{"id":391,"date":"2023-05-28T01:46:04","date_gmt":"2023-05-27T17:46:04","guid":{"rendered":"https:\/\/xinchewhd.com.cn\/?p=391"},"modified":"2023-05-28T01:46:04","modified_gmt":"2023-05-27T17:46:04","slug":"nginx%e5%b8%b8%e7%94%a8%e9%85%8d%e7%bd%ae%e7%a4%ba%e4%be%8b","status":"publish","type":"post","link":"https:\/\/xinchewhd.com.cn\/index.php\/nginx\/nginx%e5%b8%b8%e7%94%a8%e9%85%8d%e7%bd%ae%e7%a4%ba%e4%be%8b\/","title":{"rendered":"Nginx\u5e38\u7528\u914d\u7f6e\u793a\u4f8b"},"content":{"rendered":"
\n

Nginx\u914d\u7f6e\u6587\u4ef6\u8def\u5f84<\/span><\/h4>\n

\u4e0d\u540c\u5b89\u88c5\u65b9\u5f0f\uff0cnginx\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84\u4e5f\u6709\u6240\u4e0d\u540c\u3002<\/p>\n

\u6e90\u7801\u7f16\u8bd1\u5b89\u88c5\u65b9\u5f0f<\/strong>\uff1a\u901a\u5e38\u5728\/usr\/local\/nginx\/conf\u76ee\u5f55\u4e0b\u3002<\/p>\n

yum\u5b89\u88c5\u65b9\u5f0f<\/strong>\uff1a\u901a\u5e38\u5728\/etc\/nginx\/\u76ee\u5f55\uff08\u4e3b\u914d\u7f6e\u6587\u4ef6\uff09\u4e0e\/etc\/nginx\/conf.d\u76ee\u5f55\u4e0b\u3002<\/p>\n

Docker\u542f\u52a8\u7684nginx<\/strong>\uff0c\u4e00\u822c\u4e5f\u5728\/etc\/nginx\u76ee\u5f55\u4e0b\u3002<\/p>\n

Nginx\u4e3b\u914d\u7f6e\u6587\u4ef6\u8c03\u4f18<\/p>\n

\n
# \u542f\u52a8\u7528\u6237\u6539\u4e3a root\uff0c\u907f\u514d\u6743\u9650\u95ee\u9898\u62a5\u9519\u3002<\/span><\/span><\/code>user<\/span>  root;<\/span><\/code># \u5b9a\u4e49\u4e86 nginx \u5728\u4e3a\u4f60\u7684\u7f51\u7ad9\u63d0\u4f9b\u670d\u52a1\u65f6\uff0cworker \u8fdb\u7a0b\u7684\u6570\u91cf\u3002\u5de5\u4f5c\u8fdb\u7a0b\u4e00\u822c\u8bbe\u7f6e\u4e3a CPU \u7684\u7ebf\u7a0b\u6570\uff0c\u8fd9\u91cc\u8bbe\u7f6e\u6210 auto\uff0cnginx \u4f1a\u81ea\u52a8\u83b7\u53d6 CPU \u7ebf\u7a0b\u6570\uff0c\u5e76\u542f\u7528\u76f8\u5bf9\u5e94\u7684 worker \u8fdb\u7a0b\u3002<\/span><\/span><\/code>worker_processes<\/span>  auto;<\/span><\/code># \u914d\u7f6e nginx worker \u8fdb\u7a0b\u6700\u5927\u6253\u5f00\u6587\u4ef6\u6570<\/span><\/span><\/code>worker_rlimit_nofile<\/span> 65535<\/span>;<\/span><\/code># nginx \u7684\u9519\u8bef\u65e5\u5fd7\u8def\u5f84\uff0cwarn \u8868\u793a\u53ea\u6253\u5370\u6253\u5370 warn \u7ea7\u522b\u4ee5\u4e0a\u7684\u65e5\u5fd7\u3002<\/span><\/span><\/code>error_log<\/span>  \/var\/log\/nginx\/error.log warn<\/span>;<\/span><\/code># nginx \u7684 pid \u6587\u4ef6\u8def\u5f84<\/span><\/span><\/code>pid<\/span>        \/var\/run\/nginx.pid;<\/span><\/code> <\/code># \u5e76\u53d1\u4f18\u5316<\/span><\/span><\/code>events<\/span> {<\/span><\/code>    # \u8bbe\u7f6e\u4e86\u4e00\u4e2a worker \u8fdb\u7a0b\u53ef\u4ee5\u540c\u65f6\u6253\u5f00\u7684\u94fe\u63a5\u6570\u3002\u5982\uff1a\u73b0\u67094\u4e2a worker \u8fdb\u7a0b\uff0c\u5219\u5f53\u524d nginx \u670d\u52a1\u5668\u7684\u540c\u65f6\u6253\u5f00\u94fe\u63a5\u6570\u4e3a 4*1024=4096 \u4e2a\u3002\u9700\u6839\u636e\u5f53\u524d\u670d\u52a1\u5668\u7684 open files \u503c\u8bbe\u5b9a\uff0c\u4f7f\u7528 ulimit -a \u67e5\u770b\u5f53\u524d\u670d\u52a1\u5668\u7684 open files \u503c\u3002<\/span><\/span><\/code>    worker_connections<\/span>  65535<\/span>;<\/span><\/code>    # \u8ba9nginx\u6536\u5230\u4e00\u4e2a\u65b0\u8fde\u63a5\u901a\u77e5\u540e\u63a5\u53d7\u5c3d\u53ef\u80fd\u591a\u7684\u8fde\u63a5\u3002<\/span><\/span><\/code>    multi_accept<\/span>   on<\/span>;<\/span><\/code>}<\/span><\/code> <\/code>http<\/span> {<\/span><\/code>    include<\/span>       \/etc\/nginx\/mime.types;<\/span><\/code>    default_type<\/span>  application\/octet-stream;<\/span><\/code> <\/code>    # \u5b9a\u4e49\u4e00\u4e2a main \u7684\u65e5\u5fd7\u683c\u5f0f<\/span><\/span><\/code>    log_format<\/span>  main  '$remote_addr<\/span> - $remote_user<\/span> [$time_local<\/span>] \"$request<\/span>\" '<\/span><\/span><\/code>                      '$status<\/span> $body_bytes_sent<\/span> \"$http_referer<\/span>\" '<\/span><\/span><\/code>                      '\"$http_user_agent<\/span>\" \"$http_x_forwarded_for<\/span>\"'<\/span>;<\/span><\/code> <\/code>    # http \u670d\u52a1\u7684\u8bbf\u95ee\u65e5\u5fd7\u8def\u5f84\uff0c\u65e5\u5fd7\u683c\u5f0f\u4e3a main \u5b9a\u4e49\u7684\u683c\u5f0f<\/span><\/span><\/code>    access_log<\/span>  \/var\/log\/nginx\/access.log  main;<\/span><\/code>    # \u6307\u5411 sendfile()\u51fd\u6570\u3002sendfile() \u5728\u78c1\u76d8\u548c TCP \u7aef\u53e3\uff08\u6216\u8005\u4efb\u610f\u4e24\u4e2a\u6587\u4ef6\u63cf\u8ff0\u7b26\uff09\u4e4b\u95f4\u590d\u5236\u6570\u636e\u3002<\/span><\/span><\/code>    sendfile<\/span>    on<\/span>;<\/span><\/code>    # \u914d\u7f6e nginx \u5728\u4e00\u4e2a\u5305\u4e2d\u53d1\u9001\u5168\u90e8\u7684\u5934\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u4e00\u4e2a\u4e00\u4e2a\u53d1\u9001\u3002<\/span><\/span><\/code>    tcp_nopush<\/span>  on<\/span>;<\/span><\/code>    # \u914d\u7f6e nginx \u4e0d\u8981\u7f13\u5b58\u6570\u636e\uff0c\u5e94\u8be5\u5feb\u901f\u7684\u53d1\u9001\u5c0f\u6570\u636e\uff08\u8fd9\u4ec5\u4ec5\u5e94\u8be5\u7528\u4e8e\u9891\u7e41\u53d1\u9001\u5c0f\u7684\u788e\u7247\u4fe1\u606f\u800c\u65e0\u9700\u7acb\u523b\u83b7\u53d6\u54cd\u5e94\u7684\uff0c\u9700\u8981\u5b9e\u65f6\u4f20\u9012\u6570\u636e\u7684\u5e94\u7528\u4e2d\uff09\u3002<\/span><\/span><\/code>    tcp_nodelay<\/span> on<\/span>;<\/span><\/code>    # \u6307\u5b9a\u4e86\u4e0e\u5ba2\u6237\u7aef\u7684 keep-alive \u94fe\u63a5\u7684\u8d85\u65f6\u65f6\u95f4\u3002\u670d\u52a1\u5668\u4f1a\u5728\u8fd9\u4e2a\u65f6\u95f4\u540e\u5173\u95ed\u94fe\u63a5\u3002\u6211\u4eec\u53ef\u4ee5\u964d\u4f4e\u8fd9\u4e2a\u503c\uff0c\u4ee5\u907f\u514d\u8ba9 worker \u8fc7\u957f\u65f6\u95f4\u7684\u5fd9\u788c\u3002<\/span><\/span><\/code>    keepalive_timeout<\/span>  60s<\/span>;<\/span><\/code>    # \u9650\u5236\u5ba2\u6237\u7aef\u6587\u4ef6\u4e0a\u4f20\u4e0b\u8f7d\u5927\u5c0f\u9650\u5236\uff0c\u9ed8\u8ba41m<\/span><\/span><\/code>    client_max_body_size<\/span> 20m<\/span>;<\/span><\/code>    # \u8bfb\u53d6\u8bf7\u6c42\u5934\u7684\u8d85\u65f6\u65f6\u95f4<\/span><\/span><\/code>    client_header_timeout<\/span> 60s<\/span>;<\/span><\/code>    # \u8bfb\u53d6\u8bf7\u6c42\u5b9e\u4f53\u7684\u8d85\u65f6\u65f6\u95f4<\/span><\/span><\/code>\u00a0\u00a0\u00a0\u00a0client_body_timeout<\/span>\u00a060s<\/span>;<\/span><\/code> <\/code>    # \u5f00\u542f gzip \u538b\u7f29\u6a21\u5757<\/span><\/span><\/code>    gzip<\/span> on<\/span>;<\/span><\/code>    # \u8bbe\u7f6e\u7528\u4e8e\u538b\u7f29\u54cd\u5e94\u7684\u7f13\u51b2\u533a\u7684\u6570\u91cf\u548c\u5927\u5c0f<\/span><\/span><\/code>    gzip_buffers<\/span> 16<\/span> 8k<\/span>;<\/span><\/code>    # \u8bbe\u7f6e gzip \u538b\u7f29\u7ea7\u522b\uff0c\u503c\u5728 1 \u5230 9 \u4e4b\u95f4\uff08\u503c\u8d8a\u5927\uff0c\u538b\u7f29\u7ea7\u522b\u8d8a\u9ad8\uff09<\/span><\/span><\/code>    gzip_comp_level<\/span> 6<\/span>;<\/span><\/code>    # IE \u6d4f\u89c8\u5668\u4e0d\u5f00\u542f gzip\uff0cIE6 \u4ee5\u4e0b\u4f1a\u4e71\u7801<\/span><\/span><\/code>    gzip_disable<\/span> 'MSIE [1-6].'<\/span>;<\/span><\/code>    # \u8bbe\u7f6e\u538b\u7f29\u6240\u9700\u7684\u6700\u5c0f HTTP \u7248\u672c<\/span><\/span><\/code>    gzip_http_version<\/span> 1<\/span>.0<\/span>;<\/span><\/code>    # \u8bbe\u7f6e\u5c06\u88ab\u538b\u7f29\u7684\u8fd4\u56de\u503c\u7684\u6700\u5c0f\u957f\u5ea6<\/span><\/span><\/code>    gzip_min_length<\/span> 1k<\/span>;<\/span><\/code>    # \u9700\u8981\u538b\u7f29\u7684\u6587\u4ef6\u7684\u683c\u5f0f<\/span><\/span><\/code>    gzip_types<\/span> text\/plain application\/x-javascript text\/css application\/xml text\/javascript application\/x-httpd-php image\/jpeg image\/gif image\/png image\/tiff image\/x-ms-bmp;<\/span><\/code>    gzip_vary<\/span> off<\/span>;<\/span><\/code> <\/code>    # fastcgi \u8c03\u4f18\u53c2\u6570<\/span><\/span><\/code>    fastcgi_connect_timeout<\/span> 300<\/span>;<\/span><\/code>    fastcgi_send_timeout<\/span> 300<\/span>;<\/span><\/code>    fastcgi_read_timeout<\/span> 300<\/span>;<\/span><\/code>    fastcgi_buffer_size<\/span> 64k<\/span>;<\/span><\/code>    fastcgi_buffers<\/span> 4<\/span> 64k<\/span>;<\/span><\/code>    fastcgi_busy_buffers_size<\/span> 128k<\/span>;<\/span><\/code>    fastcgi_temp_file_write_size<\/span> 128k<\/span>;<\/span><\/code> <\/code>    # \u5173\u95ed\u9875\u9762\u4e2d\u7684 nginx \u7248\u672c\u6570\u5b57\u4fe1\u606f\uff0c\u63d0\u9ad8\u5b89\u5168\u6027\u3002<\/span><\/span><\/code>    server_tokens<\/span>   off<\/span>;<\/span><\/code> <\/code>    # nginx \u7684 http \u5757\u914d\u7f6e\u6587\u4ef6\uff0c\u53ef\u5c06\u5757\u914d\u7f6e\u6587\u4ef6\u653e\u5165\u8be5\u76ee\u5f55\u3002<\/span><\/span><\/code>    include<\/span> \/etc\/nginx\/conf.d\/*.conf<\/span>;<\/span><\/code> <\/code>    server<\/span> {<\/span><\/code>        listen<\/span> 80<\/span>;<\/span><\/code>        server_name<\/span> www.weijishu.cn;<\/span><\/code>        # http \u8df3\u8f6c https<\/span><\/span><\/code>        rewrite<\/span> ^(.*)<\/span> https:\/\/$server_name<\/span>$1<\/span> permanent<\/span>;<\/span><\/code>    }<\/span><\/code>    server<\/span> {<\/span><\/code>        listen<\/span>       443<\/span> ssl;<\/span><\/code>        server_name<\/span>  www.weijishu.cn;<\/span><\/code>        ssl_certificate<\/span>      ssl\/weijishu.cn.pem;<\/span><\/code>        ssl_certificate_key<\/span>  ssl\/weijishu.cn.key;<\/span><\/code>        ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>        ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>        ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>        ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code> <\/code>        access_log<\/span>  \/var\/log\/nginx\/www.weijishu.cn_access.log  main;<\/span><\/code>        error_log<\/span>  \/var\/log\/nginx\/www.weijishu.cn_error.log warn<\/span>;<\/span><\/code> <\/code>        # \u9759\u6001\u6587\u4ef6<\/span><\/span><\/code>        location<\/span> \/ {<\/span><\/code>            root<\/span> \/usr\/share\/nginx\/html;<\/span><\/code>            index<\/span> index.html;<\/span><\/code>        }<\/span><\/code>        location<\/span> \/anan\/ {<\/span><\/code>            alias<\/span> \/usr\/share\/nginx\/html\/anan\/;<\/span><\/code>            index<\/span> index.html;<\/span><\/code>        }<\/span><\/code>        # \u52a8\u6001\u8bf7\u6c42<\/span><\/span><\/code>        location<\/span> \/base\/ {<\/span><\/code>            proxy_redirect<\/span> off<\/span>;<\/span><\/code>            proxy_set_header<\/span>    Host spa.asxxxr.net;<\/span><\/code>            proxy_set_header<\/span>    X-Real-IP $remote_addr<\/span>;<\/span><\/code>            proxy_set_header<\/span>    X-Forwarded-For $remote_addr<\/span>;<\/span><\/code>            proxy_pass<\/span> http:\/\/39.103.221.4:50006\/;<\/span><\/code>        }<\/span><\/code> <\/code>        # \u7f13\u5b58\u5e38\u89c1\u683c\u5f0f\u7684\u56fe\u7247<\/span><\/span><\/code>        location<\/span> ~ .*.(gif|jpg|jpeg|png|bmp|swf|svg|webm)$<\/span> {<\/span><\/code>            # \u5355\u4f4d\u53c2\u6570\uff1ad \u5929 | H \u5c0f\u65f6 | M \u5206<\/span><\/span><\/code>            expires<\/span> 1h<\/span>;<\/span><\/code>        }<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx HTTP\u8df3\u8f6cHTTPS<\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span> 80<\/span>;<\/span><\/code>\u00a0\u00a0\u00a0\u00a0server_name<\/span>\u00a0www.weijishu.cn;<\/span><\/code>    rewrite<\/span> ^(.*)<\/span> https:\/\/$server_name<\/span>$1<\/span> permanent<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx\u4ee3\u7406PHP\u670d\u52a1<\/span><\/p>\n
\n
server<\/span> {<\/span><\/span><\/code>    listen<\/span>               443 ssl;<\/span><\/span><\/code>\u00a0\u00a0\u00a0\u00a0server_name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0www.weijishu.cn;<\/span><\/span><\/code>    ssl_certificate<\/span>      \/etc\/nginx\/conf.d\/ssl\/admin.alxxj.cn.pem;<\/span><\/span><\/code>    ssl_certificate_key<\/span>  \/etc\/nginx\/conf.d\/ssl\/admin.alxxj.cn.key;<\/span><\/span><\/code>    ssl_session_cache<\/span>    shared:SSL:1m;<\/span><\/span><\/code>    ssl_session_timeout<\/span>  5m;<\/span><\/span><\/code>    ssl_protocols<\/span>        TLSv1 TLSv1.1 TLSv1.2;<\/span><\/span><\/code>    ssl_ciphers<\/span>          HIGH:!aNULL:!MD5;<\/span><\/span><\/code>    ssl_prefer_server_ciphers<\/span>  on;<\/span><\/span><\/code> <\/code>    index<\/span> index.html index.php;<\/span><\/span><\/code>    root<\/span> \/var\/www\/html\/alice\/admin\/web;<\/span><\/span><\/code> <\/code>    rewrite<\/span> (\/.svn|.git\/) \/404\/;<\/span><\/span><\/code> <\/code>    if<\/span> ($http_user_agent ~* yahoo|bingbot) {<\/span><\/span><\/code>        return<\/span> 403;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    if<\/span> ($query_string ~* \".*(insert|select|delete|update|count|master|truncate|declare|'|%27|%22|%3C|%3E|;|%20and%20|%20or%20).*\"){<\/span><\/span><\/code>        return<\/span> 404;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/span><\/code>        try_files<\/span> $uri $uri\/ \/index.php$is_args$args;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    location<\/span> ~ .*.(php|php5)?$<\/span><\/span><\/code>    {<\/span><\/span><\/code>        fastcgi_pass<\/span>  127.0.0.1:9000;<\/span><\/span><\/code>        fastcgi_param<\/span> ENV 'prod';<\/span><\/span><\/code>        fastcgi_index<\/span> index.php;<\/span><\/span><\/code>        include<\/span> fastcgi.conf;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    location<\/span> ~ .*.(gif|jpg|jpeg|png|bmp|swf)$<\/span><\/span><\/code>    {<\/span><\/span><\/code>        expires<\/span> 30d;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    location<\/span> ~ .*.(js|css)?$<\/span><\/span><\/code>    {<\/span><\/span><\/code>        expires<\/span> 1h;<\/span><\/span><\/code>    }<\/span><\/span><\/code> <\/code>    #\u65e5\u5fd7<\/span><\/span><\/code>    access_log<\/span>  off;<\/span><\/span><\/code>}<\/span><\/span><\/code><\/pre>\n<\/section>\n
Nginx\u4f5c\u4e3a\u4ee3\u7406\u670d\u52a1\u5668<\/span><\/p>\n
Nginx \u662f\u4e00\u4e2a\u4f18\u79c0\u7684\u9ad8\u6027\u80fd\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u901a\u8fc7\u4e0d\u540c\u7684\u914d\u7f6e\u8fdb\u884c\u53cd\u5411\u4ee3\u7406\u3001\u6b63\u5411\u4ee3\u7406\u3002<\/p>\n
\u6b63\u5411\u4ee3\u7406<\/p>\n
\u6b63\u5411\u4ee3\u7406\u7684\u4ee3\u7406\u5bf9\u8c61\u662f\u5ba2\u6237\u7aef\u3002\u6b63\u5411\u4ee3\u7406\u5c31\u662fnginx\u670d\u52a1\u5668\u66ff\u5ba2\u6237\u7aef\u53bb\u8bbf\u95ee\u76ee\u6807\u670d\u52a1\u5668\u3002<\/p>\n
\n
server{<\/span><\/span><\/code>    resolver<\/span> 8.8.8.8;<\/span><\/span><\/code>    listen<\/span> 80;<\/span><\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/span><\/code>        proxy_pass<\/span> http:\/\/$http_host$request_uri;<\/span><\/span><\/code>    }<\/span><\/span><\/code>}<\/span><\/span><\/code><\/pre>\n<\/section>\n
\u5728\u5ba2\u6237\u7aef\u914d\u7f6e http_proxy \u73af\u5883\u53d8\u91cf\uff0cexport http_proxy=http:\/\/\u4f60\u7684\u6b63\u5411\u4ee3\u7406\u670d\u52a1\u5668\u5730\u5740:\u4ee3\u7406\u7aef\u53e3\uff0c\u5373\u53ef\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u4e0a\u7f51\u3002<\/p>\n
\u901a\u8fc7\u8fd9\u79cd\u65b9\u5f0f\u8bbf\u95ee\u7f51\u7ad9\uff0c\u4f8b\u5982\u767e\u5ea6\u3002\u767e\u5ea6\u90a3\u8fb9\u53ea\u80fd\u770b\u5230nginx\u670d\u52a1\u5668\u7684IP\uff0c\u800c\u83b7\u53d6\u4e0d\u5230\u4f60\u7684\u771f\u5b9eIP\u3002<\/p>\n
\u53cd\u5411\u4ee3\u7406<\/p>\n
\u5ba2\u6237\u7aef\u4e0d\u9700\u8981\u4e86\u89e3nginx\u670d\u52a1\u5668\u540e\u9762\u7684\u670d\u52a1\uff0c\u76f4\u63a5\u8bbf\u95eenginx\u63d0\u4f9b\u7684\u5730\u5740\u3002<\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       80<\/span>;<\/span><\/code>    server_name<\/span>  weijishu.cn;<\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/code>        proxy_set_header<\/span>  Host weijishu.cn;<\/span><\/code>        proxy_redirect<\/span> off<\/span>;<\/span><\/code>        proxy_set_header<\/span>  X-Real-IP $remote_addr<\/span>;<\/span><\/code>        proxy_set_header<\/span> X-Forwarded-For $remote_addr<\/span>;<\/span><\/code>        proxy_pass<\/span> https:\/\/www.weijishu.cn\/;<\/span><\/code>        }<\/span><\/code>}<\/span><\/code> <\/code>server<\/span> {<\/span><\/code>    listen<\/span>       80<\/span>;<\/span><\/code>    server_name<\/span>  weijishu.cn;<\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/code>        proxy_set_header<\/span>  Host weijishu.cn;<\/span><\/code>        proxy_redirect<\/span> off<\/span>;<\/span><\/code>        proxy_set_header<\/span>  X-Real-IP $remote_addr<\/span>;<\/span><\/code>        proxy_set_header<\/span> X-Forwarded-For $remote_addr<\/span>;<\/span><\/code>        proxy_pass<\/span> https:\/\/www.weijishu.cn\/;<\/span><\/code>        }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx\u4f5c\u4e3a\u8d1f\u8f7d\u5747\u8861\u670d\u52a1\u5668<\/span><\/p>\n
\u53ef\u4ee5\u5c06 nginx \u4f5c\u4e3a\u4e00\u4e2a\u975e\u5e38\u9ad8\u6548\u7684 HTTP \u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u5c06\u6d41\u91cf\u5206\u914d\u5230\u591a\u4e2a\u5e94\u7528\u670d\u52a1\u5668\u4e0a\uff0c\u5e76\u901a\u8fc7 nginx \u63d0\u9ad8 Web \u5e94\u7528\u7684\u6027\u80fd\u3001\u53ef\u6269\u5c55\u6027\u548c\u53ef\u9760\u6027\u3002<\/p>\n
nginx \u53ef\u4ee5\u901a\u8fc7\u6dfb\u52a0\u4e00\u4e2a upstream\uff0c\u6765\u5b9e\u73b0 nginx \u7684\u8d1f\u8f7d\u5747\u8861\u529f\u80fd\u3002<\/p>\n
\n
upstream<\/span> myserver {<\/span><\/code>    server<\/span> 192.168.1.201<\/span>;<\/span><\/code>    server<\/span> 192.168.1.202<\/span>;<\/span><\/code>    }<\/span><\/code>server<\/span> {<\/span><\/code>    listen<\/span>    80<\/span>;<\/span><\/code>    location<\/span> \/ {<\/span><\/code>        proxy_pass<\/span> http:\/\/myserver;<\/span><\/code>        }<\/span><\/code>    }<\/span><\/code><\/pre>\n<\/section>\n
\u901a\u8fc7\u8fd9\u6837\u914d\u7f6e\uff0c\u53ef\u4ee5\u901a\u8fc7\u8bbf\u95ee nginx \u670d\u52a1\u5668\u7684\u5730\u5740\uff0c\u5b9e\u73b0\u8f6e\u8be2\uff08\u9ed8\u8ba4\uff09\u8bbf\u95ee\u5b83\u53cd\u5411\u4ee3\u7406\u7684\u4e24\u4e2a\u540e\u7aef\u670d\u52a1<\/span><\/p>\n
\u53c2\u6570 \u63cf\u8ff0<\/p>\n
\n
backup  \u5c06\u670d\u52a1\u5668\u6807\u8bb0\u4e3a\u5907\u4efd\u670d\u52a1\u5668\u3002\u5f53\u4e3b\u670d\u52a1\u5668\u4e0d\u53ef\u7528\u65f6\uff0c\u5c06\u4f7f\u7528\u8be5\u670d\u52a1\u5668\u3002<\/span><\/code>down  \u5c06\u670d\u52a1\u5668\u6807\u8bb0\u4e3a\u6c38\u4e45\u4e0d\u53ef\u7528<\/span><\/code>fail_timeout=time  \u5728\u6307\u5b9a\u6b21\u6570\u7684\u4e0d\u6210\u529f\u5c1d\u8bd5\u4e0e\u670d\u52a1\u5668\u901a\u4fe1\u7684\u65f6\u95f4\u8303\u56f4\u5185\uff0c\u5e94\u8003\u8651\u670d\u52a1\u5668\u4e0d\u53ef\u7528<\/span><\/code>max_conns=number  \u9650\u5236\u4ee3\u7406\u670d\u52a1\u5668\u7684\u540c\u65f6\u6d3b\u52a8\u8fde\u63a5\u7684\u6700\u5927\u6570\u91cf\u3002\u9ed8\u8ba4\u503c\u4e3a\u96f6\uff0c\u8868\u793a\u6ca1\u6709\u9650\u5236<\/span><\/code>max_fails=number  \u8bbe\u7f6e\u4e0e\u670d\u52a1\u5668\u901a\u4fe1\u5931\u8d25\u7684\u6700\u5927\u5c1d\u8bd5\u6b21\u6570<\/span><\/code>weight=number  \u8bbe\u7f6e\u670d\u52a1\u5668\u7684\u6743\u91cd\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e3a1<\/span><\/code><\/pre>\n<\/section>\n
\u53ef\u901a\u8fc7\u8bbe\u7f6e\u6743\u91cd weight \u6765\u8fbe\u5230\u6027\u80fd\u597d\u7684\u670d\u52a1\u5668\u63d0\u4f9b\u66f4\u591a\u6b21\u7684\u670d\u52a1\u76ee\u7684\u3002\u5982\u4e0b\uff1a201\u8fd9\u53f0\u670d\u52a1\u5668\u63d0\u4f9b\u7684\u8bbf\u95ee\u91cf\u5c31\u662f202\u670d\u52a1\u5668\u76842\u500d\u3002<\/p>\n
\n
upstream<\/span> myserver {<\/span><\/code>    server<\/span> 192.168.1.201<\/span> weight=2<\/span>;<\/span><\/code>    server<\/span> 192.168.1.202<\/span> weight=1<\/span>;<\/span><\/code>    }<\/span><\/code>server<\/span> {<\/span><\/code>    listen<\/span>    80<\/span>;<\/span><\/code>    location<\/span> \/ {<\/span><\/code>        proxy_pass<\/span> http:\/\/myserver;<\/span><\/code>        }<\/span><\/code>    }<\/span><\/code><\/pre>\n<\/section>\n
\u51e0\u79cd\u5e38\u89c1\u7684\u7b56\u7565:<\/p>\n
\u8f6e\u8be2\uff08\u9ed8\u8ba4\uff09\uff0c\u8bf7\u6c42\u8fc7\u6765\u540e\uff0cNginx \u968f\u673a\u5206\u914d\u6d41\u91cf\u5230\u4efb\u4e00\u670d\u52a1\u5668<\/p>\n
\n
upstream<\/span> backend {<\/span><\/code>    server<\/span> 127.0.0.1:3000<\/span>;<\/span><\/code>    server<\/span> 127.0.0.1:3001<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
weight=number \u8bbe\u7f6e\u670d\u52a1\u5668\u7684\u6743\u91cd\uff0c\u9ed8\u8ba4\u4e3a1\uff0c\u6743\u91cd\u5927\u7684\u4f1a\u88ab\u4f18\u5148\u5206\u914d<\/p>\n
\n
upstream<\/span> backend {<\/span><\/code>    server<\/span> 127.0.0.1:3000<\/span> weight=2<\/span>;<\/span><\/code>    server<\/span> 127.0.0.1:3001<\/span> weight=1<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
backup \u6807\u8bb0\u4e3a\u5907\u4efd\u670d\u52a1\u5668\u3002\u5f53\u4e3b\u670d\u52a1\u5668\u4e0d\u53ef\u7528\u65f6\uff0c\u5c06\u4f20\u9012\u4e0e\u5907\u4efd\u670d\u52a1\u5668\u7684\u8fde\u63a5<\/span><\/p>\n
\n
upstream<\/span> backend {<\/span><\/code>    server<\/span> 127.0.0.1:3000<\/span> backup;<\/span><\/code>    server<\/span> 127.0.0.1:3001<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
ip_hash \u4fdd\u6301\u4f1a\u8bdd\uff0c\u4fdd\u8bc1\u540c\u4e00\u5ba2\u6237\u7aef\u59cb\u7ec8\u8bbf\u95ee\u4e00\u53f0\u670d\u52a1\u5668<\/p>\n
\n
upstream<\/span> backend {<\/span><\/span><\/code>    ip_hash;<\/span> <\/span><\/code>    server<\/span> 127.0.0.1:3000 backup;<\/span><\/span><\/code>    server<\/span> 127.0.0.1:3001;<\/span><\/span><\/code>}<\/span><\/span><\/code><\/pre>\n<\/section>\n
least_conn \u4f18\u5148\u5206\u914d\u6700\u5c11\u8fde\u63a5\u6570\u7684\u670d\u52a1\u5668\uff0c\u907f\u514d\u670d\u52a1\u5668\u8d85\u8f7d\u8bf7\u6c42\u8fc7\u591a<\/span><\/p>\n
\n
upstream<\/span> backend {<\/span><\/span><\/code>    least_conn;<\/span><\/span><\/code>    server<\/span> 127.0.0.1:3000;<\/span><\/span><\/code>    server<\/span> 127.0.0.1:3001;<\/span><\/span><\/code>}<\/span><\/span><\/code><\/pre>\n<\/section>\n
Nginx\u4f5c\u4e3a\u9759\u6001\u6587\u4ef6\u670d\u52a1\u5668<\/span><\/p>\n
Nginx \u670d\u52a1\u5668\u7684\u4e00\u4e2a\u4e3b\u8981\u4efb\u52a1\u662f\u63d0\u4f9b\u9759\u6001HTML\u9875\u9762\u3001\u56fe\u50cf\u6216\u6587\u4ef6\u8bbf\u95ee\u3002<\/p>\n
\u6839\u636e\u8bf7\u6c42\u7684\u4e0d\u540c\uff0c\u6587\u4ef6\u5c06\u4ece\u4e0d\u540c\u7684\u672c\u5730\u76ee\u5f55\u63d0\u4f9b\u3002<\/p>\n
\/http\/www \u5305\u542bHTML\u6587\u4ef6<\/span><\/p>\n
\/http\/data1\/images \u5305\u542b\u56fe\u50cf<\/p>\n
\/http\/data2\/file \u5305\u542b\u6587\u4ef6<\/p>\n
\u76ee\u5f55\u6811\uff1a<\/p>\n
\n
http\/<\/span><\/code>\u251c\u2500\u2500 data<\/span>1<\/span><\/code>\u2502   \u2514\u2500\u2500 images<\/span><\/code>\u2502       \u251c\u2500\u2500 1<\/span>.jpg<\/span><\/code>\u2502       \u2514\u2500\u2500 2<\/span>.jpg<\/span><\/code>\u251c\u2500\u2500 data<\/span>2<\/span><\/code>\u2502   \u2514\u2500\u2500 file<\/span><\/code>\u2502       \u251c\u2500\u2500 1<\/span>.txt<\/span><\/code>\u2502       \u2514\u2500\u2500 1<\/span>.zip<\/span><\/code>\u2514\u2500\u2500 www<\/span><\/code>    \u251c\u2500\u2500 50<\/span>x.html<\/span><\/code>    \u2514\u2500\u2500 index.html<\/span><\/code><\/pre>\n<\/section>\n
\u914d\u7f6e\u6587\u4ef6\uff1a<\/span><\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       80<\/span>;<\/span><\/code>    server_name<\/span>  127.0.0.1<\/span>;<\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/code>        root<\/span>   \/http\/www;<\/span><\/code>        index<\/span>  index.html index.htm;<\/span><\/code>    }<\/span><\/code> <\/code>    location<\/span> \/data1\/ {<\/span><\/code>        root<\/span>   \/http;<\/span><\/code>    }<\/span><\/code> <\/code>    location<\/span> \/data2\/ {<\/span><\/code>        root<\/span>   \/http;<\/span><\/code>    }<\/span><\/code> <\/code>    error_page<\/span>   500<\/span> 502<\/span> 503<\/span> 504<\/span>  \/50x.html;<\/span><\/code>    location<\/span> = \/50x.html {<\/span><\/code>        root<\/span>  \/http\/www;<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
\u53ef\u4ee5\u8bbf\u95ee\u4e00\u4e0b\u94fe\u63a5\u67e5\u770b\u6548\u679c\uff1a<\/p>\n
HTML\u9759\u6001\u6587\u4ef6\uff1ahttp:\/\/192.168.1.200\/<\/p>\n
\u56fe\u50cf\u6d4f\u89c8\uff1ahttp:\/\/192.168.1.200\/data1\/images\/1.jpg<\/p>\n
\u6587\u4ef6\u4e0b\u8f7d\uff1ahttp:\/\/192.168.1.200\/data2\/file\/1.zip<\/p>\n
Nginx\u53cd\u5411\u4ee3\u7406WebSocket\u670d\u52a1<\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       443<\/span> ssl;<\/span><\/code>    server_name<\/span>  devskt.asxxxd.com;<\/span><\/code>\u00a0\u00a0\u00a0\u00a0ssl_certificate<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a03986794_devskt.weijishu.cn.pem;<\/span><\/code>    ssl_certificate_key<\/span>  3986794_devskt.weijishu.cn.key;<\/span><\/code>    ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>    ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>    ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>    ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code>    location<\/span> \/ {<\/span><\/code>    proxy_pass<\/span> http:\/\/172.26.155.95:31114;<\/span><\/code>    proxy_http_version<\/span> 1<\/span>.1<\/span>;<\/span><\/code>    proxy_set_header<\/span> Upgrade $http_upgrade<\/span>;<\/span><\/code>    proxy_set_header<\/span> Connection \"upgrade\"<\/span>;<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx\u53cd\u5411\u4ee3\u7406\u793a\u4f8b<\/p>\n
\n
# http\u91cd\u5199\u65b9\u5f0f \u4e00<\/span><\/span><\/code>server<\/span> {<\/span><\/code>        listen<\/span>       80<\/span>;<\/span><\/code>        server_name<\/span>  www.weijishu.cn;<\/span><\/code>        rewrite<\/span> ^<\/span> https:\/\/$http_host<\/span>$request_uri<\/span>? permanent<\/span>;    # force redirect http to https<\/span><\/span><\/code>    }<\/span><\/code><\/pre>\n<\/section>\n
# http\u91cd\u5199\u65b9\u5f0f \u4e8c<\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       80<\/span> default_server;<\/span><\/code>    listen<\/span>       [::]:80<\/span> default_server;<\/span><\/code>    server_name<\/span>  spa.weijishu.cn;<\/span><\/code>    root<\/span>         \/usr\/share\/nginx\/html;<\/span><\/code> <\/code>    if<\/span> ($host<\/span> = \"spa.weijishu.cn\"<\/span>) {<\/span><\/code>       rewrite<\/span> ^\/(.*)$<\/span> https:\/\/spa.weijishu.cn permanent<\/span>;<\/span><\/code>    }<\/span><\/code> <\/code>    if<\/span> ($host<\/span> = \"http:\/\/spa.weijishu.cn\"<\/span>) {<\/span><\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0rewrite<\/span>\u00a0^\/(.*)$<\/span>\u00a0https:\/\/spa.weijishu.cn\u00a0permanent<\/span>;<\/span><\/code>    }<\/span><\/code> <\/code>    if<\/span> ($host<\/span> = \"https:\/\/spa.weijishu.cn\"<\/span>) {<\/span><\/code>       rewrite<\/span> ^\/(.*)$<\/span> https:\/\/spa.weijishu.cn permanent<\/span>;<\/span><\/code>    }<\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/code>    }<\/span><\/code>    error_page<\/span> 404<\/span> \/404<\/span>.html;<\/span><\/code>    location<\/span> = \/40x.html {<\/span><\/code>    }<\/span><\/code> <\/code>    error_page<\/span> 500<\/span> 502<\/span> 503<\/span> 504<\/span> \/50x.html;<\/span><\/code>    location<\/span> = \/50x.html {<\/span><\/code>    }<\/span><\/code>}<\/span><\/code># \u4ee3\u7406https<\/span><\/span><\/code>server<\/span> {<\/span><\/code>    listen<\/span>       443<\/span> ssl;<\/span><\/code>    server_name<\/span>  spa.weijishu.cn;<\/span><\/code>    ssl_certificate<\/span>      \/etc\/letsencrypt\/live\/spa.weijishu.cn\/fullchain.pem;<\/span><\/code>    ssl_certificate_key<\/span>  \/etc\/letsencrypt\/live\/spa.weijishu.cn\/privkey.pem;<\/span><\/code>    ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>    ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>    ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>    ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code>   location<\/span> \/ {<\/span><\/code>    proxy_set_header<\/span>  Host spa.weijishu.cn;<\/span><\/code>    proxy_redirect<\/span> off<\/span>;<\/span><\/code>    proxy_set_header<\/span>  X-Real-IP $remote_addr<\/span>;<\/span><\/code>    proxy_set_header<\/span> X-Forwarded-For $remote_addr<\/span>;<\/span><\/code>    proxy_pass<\/span> http:\/\/172.29.117.155:50099\/;<\/span><\/code>   }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx \u5b50\u8def\u7531\u90e8\u7f72 Recat \u9879\u76ee<\/span><\/p>\n
\n
location<\/span> ^~<\/span> \/anan\/ {<\/span><\/code>        # \u9879\u76ee\u5730\u5740<\/span><\/span><\/code>        alias<\/span> \/usr\/local\/nginx\/html\/anan\/;<\/span><\/code>        # \u89e3\u51b3\u5237\u65b0\u62a5 404<\/span><\/span><\/code>        try_files<\/span> $uri<\/span> $uri<\/span>\/ \/anan\/index.html;<\/span><\/code>        index<\/span> index.html;<\/span><\/code>        access_log<\/span>  \/home\/log\/nginx\/access\/www.anan.com.log main;<\/span><\/code>        error_log<\/span>   \/home\/log\/nginx\/www.anan.com.log warn<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx \u5f00\u542fgzip\u538b\u7f29<\/p>\n
\n
gzip<\/span> on<\/span>;                # \u5f00\u542fGzip<\/span><\/span><\/code>gzip_min_length<\/span>  1k<\/span>;    # \u4e0d\u538b\u7f29\u4e34\u754c\u503c\uff0c\u5927\u4e8e1K\u7684\u624d\u538b\u7f29\uff0c\u4e00\u822c\u4e0d\u7528\u6539<\/span><\/span><\/code>gzip_buffers<\/span>     4<\/span> 16k<\/span>; # \u8bbe\u7f6e\u7528\u4e8e\u5904\u7406\u8bf7\u6c42\u538b\u7f29\u7684\u7f13\u51b2\u533a\u6570\u91cf\u548c\u5927\u5c0f\u3002<\/span><\/span><\/code>gzip_http_version<\/span> 1<\/span>.0<\/span>;  # \u7528\u4e8e\u8bc6\u522bhttp\u534f\u8bae\u7684\u7248\u672c\uff0c\u65e9\u671f\u7684\u6d4f\u89c8\u5668\u4e0d\u652f\u6301gzip\u538b\u7f29\uff0c\u7528\u6237\u4f1a\u770b\u5230\u4e71\u7801\uff0c\u6240\u4ee5\u4e3a\u4e86\u652f\u6301\u524d\u671f\u7248\u672c\u52a0\u4e86\u6b64\u9009\u9879\u3002<\/span><\/span><\/code>gzip_comp_level<\/span> 6<\/span>;      # \u8bbe\u7f6egzip\u538b\u7f29\u7ea7\u522b\uff0c\u7ea7\u522b\u8d8a\u5e95\u538b\u7f29\u901f\u5ea6\u8d8a\u5feb\u6587\u4ef6\u538b\u7f29\u6bd4\u8d8a\u5c0f\uff0c\u53cd\u4e4b\u901f\u5ea6\u8d8a\u6162\u6587\u4ef6\u538b\u7f29\u6bd4\u8d8a\u5927<\/span><\/span><\/code># \u8bbe\u7f6e\u9700\u8981\u538b\u7f29\u7684MIME\u7c7b\u578b,\u5982\u679c\u4e0d\u5728\u8bbe\u7f6e\u7c7b\u578b\u8303\u56f4\u5185\u7684\u8bf7\u6c42\u4e0d\u8fdb\u884c\u538b\u7f29<\/span><\/span><\/code>gzip_types<\/span>       text\/plain application\/x-javascript text\/css application\/xml text\/javascript application\/x-httpd-php image\/jpeg image\/gif image\/png;<\/span><\/code>gzip_vary<\/span> on<\/span>;           # \u589e\u52a0\u54cd\u5e94\u5934\u201dVary: Accept-Encoding\u201d<\/span><\/span><\/code><\/pre>\n<\/section>\n
Nginx \u8de8\u57df\u95ee\u9898\u89e3\u51b3<\/p>\n
\n
location<\/span> \/ { <\/span><\/code>    add_header<\/span> Access-Control-Allow-Origin *;<\/span><\/code>    add_header<\/span> Access-Control-Allow-Methods 'GET, POST, OPTIONS'<\/span>;<\/span><\/code>    add_header<\/span> Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization'<\/span>;<\/span><\/code>  <\/code>    if<\/span> ($request_method<\/span> = 'OPTIONS'<\/span>) {<\/span><\/code>        return<\/span> 204<\/span>;<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Access-Control-Allow-Origin<\/p>\n
\u670d\u52a1\u5668\u9ed8\u8ba4\u662f\u4e0d\u88ab\u5141\u8bb8\u8de8\u57df\u7684\u3002\u7ed9Nginx\u670d\u52a1\u5668\u914d\u7f6eAccess-Control-Allow-Origin *\u540e\uff0c\u8868\u793a\u670d\u52a1\u5668\u53ef\u4ee5\u63a5\u53d7\u6240\u6709\u7684\u8bf7\u6c42\u6e90\uff08Origin\uff09,\u5373\u63a5\u53d7\u6240\u6709\u8de8\u57df\u7684\u8bf7\u6c42\u3002<\/p>\n
\n
Access-Control-Allow-Headers<\/span><\/code><\/pre>\n<\/section>\n
\u662f\u4e3a\u4e86\u9632\u6b62\u51fa\u73b0\u4ee5\u4e0b\u9519\u8bef\uff1aRequest header field Content-Type is not allowed by Access-Control-Allow-Headers in preflight response.<\/p>\n
\u8fd9\u4e2a\u9519\u8bef\u8868\u793a\u5f53\u524d\u8bf7\u6c42Content-Type\u7684\u503c\u4e0d\u88ab\u652f\u6301\u3002\u5176\u5b9e\u662f\u6211\u4eec\u53d1\u8d77\u4e86\"application\/json\"\u7684\u7c7b\u578b\u8bf7\u6c42\u5bfc\u81f4\u7684\u3002\u8fd9\u91cc\u6d89\u53ca\u5230\u4e00\u4e2a\u6982\u5ff5\uff1a\u9884\u68c0\u8bf7\u6c42\uff08preflight request\uff09,\u8bf7\u770b\u4e0b\u9762\"\u9884\u68c0\u8bf7\u6c42\"\u7684\u4ecb\u7ecd\u3002<\/p>\n
Access-Control-Allow-Methods<\/p>\n
\u662f\u4e3a\u4e86\u9632\u6b62\u51fa\u73b0\u4ee5\u4e0b\u9519\u8bef\uff1aContent-Type is not allowed by Access-Control-Allow-Headers in preflight response.<\/p>\n
\u7ed9OPTIONS\u6dfb\u52a0204\u7684\u8fd4\u56de<\/p>\n
\u662f\u4e3a\u4e86\u5904\u7406\u5728\u53d1\u9001POST\u8bf7\u6c42\u65f6Nginx\u4f9d\u7136\u62d2\u7edd\u8bbf\u95ee\u7684\u9519\u8bef\uff0c\u53d1\u9001\"\u9884\u68c0\u8bf7\u6c42\"\u65f6\uff0c\u9700\u8981\u7528\u5230\u65b9\u6cd5 OPTIONS ,\u6240\u4ee5\u670d\u52a1\u5668\u9700\u8981\u5141\u8bb8\u8be5\u65b9\u6cd5\u3002<\/p>\n
Nginx\u914d\u7f6eIP\u9ed1\/\u767d\u540d\u5355<\/p>\n
IP\u8bbf\u95ee\u63a7\u5236\u53ef\u4ee5\u52a0\u5728 nginx \u7684\u4efb\u610f\u4e00\u4e2a\u5757\u4e2d\u3002\u5982\uff1ahttp\u3001 server\u3001 location\u3002\u4f8b\u5982\u6211\u4eec\u76f4\u63a5\u5c06\u4ee5\u4e0b\u914d\u7f6e\u52a0\u5728 http \u5757\u4e2d\uff0c\u8fd9\u6837\u6574\u4e2a nginx \u7684\u670d\u52a1\u4f1a\u53d7\u5230\u5f71\u54cd\u3002<\/p>\n
\n
deny<\/span> 192.168.1.66<\/span>;<\/span><\/code>allow<\/span> 192.168.1.0<\/span>\/24<\/span>;<\/span><\/code>allow<\/span> 10.1.20.6<\/span>\/16<\/span>;<\/span><\/code>allow<\/span> 34.26.157.0<\/span>\/24<\/span>;<\/span><\/code>deny<\/span> all;<\/span><\/code><\/pre>\n<\/section>\n
\u4ee5\u4e0a\u914d\u7f6e\u5b9e\u73b0\u7684\u6548\u679c\uff1a<\/p>\n
\u5141\u8bb8 192.168.1.0 \u8be5\u7f51\u6bb5\uff0c\u9664 192.168.1.66 \u8fd9\u4e2aIP\u90fd\u53ef\u8bbf\u95eenginx\u3002<\/p>\n
\u5141\u8bb8 10.1.20.6\/16 \u8be5\u7f51\u6bb5\u7684IP\u8bbf\u95ee\u3002<\/p>\n
\u5141\u8bb8 34.26.157.0\/24 \u8be5\u7f51\u6bb5\u7684IP\u8bbf\u95ee\u3002<\/p>\n
\u9664\u4e0a\u9762\u6307\u5b9a\u7684IP\u8303\u56f4\uff0c\u5176\u4ed6IP\u7981\u6b62\u8bbf\u95ee\u3002<\/p>\n
Nginx\u914d\u7f6eSSL\u8bc1\u4e66<\/p>\n
\u8981\u8bbe\u7f6e\u4e00\u4e2aHTTPS\u670d\u52a1\u5668\uff0c\u5728nginx.conf\u6587\u4ef6\u4e2d\uff0c\u5728\u670d\u52a1\u5668\u5757\u7684listen\u6307\u4ee4\u4e2d\u52a0\u5165ssl\u53c2\u6570\uff0c\u7136\u540e\u6307\u5b9a\u670d\u52a1\u5668\u8bc1\u4e66\u548c\u79c1\u94a5\u6587\u4ef6\u7684\u4f4d\u7f6e\u3002<\/p>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       443<\/span> ssl;<\/span><\/code>    server_name<\/span>  api.weijishu.cn;<\/span><\/code>    ssl_certificate<\/span>      \/etc\/letsencrypt\/live\/api.pxxxo.com\/fullchain.pem;<\/span><\/code>    ssl_certificate_key<\/span>  \/etc\/letsencrypt\/live\/api.pxxxo.com\/privkey.pem;<\/span><\/code>    ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>    ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>    ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>    ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code> <\/code>    location<\/span> \/ {<\/span><\/code>        root<\/span>   \/usr\/share\/nginx\/html;<\/span><\/code>        index<\/span>  index.html index.htm;<\/span><\/code>    }<\/span><\/code> <\/code>    error_page<\/span>   500<\/span> 502<\/span> 503<\/span> 504<\/span>  \/50x.html;<\/span><\/code>    location<\/span> = \/50x.html {<\/span><\/code>        root<\/span>   \/usr\/share\/nginx\/html;<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
ssl_protocols \u548c ssl_ciphers \u6307\u4ee4\u53ef\u4ee5\u7528\u6765\u8981\u6c42\u5ba2\u6237\u7aef\u5728\u5efa\u7acb\u8fde\u63a5\u65f6\u53ea\u4f7f\u7528SSL\/TLS\u7684\u5f3a\u7248\u672c\u548c\u5bc6\u7801\u3002<\/p>\n
\u4f1a\u8bdd\u5b58\u50a8\u5728\u5de5\u4f5c\u8fdb\u7a0b\u4e4b\u95f4\u5171\u4eab\u7684SSL\u4f1a\u8bdd\u7f13\u5b58\u4e2d\uff0c\u5e76\u7531ssl_session_cache\u6307\u4ee4\u914d\u7f6e\u3002\u4e00\u5146\u5b57\u8282\u7684\u7f13\u5b58\u5305\u542b\u5927\u7ea64000\u4e2a\u4f1a\u8bdd\u3002\u7f13\u5b58\u7684\u9ed8\u8ba4\u8d85\u65f6\u65f6\u95f4\u662f5\u5206\u949f\uff0c\u8fd9\u4e2a\u8d85\u65f6\u65f6\u95f4\u53ef\u4ee5\u4f7f\u7528ssl_session_cache\u6307\u4ee4\u589e\u52a0\u3002\u8fd9\u4e2a\u8d85\u65f6\u65f6\u95f4\u53ef\u4ee5\u4f7f\u7528ssl_session_timeout\u6307\u4ee4\u6765\u589e\u52a0\u3002<\/p>\n
\u4e0a\u9762\u662f\u4e00\u4e2a\u4e3a\u591a\u6838\u7cfb\u7edf\u4f18\u5316\u7684\u914d\u7f6e\u793a\u4f8b\uff0c\u5b83\u67091\u5146\u5b57\u8282\u7684\u5171\u4eab\u4f1a\u8bdd\u7f13\u5b58\u3002<\/p>\n
Nginx\u914d\u7f6e\u52a8\u9759\u5206\u79bb<\/p>\n
\u52a8\u9759\u5206\u79bb\u7684\u539f\u7406\uff1anginx \u5c06\u5ba2\u6237\u7aef\u53d1\u6765\u7684\u8bf7\u6c42\u5206\u4e3a\u52a8\u6001\u8bf7\u6c42\uff08php\uff0cjsp\uff0ccgi\uff09\u4e0e\u9759\u6001\u8bf7\u6c42\uff08html\uff0ccss\uff0cjs\u548c\u56fe\u7247\u8d44\u6e90\uff09\uff0c\u8f6c\u53d1\u7ed9\u4e0d\u540c\u7684\u670d\u52a1\u5668\u3002\u6709\u8d1f\u8d23\u52a8\u6001\u5904\u7406\u7684tomcat\u670d\u52a1\u5668\uff0c\u4e5f\u6709\u53ea\u8d1f\u8d23\u9759\u6001\u6587\u4ef6\u5b58\u50a8\u7684\u670d\u52a1\u5668\u3002<\/p>\n
\n
# \u52a8\u6001\u9875\u9762\u4ea4\u7ed9http:\/\/myserver<\/span><\/span><\/code>location<\/span> ~ .*.(php|jsp|cgi)?$<\/span><\/span><\/code>{<\/span><\/code>     proxy_pass<\/span> http:\/\/tdt_wugk;<\/span><\/code>}<\/span><\/code># \u914d\u7f6eNginx\u52a8\u9759\u5206\u79bb\uff0c\u5b9a\u4e49\u7684\u9759\u6001\u9875\u9762\u76f4\u63a5\u4eceNginx\u53d1\u5e03\u76ee\u5f55\u8bfb\u53d6\u3002<\/span><\/span><\/code>location<\/span> ~ .*.(html|htm|gif|jpg|jpeg|bmp|png|ico|txt|js|css)$<\/span><\/span><\/code>{<\/span><\/code>root<\/span> \/data\/www\/file;<\/span><\/code># expires\u5b9a\u4e49\u7528\u6237\u6d4f\u89c8\u5668\u7f13\u5b58\u7684\u65f6\u95f4\u4e3a3\u5929\uff0c\u5982\u679c\u9759\u6001\u9875\u9762\u4e0d\u5e38\u66f4\u65b0\uff0c\u53ef\u4ee5\u8bbe\u7f6e\u66f4\u957f\uff0c\u8fd9\u6837\u53ef\u4ee5\u8282\u7701\u5e26\u5bbd\u548c\u7f13\u89e3\u670d\u52a1\u5668\u7684\u538b\u529b<\/span><\/span><\/code>expires<\/span>      3d<\/span>;<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
Nginx \u9690\u6027\u8df3\u8f6c\uff08\u6d4f\u89c8\u5668\u4fdd\u7559\u65e7URL\uff09<\/p>\n
\u5c06 https:\/\/sales.bxxxd.cn \u9690\u5f0f\u8f6c\u53d1\u5230 https:\/\/sales.weijishu.cn<\/p>\n
\n
server<\/span> {<\/span><\/code>       listen<\/span>       80<\/span>;<\/span><\/code>       listen<\/span>       443<\/span> ssl;<\/span><\/code>       server_name<\/span>  sales.bxxxd.cn;<\/span><\/code>       access_log<\/span>  \/usr\/local\/nginx\/logs\/sales.bxxxd.cn-access.log main;<\/span><\/code>       error_log<\/span>  \/usr\/local\/nginx\/logs\/sales.bxxxd.cn--error<\/span>.log;<\/span><\/code>\n<\/span><\/code>\n<\/span><\/code>       ssl_certificate<\/span>      \/usr\/local\/nginx\/conf\/SSL\/scs1665543427707_sales.bxxxd.cn_server.crt;<\/span><\/code>       ssl_certificate_key<\/span>  \/usr\/local\/nginx\/conf\/SSL\/scs1665543427707_sales.bxxxd.cn_server.key;<\/span><\/code>       ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>       ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>       ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>       ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code>\n<\/span><\/code>\n<\/span><\/code>       location<\/span> ~* \/<\/span> {<\/span><\/code>            proxy_redirect<\/span> off<\/span>;<\/span><\/code>            proxy_set_header<\/span> Host $host<\/span>;<\/span><\/code>            proxy_set_header<\/span> X-Real-IP $remote_addr<\/span>;<\/span><\/code>            proxy_set_header<\/span> X-Forwarded-For $proxy_add_x_forwarded_for<\/span>;<\/span><\/code>            proxy_pass<\/span> https:\/\/weijishu.cn;<\/span><\/code>    }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
\n
server<\/span> {<\/span><\/code>    listen<\/span>       443<\/span> ssl;<\/span><\/code>    server_name<\/span>  xt.pxxxo.com;<\/span><\/code>    ssl_certificate<\/span>      ssl\/pxxxo.com.pem;<\/span><\/code>    ssl_certificate_key<\/span>  ssl\/pxxxo.com.key;<\/span><\/code>    ssl_session_cache<\/span>    shared:SSL:1m<\/span>;<\/span><\/code>    ssl_session_timeout<\/span>  5m<\/span>;<\/span><\/code>    ssl_ciphers<\/span>  HIGH:!aNULL:!MD5;<\/span><\/code>    ssl_prefer_server_ciphers<\/span>  on<\/span>;<\/span><\/code>\n<\/span><\/code>\n<\/span><\/code>    access_log<\/span>  logs\/access_xt.log  main;<\/span><\/code>    error_log<\/span> logs\/error_xt.log error<\/span>;<\/span><\/code>\n<\/span><\/code>\n<\/span><\/code>    location<\/span> \/ {<\/span><\/code>    rewrite<\/span>  ^.+apis\/?(.*)$<\/span> \/$1<\/span> break<\/span>;<\/span><\/code>    proxy_pass<\/span> https:\/\/data.chxxxxc.org\/;<\/span><\/code>   }<\/span><\/code>}<\/span><\/code><\/pre>\n<\/section>\n
\n
\u672c\u7bc7\u6587\u7ae0\u6765\u6e90\u4e8e\u5fae\u4fe1\u516c\u4f17\u53f7: \u5fae\u6280\u672f\u4e4b\u5bb6<\/p><\/blockquote>\n<\/div>\n","raw":"","protected":false},"excerpt":{"rendered":"
Nginx\u914d\u7f6e\u6587\u4ef6\u8def\u5f84 \u4e0d\u540c\u5b89\u88c5\u65b9\u5f0f\uff0cnginx\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84\u4e5f\u6709\u6240\u4e0d\u540c\u3002 \u6e90\u7801\u7f16\u8bd1\u5b89\u88c5\u65b9\u5f0f\uff1a\u901a\u5e38\u5728\/usr\/local\/ngin …<\/p>\n","protected":false},"author":1,"featured_media":390,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[5],"tags":[],"class_list":["post-391","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nginx"],"post_thumbnail_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889-150x150.jpeg","content_first_image":null,"post_medium_image_300":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889-300x128.jpeg","post_thumbnail_image_624":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889-1024x435.jpeg","post_frist_image":null,"post_medium_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889-300x128.jpeg","post_large_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889-1024x435.jpeg","post_full_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230528005236889.jpeg","post_all_images":[],"videoAdId":"","listAd":"0","listAdId":"","listAdEvery":6,"total_comments":0,"category_name":"Nginx","post_date":"2023-05-27","like_count":"0","praiseWord":"\u9f13\u52b1","copyright_state":"","excitationAd":"0","rewardedVideoAdId":"","detailAdId":"","detailAd":"0","enterpriseMinapp":"0","audios":[],"postImageUrl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230519082947553.jpg","avatarurls":[],"related_posts":null,"pageviews":336,"next_post_id":351,"next_post_title":"Nginx\u4e00\u7f51\u6253\u5c3d\uff1a\u52a8\u9759\u5206\u79bb\u3001\u538b\u7f29\u3001\u7f13\u5b58\u3001\u9ed1\u767d\u540d\u5355\u3001\u8de8\u57df\u3001\u9ad8\u53ef\u7528\u3001\u6027\u80fd\u4f18\u5316...","previous_post_id":294,"previous_post_title":"40\u4e2a Nginx \u5e38\u95ee\u9762\u8bd5\u9898","_links":{"self":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts\/391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/comments?post=391"}],"version-history":[{"count":0,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts\/391\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/media\/390"}],"wp:attachment":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/media?parent=391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/categories?post=391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/tags?post=391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}