nginx 负载均衡与 rpc 转发

1、my_upstream 为自定义的 http 后端服务，配置了地址端口以及权重；

2、stream 块为 RPC 调用，my_rpc 为 RPC 项，配置了地址端口以及权重；

3、ssl_certificate 和 ssl_certificate_key 为 ssl 证书，需要保存到对应路径下；

4、nginx 命令：

        /usr/local/nginx/sbin/nginx                        // 启动

        /usr/local/nginx/sbin/nginx -s stop            // 关闭 nginx 服务

        /usr/local/nginx/sbin/nginx -s reload        // 加载 nginx 配置

5、编译指令：./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-stream

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    client_max_body_size 10m;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  120;

    #gzip  on;

    # 我的服务
    upstream my_upstream {
        server 192.168.0.101:28201 weight=1;
        server 192.168.0.102:28201 weight=1;
    }

    server {
        listen       443 ssl;
        server_name  server_name.com;

        ssl_certificate      /usr/local/nginx/ssl/my_nginx/my_nginx.pem;
        ssl_certificate_key  /usr/local/nginx/ssl/my_nginx/my_nginx.key;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        # 我的服务
        location /my_upstream/ {
            proxy_pass http://my_upstream/;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }

    # HTTPS server
    #
    #server {
    #    listen       80;
    #    server_name  localhost;
    #    return 301 https://$server_name$request_uri;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #     location / {
    #         root   html;
    #         index  index.html index.htm;
    #     }
    #}
}

# RPC 服务
stream {
    # my_rpc 服务
    upstream my_rpc {
        server 192.168.0.201:28202 weight=1;
        server 192.168.0.202:28202 weight=1;
    }
    server {
        listen       8080;
        proxy_pass   my_rpc;
    }
}