wss配置

最新推荐文章于 2024-07-16 10:17:06 发布

ppplaybook

最新推荐文章于 2024-07-16 10:17:06 发布

阅读量796

点赞数

分类专栏： linux基础知识

本文链接：https://blog.csdn.net/weixin_42768584/article/details/115144805

版权

linux基础知识专栏收录该内容

13 篇文章 1 订阅

订阅专栏

该配置文件展示了如何使用Nginx作为反向代理，转发HTTPS请求到两个不同的WebSocket服务，分别是`wechatApplets.tt2kj.com`和`1.1.18.230:25952`。配置中包含了SSL证书设置，以及保持WebSocket连接的必要Header设置。

摘要由CSDN通过智能技术生成

     upstream wechatApplets2 {
    server  8.8.8.8:7898 weight=1;

}
server {
    listen       443 ssl;
    server_name  wechatapplets.tt2kj.com;
    access_log   /var/log/nginx/wechatapplets.abcd.com.access.log;
    error_log    /var/log/nginx/wechatapplets.abcd.com.error.log;
    # 需要准备好证书
    ssl_certificate /etc/pki/nginx/4830341_wechatapplets.abcd.com.pem;
    ssl_certificate_key /etc/pki/nginx/4830341_wechatapplets.abcd.com.key;
    
    #ssl_session_cache    shared:SSL:1m;
    # ssl_session_timeout  5m;
    #协议配置
    # ssl_protocols TLSv1 TLSv1.1 TLSv1.2;  
    ssl_protocols SSLv3 SSLv2 TLSv1 TLSv1.1 TLSv1.2;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  10m;
    ssl_prefer_server_ciphers on;
    # ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
     # 转发到http
    location / {
       # 转发ws地址
       proxy_pass http://wechatApplets;
       proxy_http_version 1.1;
       proxy_set_header Upgrade $http_upgrade;
       #由于服务器端源码(建议大家做好大小写匹配)只匹配了"Upgrade"字符串,所以如果这里填"upgrade"服务器端会将这条http请求当成普通的请求,导致websocket握手失败
       proxy_set_header Connection "Upgrade";
       proxy_set_header Remote_addr $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_read_timeout 600s;
    }
location /abcd{
       # 转发ws地址
       proxy_pass http://1.1.18.230:25952;
       proxy_http_version 1.1;
       proxy_set_header Upgrade $http_upgrade;
       #由于服务器端源码(建议大家做好大小写匹配)只匹配了"Upgrade"字符串,所以如果这里填"upgrade"服务器端会将这条http请求当成普通的请求,导致websocket握手失败
       proxy_set_header Connection "Upgrade";
       proxy_set_header Remote_addr $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_read_timeout 600s;
}

}