Nginx代理配置(专业版)

一步一个脚印一个坑 5月前 ⋅ 616 阅读
ad

 

写在最前头:使用代理,如果可以,请尽量支持双协议,http、https均要支持哈;
 
注意:监控系统只是运行代码,是否支持https,需要运维同学在你们的服务器上配置https证书,配置好证书,就可以支持https了。(只有域名才可以支持https)
 
常见问题:很多同学配置好了https证书,但是上报接口用的还是http。webfunny的探针是根据监控项目的网址来判断的,你的项目地址用的是https,上报接口也会切换到https
http {

  map $http_upgrade $connection_upgrade {
    default upgrade;
     ''   close;
  }

  #用80端口代理8011,8010两个端口号,可支持http(
  server {
    listen 80;
    server_name www.xxx.com;

    #### 应用中心be反向代理
    location /wfManage/ {
        proxy_pass http://127.0.0.1:8011/wfManage/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 应用中心fe反向代理
    location /webfunny_center/ {
      proxy_pass http://127.0.0.1:8010/webfunny_center/;
      proxy_redirect default ;
    }
  
    #### 监控系统be反向代理
    location /server/ {
        proxy_pass http://127.0.0.1:8011/server/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 监控系统fe反向代理
    location /webfunny/ {
      proxy_pass http://127.0.0.1:8010/webfunny/;
      proxy_redirect default ;
    }

    #### 埋点系统be反向代理
    location /tracker/ {
        proxy_pass http://127.0.0.1:8011/tracker/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 埋点系统fe反向代理
    location /webfunny_event/ {
        proxy_pass http://127.0.0.1:8010/webfunny_event/;
        proxy_redirect default ;
    }
  }

  #用443端口代理8011,8010两个端口号,可支持https
  server {
    listen         443 ssl;
    server_name  www.xxx.com;  #网站域名,和80端口保持一致
    root /home/jiang/webWorks;
    index /index.html;
    #          ssl             on;
    ssl_certificate /etc/nginx/cert/3120409_www.xxx.com.pem;       #证书公钥
    ssl_certificate_key  /etc/nginx/cert/3120409_www.xxx.com.key;  #证书私钥
    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDH:AESGCM:HIGH:!RC4:!DH:!MD5:!3DES:!aNULL:!eNULL;
    ssl_prefer_server_ciphers  on;

    #### 应用中心be反向代理
    location /wfManage/ {
        proxy_pass http://127.0.0.1:8011/wfManage/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 应用中心fe反向代理
    location /webfunny_center/ {
      proxy_pass http://127.0.0.1:8010/webfunny_center/;
      proxy_redirect default ;
    }
  
    #### 监控系统be反向代理
    location /server/ {
        proxy_pass http://127.0.0.1:8011/server/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 监控系统fe反向代理
    location /webfunny/ {
      proxy_pass http://127.0.0.1:8010/webfunny/;
      proxy_redirect default ;
    }

    #### 埋点系统be反向代理
    location /tracker/ {
        proxy_pass http://127.0.0.1:8011/tracker/;
        proxy_connect_timeout 3000;
        proxy_send_timeout 3000;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    #### 埋点系统fe反向代理
    location /webfunny_event/ {
        proxy_pass http://127.0.0.1:8010/webfunny_event/;
        proxy_redirect default ;
    }
  }
}

 

 

关于Webfunny

Webfunny专注于前端监控系统,前端埋点系统的研发。 致力于帮助开发者快速定位问题,帮助企业用数据驱动业务,实现业务数据的快速增长。支持H5/Web/PC前端、微信小程序、支付宝小程序、UniApp和Taro等跨平台框架。实时监控前端网页、前端数据分析、错误统计分析监控和BUG预警,第一时间报警,快速修复BUG!支持私有化部署,Docker容器化部署,可支持千万级PV的日活量!

  点赞 0   收藏 0
  • 一步一个脚印一个坑
    共发布126篇文章 获得4个收藏
全部评论: 0