使用nginx做反向代理

安装Nginx

1、安装变异工具及库文件

yum -y install make zlib zlib-devel gcc-c++ libtool  openssl openssl-devel

2、安装PCRE

• 下载PCRE,让Nginx支持Rewrite功能.

cd /usr/local/src/
wget http://downloads.sourceforge.net/project/pcre/pcre/8.35/pcre-8.35.tar.gz

• 解压安装包

tar zxvf pcre-8.35.tar.gz

a

• 编译安装

cd pcre-8.35
./configure
make && make install

• 查看PCER版本(正常显示则表示安装成功)

pcre-config --version

3、安装Nginx

• 下载Nginx

cd /usr/local/src/
wget http://nginx.org/download/nginx-1.21.0.tar.gz

• 解压

tar zxvf nginx-1.21.0.tar.gz

• 安装

cd nginx-1.21.0
./configure --prefix=/usr/local/webserver/nginx --with-http_stub_status_module --with-http_ssl_module --with-pcre=/usr/local/src/pcre-8.35
make && make install

• 查看nginx版本(正常显示则表示安装成功)

/usr/local/webserver/nginx/sbin/nginx -v

4、配置Nginx

• 创建用户

/usr/sbin/groupadd www
/usr/sbin/useradd -g www www

• 配置Nginx

vim /usr/local/webserver/nginx/conf/nginx.conf

user www www;
worker_processes 2; #设置值和CPU核心数一致
error_log /usr/local/webserver/nginx/logs/nginx_error.log crit; #日志位置和日志级别
pid /usr/local/webserver/nginx/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 65535;
events
{
  use epoll;
  worker_connections 65535;
}
http
{
  include mime.types;
  default_type application/octet-stream;
  log_format main  '$remote_addr - $remote_user [$time_local] "$request" '
               '$status $body_bytes_sent "$http_referer" '
               '"$http_user_agent" $http_x_forwarded_for';

#charset gb2312;

  server_names_hash_bucket_size 128;
  client_header_buffer_size 32k;
  large_client_header_buffers 4 32k;
  client_max_body_size 8m;

  sendfile on;
  tcp_nopush on;
  keepalive_timeout 60;
  tcp_nodelay on;
  fastcgi_connect_timeout 300;
  fastcgi_send_timeout 300;
  fastcgi_read_timeout 300;
  fastcgi_buffer_size 64k;
  fastcgi_buffers 4 64k;
  fastcgi_busy_buffers_size 128k;
  fastcgi_temp_file_write_size 128k;
  gzip on;
  gzip_min_length 1k;
  gzip_buffers 4 16k;
  gzip_http_version 1.0;
  gzip_comp_level 2;
  gzip_types text/plain application/x-javascript text/css application/xml;
  gzip_vary on;

  #limit_zone crawler $binary_remote_addr 10m;

 server
  {
    listen 80;
    server_name xx1.xxx.xxx;

    location / {
        proxy_pass http://192.168.7.179:8080;
    }
  }
 server
  {
    listen 80;
    server_name xx1.xxx.xxx;

    location / {
        proxy_pass http://192.168.7.179:8081;
    }
  }
 server
  {
    listen 80;
    server_name xx2.xxx.xxx;

    location / {
        proxy_pass http://192.168.7.179:8082;
    }
  }
}

• 检查配置文件正确性

/usr/local/webserver/nginx/sbin/nginx -t

5、启动Nginx

• 启动

/usr/local/webserver/nginx/sbin/nginx

配置防火墙

• 查看已开放的端口

firewall-cmd --list-ports

• 开启端口

firewall-cmd --zone=public --add-port=8080/tcp --permanent

命令含义：
–zone #作用域
–add-port=80/tcp #添加端口，格式为：端口/通讯协议
–permanent #永久生效，没有此参数重启后失效

• 重启防火墙

firewall-cmd --reload #重启firewall
systemctl stop firewalld.service #停止firewall
systemctl disable firewalld.service #禁止firewall开机启动
firewall-cmd --state #查看默认防火墙状态（关闭后显示notrunning，开启后显示running）

部署服务

这里按实际情况操作
我这边三个服务分别监听8080 8081 8082端口

nohup go run crmOricoCn.go &go run opdOricoCn.go &go run usOricoCn.go &

修改服务器hosts

vim /etc/hosts
127.0.0.1:8080 xx1.xxx.xx
127.0.0.1:8081 xx2.xxx.xx
127.0.0.1:8082 xx3.xxx.xx

没写完,有问题直接问我