Nginx反向代理配置

Nginx反向代理配置

概述

Nginx 不仅可以做反向代理，还能用作正向代理来进行上网等功能，正向代理：如果把局域网外的 Internet 想象成一个巨大的资源库，则局域网中的客户端要访问 Internet，则需要通过代理服务器来访问，这种代理服务就称为正向代理。对于反向代理，客户端对代理是无感知的，因为客户端不需要任何配置就可以访问，我们只需要将请求发送到反向代理服务器，由反向代理服务器去选择目标服务器获取数据后，在返回给客户端，此时反向代理服务器和目标服务器对外就是一个服务器，暴露的是代理服务器地址，隐藏了真实服务器 IP 地址。

配置反向代理实例1

实现效果
打开浏览器，在浏览器地址栏输入地址：http://www.123.com，跳转到 Liunx 系统 Tomcat 主页面中。

实现思路

实现步骤
步骤一：修改Windows中的hosts域名映射

复制 C:\Windows\System32\drivers\etc\hosts 到桌面，右键记事本打开，在里边加上以下代码保存，然后再复制回去，不要直接修改，会不让保存！

虚拟机域名 映射的网址

192.168.206.128 www.123.com

步骤二：修改Nginx中的配置文件并启动

 vim /usr/local/nginx/softwore/conf/nginx.conf

  server {
        listen       80;
        server_name  192.168.206.128;
        #charset koi8-r;
        #access_log  logs/host.access.log  main;
        location / {
            proxy_pass http:127.0.0.1:8080;
            root   html;
            index  index.html index.htm;
        }

 /usr/local/softwore/nginx/sbin/nginx

步骤三：下载Tomcat、解压Tomcat、安装Tomcat、启动Tomcat

注意：Tomcat启动需要JDK，在这里我没有安装，使用系统自带的OpenJDK Runtime Environment (rhel-2.6.14.10.el6-x86_64 u181-b00)

下载：

wget https://mirror.bit.edu.cn/apache/tomcat/tomcat-7/v7.0.105/bin/apache-tomcat-7.0.105.tar.gz

解压：

tar -zxvf apache-tomcat-7.0.105.tar.gz

安装：

 mv apache-tomcat-7.0.105 /usr/local/softwore/tomcat

启动：

/usr/local/softwore/tomcat/bin/startup.sh    

1添加到防火墙：

 /sbin/iptables -I INPUT -p tcp --dport 80 -j ACCEPT
 /etc/rc.d/init.d/iptables save

如果关闭请用：

 /usr/local/softwore/tomcat/bin/shutdown.sh

关闭服务

 /usr/local/softwore/nginx/sbin/nginx -s quit
 /usr/local/softwore/tomcat/bin/shutdown.sh

配置反向代理实例2

实现效果
使用 nginx 反向代理，根据访问的路径跳转到不同端口的服务中。

实现思路

实现步骤
步骤一：修改Nginx的配置文件，然后启动

vim /usr/local/softwore/nginx/conf/nginx.conf

server {
     listen       80;
     server_name  192.168.206.128;

     #charset koi8-r;
 
     #access_log  logs/host.access.log  main;
 
     location ~ /edu/ {
         proxy_pass http://127.0.0.1:8080;
     }
 
     location ~ /vod/ {
         proxy_pass http://127.0.0.1:8081;
     }
}

/usr/local/softwore/nginx/sbin/nginx

步骤二：拷贝两个Tomcat，将其中一个的端口信息修改为8081，开启防火墙，然后分别启动这两台Tomcat

解压：

 tar -zxvf apache-tomcat-7.0.105.tar.gz
 mv apache-tomcat-7.0.105 /usr/local/softwore/tomcat1
 tar -zxvf apache-tomcat-7.0.105.tar.gz
 mv apache-tomcat-7.0.105 /usr/local/softwore/tomcat2

删除：

 rm -f /usr/local/softwore/tomcat2/conf/server.xml

添加：

 vi /usr/local/softwore/tomcat2/conf/server.xml

<?xml version='1.0' encoding='utf-8'?>

<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at
      http://www.apache.org/licenses/LICENSE-2.0
  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->

<!-- Note:  A "Server" is not itself a "Container", so you may not
     define subcomponents such as "Valves" at this level.
     Documentation at /docs/config/server.html
 -->

<Server port="8006" shutdown="SHUTDOWN">
  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
  <!-- Security listener. Documentation at /docs/config/listeners.html
  <Listener className="org.apache.catalina.security.SecurityListener" />
  -->
  <!--APR library loader. Documentation at /docs/apr.html -->
  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
  <Listener className="org.apache.catalina.core.JasperListener" />
  <!-- Prevent memory leaks due to use of particular java/javax APIs-->
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
  <!-- Global JNDI resources
       Documentation at /docs/jndi-resources-howto.html
  -->
  <GlobalNamingResources>
    <!-- Editable user database that can also be used by
         UserDatabaseRealm to authenticate users
    -->
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>
  <!-- A "Service" is a collection of one or more "Connectors" that share
       a single "Container" Note:  A "Service" is not itself a "Container",
       so you may not define subcomponents such as "Valves" at this level.
       Documentation at /docs/config/service.html
   -->
  <Service name="Catalina">
    <!--The connectors can use a shared executor, you can define one or more named thread pools-->
    <!--
    <Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
        maxThreads="150" minSpareThreads="4"/>
    -->
    <!-- A "Connector" represents an endpoint by which requests are received
         and responses are returned. Documentation at :
         Java HTTP Connector: /docs/config/http.html (blocking & non-blocking)
         Java AJP  Connector: /docs/config/ajp.html
         APR (HTTP/AJP) Connector: /docs/apr.html
         Define a non-SSL HTTP/1.1 Connector on port 8080
    -->
    <Connector port="8081" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8444" />
    <!-- A "Connector" using the shared thread pool-->
    <!--
    <Connector executor="tomcatThreadPool"
               port="8081" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8444" />
    -->
    <!-- Define an SSL HTTP/1.1 Connector on port 8443
         This connector uses the BIO implementation that requires the JSSE
         style configuration. When using the APR/native implementation, the
         OpenSSL style configuration is required as described in the APR/native
         documentation -->
    <!--
    <Connector port="8444" protocol="org.apache.coyote.http11.Http11Protocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
    -->
    <!-- Define an AJP 1.3 Connector on port 8009 -->
    <!--
    <Connector protocol="AJP/1.3"
               address="::1"
               port="8010"
               redirectPort="8444" />
    -->
    <!-- An Engine represents the entry point (within Catalina) that processes
         every request.  The Engine implementation for Tomcat stand alone
         analyzes the HTTP headers included with the request, and passes them
         on to the appropriate Host (virtual host).
         Documentation at /docs/config/engine.html -->
    <!-- You should set jvmRoute to support load-balancing via AJP ie :
    <Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1">
    -->
    <Engine name="Catalina" defaultHost="localhost">
      <!--For clustering, please take a look at documentation at:
          /docs/cluster-howto.html  (simple how to)
          /docs/config/cluster.html (reference documentation) -->
      <!--
      <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
      -->
      <!-- Use the LockOutRealm to prevent attempts to guess user passwords
           via a brute-force attack -->
      <Realm className="org.apache.catalina.realm.LockOutRealm">
        <!-- This Realm uses the UserDatabase configured in the global JNDI
             resources under the key "UserDatabase".  Any edits
             that are performed against this UserDatabase are immediately
             available for use by the Realm.  -->
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
               resourceName="UserDatabase"/>
      </Realm>
      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true">
        <!-- SingleSignOn valve, share authentication between web applications
             Documentation at: /docs/config/valve.html -->
        <!--
        <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
        -->
        <!-- Access log processes all example.
             Documentation at: /docs/config/valve.html
             Note: The pattern used is equivalent to using pattern="common" -->
        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log." suffix=".txt"
               pattern="%h %l %u %t "%r" %s %b" />
      </Host>
    </Engine>
  </Service>
</Server>

开启Tomcat2的防火墙：

/sbin/iptables -I INPUT -p tcp --dport 8081 -j ACCEPT
/etc/rc.d/init.d/iptables save

在每一个Tomcat的webapps中创建一个文件夹和一个a.html文件：

 mkdir -p /usr/local/softwore/tomcat1/webapps/edu
 echo "<h1>This is 8080 Port</h1>" > /usr/local/softwore/tomcat1/webapps/edu/a.html

mkdir -p /usr/local/softwore/tomcat2/webapps/vod
 echo "<h1>This is 8081 Port</h1>" > /usr/local/softwore/tomcat2/webapps/vod/a.html

启动：

 /usr/local/softwore/tomcat1/bin/startup.sh
 /usr/local/softwore/tomcat2/bin/startup.sh

步骤三：打开本机浏览器进行测试

在浏览器输入 http://192.168.206.128/edu/a.html

在浏览器输入 http://192.168.206.128/vod/a.html

关闭服务

/usr/local/softwore/nginx/sbin/nginx -s quit
/usr/local/softwore/tomcat1/bin/shutdown.sh
/usr/local/softwore/tomcat2/bin/shutdown.sh