话不多说,直接上代码:
worker_processes 1;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
//关闭生产环境Nginx的访问日志.没有作用,仅保留错误err日志就好.
#access_log off;
upstream favyapi {
server 转发地址;
keepalive 32;
}
upstream paycenter {
server 转发地址;
keepalive 32;
}
sendfile on;
#tcp_nopush on;
keepalive_timeout 60s;
keepalive_requests 1000;
#gzip on;
//http访问的时候,转发至此
server {
listen 80;
server_name localhost;
location / {
proxy_pass http://paycenter;
proxy_http_version 1.1;
proxy_set_header Connection "";
}
}
# HTTPS server
server {
listen 443 ssl http2;
server_name localhost;
ssl_certificate /usr/local/nginx/certs/cacert.pem;
ssl_certificate_key /usr/local/nginx/certs/privkey.pem;
//设置ssl密钥的内存大小
ssl_session_cache shared:SSL:1m;
//设置保存时间
ssl_session_timeout 5m;
//加密组件
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
//https的时候,转发至此
location / {
proxy_pass http://favyapi;
proxy_http_version 1.1;
proxy_set_header Connection "";
}
}
}
在同一个服务器中做转发的时候,请给内网ip.不需要外网的