Nginx配置以及域名轉發

時間 2019-11-05

標籤 nginx 配置以及域名轉發欄目 Nginx 简体版

原文原文鏈接

工程中的nginx配置

#user  nobody;
worker_processes  24;
error_log   /home/xxx/opt/nginx/logs/error.log;
pid         /home/xxx/opt/nginx/run/nginx.pid;


events {
    use epoll;
    worker_connections  102400;
}

http {
    include /home/xxx/opt/nginx/conf.d/mime.types;
    default_type  application/octet-stream;
    log_format main  '$upstream_response_time $request_time $remote_addr - $remote_user [$time_local] [$http_true_client_ip] '
                     '$upstream_addr $http_host $request $request_body "$status" $body_bytes_sent "$http_referer" '
                     '"$http_accept_language" "$http_user_agent" "$http_x_forwarded_for" ';


    log_format json '{ "@timestamp": "$time_iso8601", '
                       '"response_time": "$upstream_response_time", '
                       '"request_time": $request_time, '
                       '"remote_addr": "$remote_addr", '
                       '"remote_user": "$remote_user", '
                       '"upstream_addr": "$upstream_addr", '
                       '"http_host": "$http_host", '
                       '"request": "$request", '
                       '"status": $status, '
                       '"body_bytes_sent": $body_bytes_sent, '
                       '"http_referer": "$http_referer", '
                       '"verb": "$request_method", '
                       '"url":"$request_uri", '
                       '"http_accept_language": "$http_accept_language", '
                       '"x_forwarded_for": "$http_x_forwarded_for", '
                       '"agent": "$http_user_agent" }';

    access_log  /home/xxx/opt/nginx/logs/access.log  main;
    fastcgi_intercept_errors on;
    charset utf-8;
    server_names_hash_bucket_size 128;
    fastcgi_buffers 8 128k;
    server_tokens off;
    client_header_buffer_size 4k;
    large_client_header_buffers 4 32k;
    client_max_body_size 300m;
    sendfile on;
    tcp_nopush on;
    keepalive_timeout 60;
    tcp_nodelay on;
    client_body_buffer_size 512k;
    proxy_connect_timeout 5;
    proxy_read_timeout 60;
    proxy_send_timeout 5;
    proxy_ignore_client_abort on;
    proxy_buffer_size 16k;
    proxy_buffers 4 64k;
    proxy_busy_buffers_size 128k;
    proxy_temp_file_write_size 128k;
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.1;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript application/javascript text/css application/xml;
    gzip_vary on;
    limit_conn_zone $binary_remote_addr zone=addr:10m;
    limit_req_zone $binary_remote_addr zone=hbhs:10m rate=1r/s;

    #cache begin
    proxy_buffering on;
    proxy_cache_valid 200 304 301 302 10d;
    proxy_cache_path /home/xxx/data/nginx/cache levels=1:2 keys_zone=mycache:8m max_size=1000m inactive=600m;
    proxy_temp_path /home/xxx/data/nginx/temp;
    #cache end

    #add_header X-Frame-Options SAMEORIGIN;
    include /home/xxx/opt/nginx/conf.d/*.conf;
    max_ranges 1;
}

　　nginx配置詳解參考：Nginx配置文件（nginx.conf）配置詳解javascript

　　 include /home/xxx/opt/nginx/conf.d/mime.types;css

MIME-type和Content-Type的關係：
當web服務器收到靜態的資源文件請求時，依據請求文件的後綴名在服務器的MIME配置文件中找到對應的MIME Type，再根據MIME Type設置HTTP Response的Content-Type，而後瀏覽器根據Content-Type的值處理文件。

types {
    Content-Type                          文件名後綴    

    text/html                             html htm shtml;
    text/css                              css;
    text/xml                              xml;
    image/gif                             gif;
    image/jpeg                            jpeg jpg;
    application/javascript                js;
    application/atom+xml                  atom;
    application/rss+xml                   rss;

    text/mathml                           mml;
    text/plain                            txt;
    text/vnd.sun.j2me.app-descriptor      jad;
    text/vnd.wap.wml                      wml;
    text/x-component                      htc;

    image/png                             png;
    image/tiff                            tif tiff;
    image/vnd.wap.wbmp                    wbmp;
    image/x-icon                          ico;
    image/x-jng                           jng;
    image/x-ms-bmp                        bmp;
    image/svg+xml                         svg svgz;
    image/webp                            webp;

    application/font-woff                 woff;
    application/java-archive              jar war ear;
    application/json                      json;
    application/mac-binhex40              hqx;
    application/msword                    doc;
    application/pdf                       pdf;
    application/postscript                ps eps ai;
    application/rtf                       rtf;
    application/vnd.apple.mpegurl         m3u8;
    application/vnd.ms-excel              xls;
    application/vnd.ms-fontobject         eot;
    application/vnd.ms-powerpoint         ppt;
    application/vnd.wap.wmlc              wmlc;
    application/vnd.google-earth.kml+xml  kml;
    application/vnd.google-earth.kmz      kmz;
    application/x-7z-compressed           7z;
    application/x-cocoa                   cco;
    application/x-java-archive-diff       jardiff;
    application/x-java-jnlp-file          jnlp;
    application/x-makeself                run;
    application/x-perl                    pl pm;
    application/x-pilot                   prc pdb;
    application/x-rar-compressed          rar;
    application/x-redhat-package-manager  rpm;
    application/x-sea                     sea;
    application/x-shockwave-flash         swf;
    application/x-stuffit                 sit;
    application/x-tcl                     tcl tk;
    application/x-x509-ca-cert            der pem crt;
    application/x-xpinstall               xpi;
    application/xhtml+xml                 xhtml;
    application/xspf+xml                  xspf;
    application/zip                       zip;

    application/octet-stream              bin exe dll;
    application/octet-stream              deb;
    application/octet-stream              dmg;
    application/octet-stream              iso img;
    application/octet-stream              msi msp msm;

    application/vnd.openxmlformats-officedocument.wordprocessingml.document    docx;
    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet          xlsx;
    application/vnd.openxmlformats-officedocument.presentationml.presentation  pptx;

    audio/midi                            mid midi kar;
    audio/mpeg                            mp3;
    audio/ogg                             ogg;
    audio/x-m4a                           m4a;
    audio/x-realaudio                     ra;

    video/3gpp                            3gpp 3gp;
    video/mp2t                            ts;
    video/mp4                             mp4;
    video/mpeg                            mpeg mpg;
    video/quicktime                       mov;
    video/webm                            webm;
    video/x-flv                           flv;
    video/x-m4v                           m4v;
    video/x-mng                           mng;
    video/x-ms-asf                        asx asf;
    video/x-ms-wmv                        wmv;
    video/x-msvideo                       avi;
}

　　參考：nginx proxy_pass和rewrite的區別 Nginx之proxy_redirect詳解　　html

location基本配置

 location /A/B{
          proxy_pass  http://XXX.com/A/B;#請求轉向定義的服務器列表
          #proxy_redirect off;
          proxy_set_header Host XXX.com;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size 10m;    #容許客戶端請求的最大單文件字節數
          client_body_buffer_size 128k;  #緩衝區代理緩衝用戶端請求的最大字節數，
          proxy_connect_timeout 180;  #nginx跟後端服務器鏈接超時時間(代理鏈接超時)
          proxy_send_timeout 180;        #後端服務器數據回傳時間(代理髮送超時)
          proxy_read_timeout 180;         #鏈接成功後，後端服務器響應時間(代理接收超時)
          proxy_buffer_size 128k;             #設置代理服務器（nginx）保存用戶頭信息的緩衝區大小
          proxy_buffers 4 256k;               #proxy_buffers緩衝區，網頁平均在32k如下的話，這樣設置
          proxy_busy_buffers_size 512k;    #高負荷下緩衝大小（proxy_buffers*2）
          proxy_temp_file_write_size 512k;  #設定緩存文件夾大小，大於這個值，將從upstream服務器傳
    }

參考：微信網頁受權流程

nginx配置域名轉發

　　場景：有兩個微信公衆號A、B，微信公衆號管理平臺配置的回調url分別是 http://A.com、http://B.com。微信公衆號B若是須要獲取微信公衆號A的用戶信息，對應的受權URL以下。

https://open.weixin.qq.com/connect/oauth2/authorize?appid=wx43a850f87498127d&redirect_uri=http%3A%2F%2FA.com%2F&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect

這樣就會面臨一個問題，微信公衆號B就沒法獲取到code信息了。

騰訊返回的受權碼URL:    http://A.com/?code=001Rk8ue1Ntnxz0udwue1kbUte1Rk8uU&state=STATE

因此須要微信公衆號A對應的Nginx作一下域名轉發，以下。

微信公衆號A對應的Nginx配置（實現域名轉發，將微信公衆號A對應的域名轉發成微信公衆號B對應的域名）

location /微信公衆號B標識/XXX {
                rewrite ^/微信公衆號B標識/(.*) http://B.com/$1 permanent;
                proxy_set_header Host B.com;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                client_max_body_size 20m;
                client_body_buffer_size 128k;
                proxy_connect_timeout 90;
                proxy_send_timeout 90;
                proxy_read_timeout 90;
                proxy_buffer_size 4k;
                proxy_buffers 4 32k;
                proxy_busy_buffers_size 64K;
                proxy_temp_file_write_size 64k;
        }

　　上面的方案是基於永久重定向，瀏覽器的URL會發生變化。java

　　另外一種方案是基於nginx代理的，可是須要公衆號A、B使用同一個域名。這種方案也支持自定義連接分享【若是兩個公衆號使用不一樣的域名，自定義連接分享必然出現無效的簽名這種問題】。node

location /微信公衆號B標識/XXX {
     proxy_pass  http://B.com/微信公衆號B標識/XXX/YYY;
     proxy_redirect off;
     proxy_set_header Host B.com;
     proxy_ignore_client_abort on;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     client_max_body_size 10m;
     client_body_buffer_size 128k;
     proxy_connect_timeout 8;
     proxy_send_timeout 1800;
     proxy_read_timeout 1800;
     proxy_buffer_size 128k;
     proxy_buffers 4 256k;
     proxy_busy_buffers_size 512k;
     proxy_temp_file_write_size 512k;
}

相關標籤/搜索

每日一句

每一个你不满意的现在，都有一个你没有努力的曾经。