Nginx优化: 开启HTTP2

坐公交也用券

已于 2023-02-25 11:52:38 修改

阅读量767

点赞数

分类专栏： Nginx 文章标签： nginx ssl https

于 2023-02-25 11:51:46 首次发布

坐公交也用券

本文链接：https://blog.csdn.net/qq_36154886/article/details/129213853

版权

Nginx 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

文章介绍了如何在Nginx中启用Http2协议以提升性能，主要步骤包括确保已经开启HTTPS，然后在监听配置中添加http2以及指定SSL协议和密码套件。通过浏览器的开发者工具可以验证Http2协议是否成功开启。

摘要由CSDN通过智能技术生成

Http2作为新的协议，相比http1.2性能更好,使用Nginx开启Http2也很简单,只需要满足下面的条件即可

已开启Https

然后

在监听配置后面加上http2
加入ssl_protocols TLSv1 TLSv1.2;
加入ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

如下:

root@l:~/data/nginx# cat conf.d/liumou.conf 
upstream halo {
 	server 127.0.0.1:8080;
}
upstream https {
	server cx.liumou.site:443;
}

server {	
    listen 443 ssl http2; # 加入http2
    server_name liumou.site; 
    ssl_certificate  /usr/share/nginx/html/liumou.site_bundle.crt; 
    ssl_certificate_key /usr/share/nginx/html/liumou.site.key; 
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_protocols TLSv1  TLSv1.2;
    ssl_prefer_server_ciphers on;
    location / {
    	proxy_pass http://halo;
	proxy_set_header HOST $host;
    	proxy_set_header X-Forwarded-Proto $scheme;
    	proxy_set_header X-Real-IP $remote_addr;
    	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /admin {
	deny    all;
    }
    location /arch {
	deny all;
    }

    access_log  /var/log/nginx/access-liumou.log  main;
}

server {
  listen 80;
  listen [::]:80;
  server_name liumou.site;
  client_max_body_size 1024m;
  location / {
    proxy_pass http://halo;
    proxy_set_header HOST $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
   if ($host ~* "^liumou.site$") {
       rewrite ^/(.*)$ https://liumou.site/ permanent;
    }
  error_page 404  https://liumou.site;
  error_page 497  https://liumou.site;
  error_page 301  https://liumou.site;
}