ssl_certificate_key /etc/nginx/ssl/_.ribuncdn.cn.key;
  

  
    location /{
  
      proxy_set_header Host $http_host;
  
      proxy_pass   http://qps_backend;
  

  
       proxy_http_version 1.1;
  
      proxy_set_header Upgrade $http_upgrade;
  
      proxy_set_header Connection "upgrade";
  

  
      proxy_set_header X-Real-IP $remote_addr;
  
      proxy_set_header REMOTE-HOST $remote_addr;
  
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  
      access_log /data/proclog/log/qps_gsvc/nginx/access.log;
  
      error_log /data/proclog/log/qps_gsvc/nginx/error.log;
  
    }
  
}


页: [1]
查看完整版本: nginx http 与 https 配置