nginx反向代理

环境是政务微信放请求71代理服务器,71代理服务器请求项目所在的14服务器。

 server {
        listen       8080;
        server_name  10.99.89.71;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;
        rewrite ^(.*)$ https://${server_name}$1 permanent;
        location / {
            root   html;
            index  index.html index.htm;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass https://smartgate.baoan.gov.cn/kshfwpt/H5app/index.html;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

 server {
         listen       8443 ssl;
       # server_name  smartgate.baoan.gov.cn;

        ssl_certificate      /opt/sslCertificate/baoan_gov.crt;
       # ssl_certificate      /opt/sslCertificate/hst.crt;
        ssl_certificate_key  /opt/sslCertificate/baoan_gov.key;
       # ssl_certificate_key  /opt/sslCertificate/hst.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        #ssl_prefer_server_ciphers  on;


        location ^~/fmapi/ {
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://10.99.62.14:8080;
        }
        location ^~/meeting-resource-server/ {
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass https://10.99.62.14:8443;
                                                    

当请求是https://10.99.89.71/meeting-resource-server/getRoot经过nginx映射后的地址是https://10.99.62.14:8443/meeting-resource-server/getRoot相当于只进行ip和端口的替换。

https://10.99.89.71:8443/clientH5/mobile.html#/roomInfo是源静态资源地址。

      location ^~/H5app/ {
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass https://10.99.62.14:8443;

        }
 location ^~/clientH5/ {
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass https://10.99.62.14:8443;

        }
    }

相当于匹配到clientH5后映射地址是https://10.99.62.14:8443/clientH5/mobile.html#/roomInfo；

效果：
原页面地址：

映射地址：

这是公网地址映射71代理服务器，71映射到14，能访问到，证明一条线都是通的。

3.如果要改https的端口，需要改80和443ssl一起改，监听80会将https映射到443上面，所以一起改，监听8080协议是https会映射到8443，而且访问时，不是默认端口需要加上端口，才能访问到nginx首页面。