WSS代理

非ban必选

已于 2024-09-10 17:42:54 修改

阅读量232

点赞数 2

分类专栏： Nginx 文章标签： nginx

于 2024-08-09 10:32:57 首次发布

本文链接：https://blog.csdn.net/zsj777/article/details/141055092

版权

Nginx 专栏收录该内容

33 篇文章 0 订阅

订阅专栏

需要代理的wss地址

wss://xy3jsdecoder.ys7.com:20006 外网地址无法直接访问

内网服务器地址 192.168.10.21，

中转服务器地址 test.yunytre.com，

中转服务器nginx配置wss代理，代理 wss://xy3jsdecoder.ys7.com:20006

 server {
          listen 20006 ssl;
          server_name test.yunytre.com;
          ssl_certificate /usr/local/ssl/test.yunytre.com.pem;
          ssl_certificate_key /usr/local/ssl/test.yunytre.com.key;
          ssl_session_timeout 5m;
          ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
          ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
          ssl_prefer_server_ciphers on;
      
          location / { 

            proxy_pass https://xy3jsdecoder.ys7.com:20006;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;##此处Upgrade注意大小写
            proxy_set_header Connection "Upgrade";
            proxy_set_header Remote_addr $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_connect_timeout 15s;
            proxy_send_timeout 3600s;
            proxy_read_timeout 3600s;
        }

生成的中转服务器的代理wss地址为

wss://test.yunytre.com:20006

内网服务器nginx配置，代理 wss://test.yunytre.com:20006

 server {
        listen       80;
        server_name  localhost;

     
        location / {
            root /opt/platform/web/;
            index  index.html index.htm;
         
        }

         location /prod-api/{
	         proxy_pass http://localhost:8080/;
	     }	
	
         
          location /ws { 
            proxy_pass https://test.yunytre.com:20006;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;##此处Upgrade注意大小写
            proxy_set_header Connection "Upgrade";
            proxy_set_header Remote_addr $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_connect_timeout 15s;
            proxy_send_timeout 3600s;
            proxy_read_timeout 3600s;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }

生成的内网的ws地址为 wss://192.168.10.21:80/ws 必须是SSL

内网连接 wss://192.168.10.21:80/ws即可