nginx

有两个服务,从A到B,由A发启请求到B,A会带上Authorization的请求头,和B服务所允许的请求头所冲突

解决办法:加一个中间层(nginx)

本地示例,使用nginx(windows):修改nginx-1.26.2\conf\nginx.conf

            proxy_set_header Authorization "";
            proxy_pass http://localhost:8081;
            
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

下面的代码会把请求localhost:8089的转发到localhost8081,并把请求头字段去掉

worker_processes  1;
events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;


    server {
        listen       8089;
        server_name  localhost;

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://localhost:8081;
            
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            root   dist;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

}

docker版本的,先打个镜像包

# 使用官方的 Nginx 基础镜像
FROM nginx

# 更新包列表并安装网络测试工具
RUN apt-get update && apt-get install -y \
    iputils-ping \
    traceroute \
    dnsutils \
    net-tools \
    telnet

EXPOSE 80
    

然后改容器里的配置etc\nginx\nginx.conf

下面的配置会把到23.88.32.89:8080的请求转发到21.48.33.10:8088

user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    server {
        listen 8080;  # 监听端口
        server_name 23.88.32.89;  # 服务器名称

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://21.48.33.10:8088;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}

在配置不要使用80端口:权限问题,防火墙限制,端口被占用

如果后端的地址有多个:

  1. upstream 块:借助 upstream 块定义了一个名为 backend_servers 的负载均衡器,其中列出了所有后端服务器及其端口。在这个例子中,有两个后端服务器:21.48.33.10:8088 和 21.48.33.10:8089
  2. proxy_pass 指令:在 location 块里,把 proxy_pass 指令的值从具体的后端服务器地址修改为负载均衡器的名称 http://backend_servers。这样一来,Nginx 就会依据负载均衡算法(默认是轮询)把请求转发到后端服务器。
user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    # 定义负载均衡组
    upstream backend_servers {
        server 21.48.33.10:8088;
        server 另一个后端地址:端口号;  # 替换为实际的后端地址和端口
    }

    server {
        listen 8080;  # 监听端口
        server_name 23.88.32.89;  # 服务器名称

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://backend_servers;  # 使用负载均衡组
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}    

如果根据前端的不同路由去匹配不同的后端的话

user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    # 定义第一个后端服务器组
    upstream backend1 {
        server 192.168.1.100:8080;
    }

    # 定义第二个后端服务器组
    upstream backend2 {
        server 192.168.1.101:8081;
    }

    server {
        listen 80;
        server_name example.com;

        # 匹配 /api1 开头的路由,转发到 backend1
        location /api1 {
            proxy_pass http://backend1;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        # 匹配 /api2 开头的路由,转发到 backend2
        location /api2 {
            proxy_pass http://backend2;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        # 默认匹配,可根据需要修改
        location / {
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}    

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

每天吃饭的羊

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值