Nginx代理到CFSS连接被拒绝

Question

我有CFSSL服务在端口8888上的kubernetes中运行。我可以从直接引用cfssl:8888的另一个Pod中访问它的API。我想通过Nginx公开它，并让Nginx在单独的pod中运行，并带有以下config

upstream cfssl {
    server cfssl:8888;
}

server {
    listen         80 default_server;
    listen         [::]:80 default_server;
    server_name    localhost;

    location / {
        proxy_pass http://cfssl;
        proxy_set_header Host cfssl;
    }
}

但是此Nginx配置不起作用，我可以访问cfssl:8888 wethin Nginx pod，但是当我执行curl localhost:80时

curl: (7) Failed to connect to localhost port 80: Connection refused

此设置有什么问题？

Answer 1

您未提及端口的内部位置信息块

location / {
        proxy_pass http://cfssl;

应该类似于

server {
    listen         80 default_server;
    listen         [::]:80 default_server;
    server_name    localhost;

    location / {
        proxy_pass http://cfssl:8888;
        proxy_set_header Host cfssl;
    }