NGINX配置

多IP转发

upstream ***_pro_server_list{
        ip_hash; // 能够进行路由分发选择
        server 172.16.161.217:9091;
        server 172.16.161.218:9091;
}

请求路由转发

location /***/ {
                        proxy_set_header Host $host;
                        proxy_set_header  X-Real-IP        $remote_addr;
                        proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
                        proxy_set_header X-NginX-Proxy true;
                        proxy_pass http://***_server_list/;
                        # 开启代理缓冲区
                        proxy_buffering on;
                        # 响应头的缓冲区设为32k
                        proxy_buffer_size 32k;
                        # 网页内容缓冲区个数为4，单个大小为128k
                        proxy_buffers 4 128k;
                        proxy_busy_buffers_size 256k;
                        # 缓冲区临时文件最大为 256k
                        proxy_max_temp_file_size 256k;
        }

流式路由转发

location /api/upload/ {
           add_header 'Access-Control-Allow-Origin' '*';
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
           proxy_pass 'https://***/upload/';
           proxy_read_timeout  3600;
   }

socket路由支持

# enables WS support
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection  "upgrade";
proxy_read_timeout  3600;

基本配置

## 全局变量
include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    client_max_body_size 5120m;

    log_format  main  ' $remote_user [$time_local]  $http_x_Forwarded_for $remote_addr  $request '
                      '$http_x_forwarded_for '
                      '$upstream_addr '
                      'ups_resp_time: $upstream_response_time '
                      'request_time: $request_time';

	access_log  /var/log/nginx/access.log  main;
	#    client_max_body_size 300m;
	sendfile        on;
	#tcp_nopush     on;
	
	keepalive_timeout  65;
	
	#gzip  on;
	
	include /etc/nginx/conf.d/*.conf;

静态安全策略（防止文件和文件夹遍历）

location ~ \/$ {
       root    /data01/403;
        expires 20;
}

IP分发策略

location ~ "/(?<ip>\d{0,3}\.\d{0,3}\.\d{0,3}\.\d{0,3})/(?<port>\d{2,4})/(?<posturl>.*)" {
                proxy_set_header Host $host;
                proxy_set_header  X-Real-IP        $remote_addr;
                proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
                proxy_set_header X-NginX-Proxy true;
                add_header 'Access-Control-Allow-Origin' '*';
                proxy_pass http://$ip:$port/$posturl;
        }