Question

这可以通过转到https://sensorypanel.net进行测试：

var fs = require('fs');

var http = require('http');
http.createServer(function(req, res) {
    res.writeHead(200, {'Content-Type': 'text/plain'});
    res.end('Hello World\n');
}).listen(80, '0.0.0.0');

var https = require('https');
var options = {
    key: fs.readFileSync('certs/sensorypanel.net/sensorypanel_net-key.pem'),
    cert: fs.readFileSync('certs/sensorypanel.net/sensorypanel_net.crt'),
    ca: fs.readFileSync('certs/ca_bundle.crt')
};
https.createServer(options, function(req, res) {
    res.writeHead(200, {'Content-Type': 'text/plain'});
    res.end('Hello SSL World\n');
}).listen(443, '0.0.0.0');

但是使用Redbird作为反向代理，这不起作用：

var redbird = require('redbird'),
    http = require('http');

var proxy = redbird({
    port: 80,
    ssl: {
            port: 443,
            key: 'certs/sensorypanel.net/sensorypanel_net-key.pem',
            cert: 'certs/sensorypanel.net/sensorypanel_net.crt',
            ca: 'certs/ca_bundle.crt'
    }
});

proxy.register('sensorypanel.net', 'http://localhost:4001', {ssl: true});

http.createServer(function(req, res) {
    console.log('Got a request!');
    res.writeHead(200, {'Content-Type': 'text/plain'});
    res.end('Hello World\n');
}).listen(4001, '0.0.0.0');

不立即拒绝连接。它只是挂起。我仍然可以通过http://sensorypanel.net:4001绕过代理，它验证底层HTTP服务是否正常工作。防火墙已关闭。

以下是日志示例：

{"name":"redbird","hostname":"sensorypanel.net","pid":1370,"level":30,"msg":"Listening to HTTPS requests on port 443","time":"2015-08-26T04:46:05.919Z","v":0}
{"name":"redbird","hostname":"sensorypanel.net","pid":1370,"level":30,"msg":"80 'Started a Redbird reverse proxy server'","time":"2015-08-26T04:46:05.925Z","v":0}
{"name":"redbird","hostname":"sensorypanel.net","pid":1370,"level":30,"from":    {"protocol":"http:","slashes":true,"auth":null,"host":"sensorypanel.net","port":null,"hostname":"sensorypanel.net","hash":null,"search":null,"query":null,"pathname":"/","path":"/","href":"http://sensorypanel.net/"},"to":    {"protocol":"http:","slashes":true,"auth":null,"host":"localhost:4001","port":"4001","hostname":"localhost","hash":null,"search":null,"query":null,"pathname":"/","path":"/","href":"http://localhost:4001/","sslRedirect":true,"useTargetHostHeader":false},"msg":"Registered a new route","time":"2015-08-26T04:46:05.931Z","v":0}
{"name":"redbird","hostname":"sensorypanel.net","pid":1370,"level":50,"err":{"message":"socket hang up","name":"Error","stack":"Error: socket hang up\n    at TLSSocket.<anonymous> (_tls_wrap.js:664:25)\n    at TLSSocket.emit (events.js:107:17)\n    at TCP.close (net.js:485:12)","code":"ECONNRESET"},"msg":"HTTPS Client  Error","time":"2015-08-26T04:46:27.847Z","v":0}
{"name":"redbird","hostname":"sensorypanel.net","pid":1370,"level":50,"err":{"message":"socket hang up","name":"Error","stack":"Error: socket hang up\n    at TLSSocket.<anonymous> (_tls_wrap.js:664:25)\n    at TLSSocket.emit (events.js:107:17)\n    at TCP.close (net.js:485:12)","code":"ECONNRESET"},"msg":"HTTPS Client  Error","time":"2015-08-26T04:46:41.931Z","v":0}

Answer 1

这是redbird报告的here和here中的错误。它是由某个node.js API的更改引起的，并且在2015年10月27日在this commit中修复了。如果您遇到同样的问题，则应该将redbird升级到更新的版本。

使用SSL的基本Redbird反向代理在Ubuntu Server 14.04上不起作用

1 个答案: