Nginx配置Websocket反向代理

最新推荐文章于 2024-03-14 08:21:03 发布

IT大师

最新推荐文章于 2024-03-14 08:21:03 发布

阅读量1.3k

点赞数 1

分类专栏： websocket 文章标签： nginx websocket ssl

本文链接：https://blog.csdn.net/weixin_43244841/article/details/129097517

版权

websocket 专栏收录该内容

4 篇文章 0 订阅

订阅专栏

websocket服务使用 spring-boot-starter-websocket 来开发的

# websocket message服务
upstream websocket_message {
    server 172.16.152.198:32763;
    server 172.16.152.199:32763;
    server 172.16.152.200:32763;
}
 
map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}
 
#支持ws://协议
server {
    listen 80;
    server_name websocket.xxxx.com;
    location / {
        proxy_pass http://websocket_message;
        proxy_http_version 1.1;
        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}
 
#支持wss://协议
server {
    listen 443 ssl;
    server_name websocket.xxxx.com;
    index index.html index.htm index.php;
 
    access_log /var/log/nginx/websocket.xxxx.com_access.log;
    error_log /var/log/nginx/websocket.xxxx.com_error.log;
 
    ssl_certificate   cert/xxx.pem;
    ssl_certificate_key  cert/xxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    keepalive_timeout 86400s;
 
    location / {
        proxy_pass http://websocket_message;
        proxy_http_version 1.1;
        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        #下面是关键的两行
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}

本地安装websocket工具

npm install -g wscat

$ npm install -g wscat
# 直接访问服务，不走nginx代理尝试是否正常，返回 Connected (press CTRL+C to quit) connection ok 表示正常
$ wscat -c ws://172.16.152.200:32763/webSocket/xxxxxxx
# 访问nginx反向代理地址尝试nginx代理是否配置正确(80/443)
$ wscat -c wss://websocket.xxxx.com/webSocket/xxxxxxx
$ wscat -c ws://websocket.xxxx.com/webSocket/xxxxxxx