Nginx作为Websocket服务器的反向代理

Question

我将nginx用作安全Websocket连接的反向代理以提供SSL。 Websocket服务器在端口8080的docker容器内运行，它通过端口8081和8080再次通过nginx暴露给主机。 nginx的配置为：

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}

upstream websocket {
    server 127.0.0.1:8081;
}

server {
    listen 8080;

    ssl on;

    ssl_certificate /ssl/example.cer;
    ssl_certificate_key /ssl/example.key;

    ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA';
    ssl_protocols TLSv1.2;
    ssl_prefer_server_ciphers on;

    server_name example.com;
    client_max_body_size 10m;

        # route all to "websocket"
        location / {
                proxy_pass http://websocket;

                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

                proxy_read_timeout 86400;
                proxy_send_timeout 86400;

                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";

        # prevents 502 bad gateway error
            proxy_buffers 8 32k;
            proxy_buffer_size 64k;

            reset_timedout_connection on;
        }

    error_log /var/log/nginx/error.log;
    access_log /var/log/nginx/access.log;
}

nginx版本：nginx / 1.6.2

问题是，websocket连接每隔几分钟就会关闭一次，在某些情况下，连接仍保持活动状态，但是您无法在10分钟后通过它发送任何流量。