1、nginx不支持https,如果想要使用需要安裝以下的補丁
目前創(chuàng)新互聯(lián)已為成百上千家的企業(yè)提供了網(wǎng)站建設(shè)、域名、虛擬主機、網(wǎng)站改版維護(hù)、企業(yè)網(wǎng)站設(shè)計、金塔網(wǎng)站維護(hù)等服務(wù),公司將堅持客戶導(dǎo)向、應(yīng)用為本的策略,正道將秉承"和諧、參與、激情"的文化,與客戶和合作伙伴齊心協(xié)力一起成長,共同發(fā)展。
參考文檔:
https nginx補丁
https://github.com/chobits/ngx_http_proxy_connect_module
安裝編譯環(huán)境和工具
yum install gcc gcc-c++ autoconf automake -y
yum install pcre pcre-devel -y
yum install openssl openssl-devel -y
yum install patch -y
yum install git -y
yum install net-tools -y
安裝Nginx和ngx_http_proxy_connect_module模塊
mkdir -p /downloads
cd /downloads
git clone https://github.com/chobits/ngx_http_proxy_connect_module.git
wget http://nginx.org/download/nginx-1.15.12.tar.gz
tar -xzvf nginx-1.15.12.tar.gz
cd nginx-1.15.12/
patch -p1 < /downloads/ngx_http_proxy_connect_module/patch/proxy_connect_rewrite_101504.patch
./configure --add-module=/downloads/ngx_http_proxy_connect_module
make && make install
修改Nginx配置文件
Nginx目錄:/usr/local/nginx
修改Nginx目錄下conf/nginx.conf配置文件,在http中添加以下內(nèi)容:
server {
resolver 114.114.114.114;
listen 8080;
location / {
proxy_pass http://$http_host$request_uri;
proxy_set_header HOST $http_host;
proxy_buffers 256 4k;
proxy_max_temp_file_size 0k;
proxy_connect_timeout 30;
proxy_send_timeout 60;
proxy_read_timeout 60;
proxy_next_upstream error timeout invalid_header http_502;
}
}
server {
listen 8443;
# DNS resolver used by forward proxying
resolver 114.114.114.114;
# forward proxy for CONNECT request
proxy_connect;
proxy_connect_allow 443 563;
proxy_connect_connect_timeout 10s;
proxy_connect_read_timeout 10s;
proxy_connect_send_timeout 10s;
# forward proxy for non-CONNECT request
location / {
proxy_pass http://$host;
proxy_set_header Host $host;
}
}
啟動Nginx
運行./sbin/nginx啟動Nginx。
Nginx命令參考:
# Start Nginx
./sbin/nginx
# Reload Nginx configuration
./sbin/nginx -s reload
# Stop Nginx
./sbin/nginx -s stop
查看端口
netstat -tnlp | grep 8080
netstat -tnlp | grep 8443
打開防火墻
firewall-cmd --zone=public --add-port=8080/tcp
firewall-cmd --zone=public --add-port=8080/tcp --permanent
firewall-cmd --zone=public --add-port=8443/tcp
firewall-cmd --zone=public --add-port=8443/tcp --permanent
firewall-cmd --reload
1
測試代理
# Test HTTP proxy
curl --proxy 192.168.87.123:8080 http://www.baidu.com
# Test HTTPS proxy
curl --proxy 192.168.87.123:8443 https://www.baidu.com
客戶端需要設(shè)置代理
export http_proxy="http://192.168.87.123:8080"
export https_proxy="http://192.168.87.123:8443"
如果永久生效需要寫在/etc/profile文件中
source /etc/pofile 進(jìn)行生效