Question

Nginx noob。尝试将Nginx配置为在http://localhost:8082运行的另一个Web服务器前充当SSL代理服务器。也就是说，我希望将http://localhost的所有请求重定向到https://localhost。那部分工作正常。

问题是，端口8082上的应用程序还使用ws://localhost:8082/public-api/repossession-requests-socket处的WebSocket连接。我正在尝试将任何连接重定向到ws://localhost/public-api/repossession-requests-socket到wss://localhost/public-api/repossession-requests-socket，并让Nginx将这些WebSocket请求代理到ws://localhost:8082/public-api/repossession-requests-socket。

相反，WebSocket连接失败，因为Nginx为返回了一个301 ws://localhost/public-api/repossession-requests-socket＆amp; wss://localhost/public-api/repossession-requests-socket。我的配置如下;我在测试中使用了Docker图像nginx:alpine（$PWD已映射到/app）。

我如何更改此设置以便不再看到301？

events {
  worker_connections 1024;
}

http {
    server {
        listen 80;
        return 301 https://$host$request_uri;
    }

    server {
        listen 443;
        server_name localhost;

        ssl_certificate /app/docker/public.pem;
        ssl_certificate_key /app/docker/private.pem;

        ssl on;
        ssl_session_cache builtin:1000 shared:SSL:10m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
        ssl_prefer_server_ciphers on;

        access_log /app/access-443.log;

        location / {
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;

          proxy_pass http://localhost:8082;
          proxy_read_timeout 90;

          proxy_redirect http://localhost:8082 https://localhost;
        }
        location /public-api/repossession-requests-socket/ {
            proxy_pass http://localhost:8082;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
    }
}

Answer 1

发现问题。 location节末尾的尾部斜杠。

location /public-api/repossession-reqeuests-socket/应该是location /public-api/repossession-reqeuests-socket。

如何修复此Nginx配置以正确代理WebSocket请求而不是返回301？

1 个答案: