xy123321 发表于 2018-11-10 10:17:04

nginx负载均衡配置https

  1先购买https协议证书或者申请免费的证书
  我这里是在腾讯云上免费申请的
  如图
http://i2.51cto.com/images/blog/201803/14/99a6f51da7d5c4c4e5b86789d30d965a.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
  我这里是nginx的负载均衡,所以选择nginx的目录,里面有两个文件,如图
http://i2.51cto.com/images/blog/201803/14/0788144b63c54239c0a0e6b8b17622a3.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
  把这两个文件放到nginx的keys目录下
http://i2.51cto.com/images/blog/201803/14/a4d2b238d790cc7d343ec7ce2536790f.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
  编辑配置nginx的配置文件
http://i2.51cto.com/images/blog/201803/14/58e472b3c0bd4accc0b530465c8e444a.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
  server {
  listen       443;
  server_name   证书上的域名;
  #include ssl.conf;
  ssl on;
  ssl_certificate keys/证书_bundle.crt;
  ssl_certificate_key keys/证书.key;
  include qssl.conf;
  location / {
  include proxy.conf;
  proxy_pass程序池upstream名称;
  }
  upstream 程序池upstream名称 {
  server   web服务器ip:端口号max_fails=1 fail_timeout=10s weight=10;
  server   web服务器ip:端口号 max_fails=1 fail_timeout=10s weight=10;
  server   web服务器ip:端口号 max_fails=1 fail_timeout=10s weight=5 backup;
  然后重启nginx服务
  这里我的web服务器是windows服务器,iis环境,把证书里面的iis目录里面的
  pfx文件导入到iis里面,如图
http://i2.51cto.com/images/blog/201803/14/6abbe14e5e019c90577e348ede4599b9.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
  然后就可以用https访问了
http://i2.51cto.com/images/blog/201803/14/1353f1bfd4b222cce4a21dc9098125a2.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=

页: [1]
查看完整版本: nginx负载均衡配置https