有两个服务,从A到B,由A发启请求到B,A会带上Authorization的请求头,和B服务所允许的请求头所冲突
解决办法:加一个中间层(nginx)
本地示例,使用nginx(windows):修改nginx-1.26.2\conf\nginx.conf
proxy_set_header Authorization "";
proxy_pass http://localhost:8081;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
下面的代码会把请求localhost:8089的转发到localhost8081,并把请求头字段去掉
worker_processes 1;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
server {
listen 8089;
server_name localhost;
location / {
proxy_set_header Authorization "";
proxy_pass http://localhost:8081;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
root dist;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
docker版本的,先打个镜像包
# 使用官方的 Nginx 基础镜像
FROM nginx
# 更新包列表并安装网络测试工具
RUN apt-get update && apt-get install -y \
iputils-ping \
traceroute \
dnsutils \
net-tools \
telnet
EXPOSE 80
然后改容器里的配置etc\nginx\nginx.conf
下面的配置会把到23.88.32.89:8080的请求转发到21.48.33.10:8088
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
include /etc/nginx/conf.d/*.conf;
server {
listen 8080; # 监听端口
server_name 23.88.32.89; # 服务器名称
location / {
proxy_set_header Authorization "";
proxy_pass http://21.48.33.10:8088;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
root html;
index index.html index.htm;
}
}
}
# stream 模块配置
stream {
# 定义一个 TCP 代理
server {
listen 12345; # 监听的 TCP 端口
proxy_pass backend_tcp_server:5678; # 转发到的 TCP 目标服务器和端口
}
}
在配置不要使用80端口:权限问题,防火墙限制,端口被占用
如果后端的地址有多个:
upstream
块:借助upstream
块定义了一个名为backend_servers
的负载均衡器,其中列出了所有后端服务器及其端口。在这个例子中,有两个后端服务器:21.48.33.10:8088
和21.48.33.10:8089
。proxy_pass
指令:在location
块里,把proxy_pass
指令的值从具体的后端服务器地址修改为负载均衡器的名称http://backend_servers
。这样一来,Nginx 就会依据负载均衡算法(默认是轮询)把请求转发到后端服务器。
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
include /etc/nginx/conf.d/*.conf;
# 定义负载均衡组
upstream backend_servers {
server 21.48.33.10:8088;
server 另一个后端地址:端口号; # 替换为实际的后端地址和端口
}
server {
listen 8080; # 监听端口
server_name 23.88.32.89; # 服务器名称
location / {
proxy_set_header Authorization "";
proxy_pass http://backend_servers; # 使用负载均衡组
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
root html;
index index.html index.htm;
}
}
}
# stream 模块配置
stream {
# 定义一个 TCP 代理
server {
listen 12345; # 监听的 TCP 端口
proxy_pass backend_tcp_server:5678; # 转发到的 TCP 目标服务器和端口
}
}
如果根据前端的不同路由去匹配不同的后端的话
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
include /etc/nginx/conf.d/*.conf;
# 定义第一个后端服务器组
upstream backend1 {
server 192.168.1.100:8080;
}
# 定义第二个后端服务器组
upstream backend2 {
server 192.168.1.101:8081;
}
server {
listen 80;
server_name example.com;
# 匹配 /api1 开头的路由,转发到 backend1
location /api1 {
proxy_pass http://backend1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
# 匹配 /api2 开头的路由,转发到 backend2
location /api2 {
proxy_pass http://backend2;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
# 默认匹配,可根据需要修改
location / {
root html;
index index.html index.htm;
}
}
}
# stream 模块配置
stream {
# 定义一个 TCP 代理
server {
listen 12345; # 监听的 TCP 端口
proxy_pass backend_tcp_server:5678; # 转发到的 TCP 目标服务器和端口
}
}