nginx在絕大數(shù)的場(chǎng)景中我們使用其用于做web中間件或反向代理使用，但是nginx實(shí)際上也提供了正向代理的功能。下面我們來(lái)進(jìn)行nginx正向代理配置操作，以便大家能夠掌握nginx正向代理配置方法。
創(chuàng)新互聯(lián)是一家集網(wǎng)站建設(shè),豐縣企業(yè)網(wǎng)站建設(shè),豐縣品牌網(wǎng)站建設(shè),網(wǎng)站定制,豐縣網(wǎng)站建設(shè)報(bào)價(jià),網(wǎng)絡(luò)營(yíng)銷,網(wǎng)絡(luò)優(yōu)化,豐縣網(wǎng)站推廣為一體的創(chuàng)新建站企業(yè)，幫助傳統(tǒng)企業(yè)提升企業(yè)形象加強(qiáng)企業(yè)競(jìng)爭(zhēng)力?？沙浞譂M足這一群體相比中小企業(yè)更為豐富、高端、多元的互聯(lián)網(wǎng)需求。同時(shí)我們時(shí)刻保持專業(yè)、時(shí)尚、前沿，時(shí)刻以成就客戶成長(zhǎng)自我，堅(jiān)持不斷學(xué)習(xí)、思考、沉淀、凈化自己，讓我們?yōu)楦嗟钠髽I(yè)打造出實(shí)用型網(wǎng)站。第一步：獲取nginx 正向代理模塊
# git clone https://github.com/chobits/ngx_http_proxy_connect_module
第二步：下載nginx 源碼包
# wget http://nginx.org/download/nginx-1.9.12.tar.gz
# tar xf nginx-1.9.12.tar.gz
第三步：通過(guò)補(bǔ)丁方法把上述下載的正向代理模塊導(dǎo)入到nginx 模塊存儲(chǔ)目錄
# cd nginx-1.9.12/
# patch -p1 < /root/ngx_http_proxy_connect_module/patch/proxy_connect.patch
第四步：編譯安裝nginx
# yum -y install openssl-devel zlib-devel prce-devel
# ./configure --add-dynamic-module=/root/ngx_http_proxy_connect_module
# make && make install
第五步：配置所允許通過(guò)代理主機(jī)的主機(jī)列表
# cat /usr/local/nginx/conf/client-allow.conf
allow 127.0.0.1;
allow 192.168.216.1;
allow 192.168.216.185;
第六步：修改nginx 配置文件
# cat /usr/local/nginx/conf/nginx.conf
#user nobody;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
load_module /usr/local/nginx/modules/ngx_http_proxy_connect_module.so; # 位置注意
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
server {
listen 8080; # 代理端口
resolver 119.29.29.29; # 域名解析服務(wù)器
proxy_connect;
proxy_connect_allow 443 563;
proxy_connect_connect_timeout 10s;
proxy_connect_read_timeout 10s;
proxy_connect_send_timeout 10s;
location / {
proxy_pass http://$host;
proxy_set_header Host $host;
}
include client-allow.conf; # 主機(jī)白名單
deny all; # 除了主機(jī)白名單中的主機(jī)，拒絕所有
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ .php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /.ht {
# deny all;
#}
}
# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;
# location / {
# root html;
# index index.html index.htm;
# }
#}
# HTTPS server
#
#server {
# listen 443 ssl;
# server_name localhost;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;
# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 5m;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
# location / {
# root html;
# index index.html index.htm;
# }
#}
}
第七步：檢查并啟動(dòng)nginx 服務(wù)
# /usr/local/nginx/sbin/nginx -t # 檢查配置文件
# /usr/local/nginx/sbin/nginx # 啟動(dòng)服務(wù)
# /usr/local/nginx/sbin/nginx -s stop # 關(guān)閉
# /usr/local/nginx/sbin/nginx -s reload # 重啟加載配置文件
# ss -anput | grep ":8080" # 檢查端口
第八步：被代理主機(jī)配置
第九步：被代理主機(jī)驗(yàn)證nginx 正向代理可用性
# ss -anput | grep ":8080"
tcp LISTEN 0 128 *:8080 *:* users:(("nginx",pid=19515,fd=6),("nginx",pid=19514,fd=6))
tcp ESTAB 0 0 192.168.216.184:8080 192.168.216.185:35718 users:(("nginx",pid=19515,fd=11))
tcp ESTAB 0 0 192.168.216.184:8080 192.168.216.185:35712 users:(("nginx",pid=19515,fd=3))
重慶分公司
重慶分公司
