NGINX 反向代理 HTTP 到 HTTPS 服务器问题

时间:2021-07-24 16:32:50

标签: nginx-reverse-proxy

我在使用 nginx 配置反向代理时遇到问题

curl 显示请求正在到达端点,最后一次发送响应并停留在 nginx 上。

  • 即将连接()到 127.0.0.1 端口 80 (#0)
  • 正在尝试 127.0.0.1...
  • 连接到 127.0.0.1 (127.0.0.1) 端口 80 (#0)
<块引用>

POST / HTTP/1.1 用户代理:curl/7.29.0 主机:127.0.0.1 接受:/ 内容类型:文本/xml SOAPAction:http://tempuri.org/AOI 内容长度:1707 预期:100-继续

< HTTP/1.1 100 继续 ^C [root@venom conf.d]#

低于我的配置

服务器{

    listen       80 ;
    server_name  80_proxy;
    access_log   /var/log/nginx/access.log  main;
    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
    client_header_buffer_size 1k;
    client_body_buffer_size 16k; 
    large_client_header_buffers 4 8k;
    server_tokens off;
    error_page 497 https://$host:$server_port$request_uri;
    root   html;
    index  index.html index.htm;
    proxy_redirect http:// $scheme://;
    proxy_set_header        Host    $host:$server_port;
    proxy_set_header        X-Real-IP  $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_hide_header X-Powered-By;
    proxy_cookie_path / "/; secure; SameSite=Lax; Max-Age=172800";
    chunked_transfer_encoding on;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_request_buffering off;
    client_body_timeout     5;
    proxy_connect_timeout   90;
    proxy_buffering off;
    add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; always';
    add_header Content-Security-Policy "script-src 'self';";
location / {
            proxy_send_timeout      2100;
            proxy_read_timeout      2100;
            client_max_body_size    10M;
            proxy_ssl_certificate         /etc/ssl/cert.crt;
           proxy_ssl_certificate_key     /etc/ssl/cert.key;
            proxy_ssl_trusted_certificate  /etc/ssl/cert_ca.crt;
            proxy_ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
            proxy_ssl_ciphers         HIGH:!aNULL:!MD5;
            proxy_ssl_verify on;
            proxy_ssl_verify_depth 2;
            proxy_pass https://10.34.22.33:801;
    }

}

提前致谢

0 个答案:

没有答案