server {
#listen ??????80;
#server_name ?hzxy.fengzhongit.com;
listen ???????443 ssl;//表名在443端口監(jiān)聽https請求
server_name ??hzxy.fengzhongit.com;//域名
ssl_certificate /home/1_hzxy.fengzhongit.com_bundle.crt;//證書
ssl_certificate_key /home/2_hzxy.fengzhongit.com.key;//key
#charset koi8-r;
#access_log ?logs/host.access.log ?main;
location / {
//允許跨域訪問
add_header Access-Control-Allow-Origin *;
add_header 'Access-Control-Allow-Credentials' 'true';
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_passhttps://hzxy.fengzhongit.com:8443/;//代理地址
proxy_set_header Host $host;//這個一定要設(shè)置呕屎，表示將請求的主機(jī)名傳遞到后端服務(wù)器榆俺，如果不傳，默認(rèn)為localhost酬屉，則無法實(shí)現(xiàn)跨域訪問
# 真實(shí)的客戶端IPproxy_set_header X-Real-IP$remote_addr;
#root ??html;
#index ?index.html index.htm;
#proxy_pass https://hzxy.fengzhongit.com:8443/;
#proxy_redirect default;
}
location ~ .*\.(htm|html|bmp|jpeg|ico|png|jpg|eot|svg|ttf|woff) {
#所有靜態(tài)文件直接讀取硬盤
root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;
expires 30d; #緩存30天
}
#靜態(tài)文件交給nginx處理
location ~ .*\.(js|css)?$? {
root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;
expires 1d;
}
完整配置：
user nobody;
worker_processes2;
events{
worker_connections1024;
}
http{#設(shè)置默認(rèn)類型為二進(jìn)制流default_typeapplication/octet-stream;
server_names_hash_bucket_size128;#指定來自客戶端請求頭的headerbuffer大小耀里，設(shè)置為32KBclient_header_buffer_size32k;#指定客戶端請求中較大的消息頭的緩存最大數(shù)量和大小蜈缤，這里是4個32KBlarge_client_header_buffers432k;#上傳文件大小client_max_body_size356m;#nginx的HttpLog模塊指定，指定nginx日志的輸出格式冯挎，輸出格式為accesslog_format access'$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';#access日志存在未知access_log? /var/log/nginx/access.log? access;#開啟高效模式文件傳輸模式底哥，將tcp_nopush和tcp_nodelay兩個指另設(shè)置為on，用于防止網(wǎng)絡(luò)阻塞。sendfile? ? on;
tcp_nopush? on;
tcp_nodelay on;#設(shè)置客戶端連接保持活動的超時時間keepalive_timeout65;
server_tokens? off;#客戶端請求主體讀取緩存client_body_buffer_size512k;
proxy_connect_timeout5;
proxy_send_timeout60;
proxy_read_timeout5;
proxy_buffer_size16k;
proxy_buffers464k;
proxy_busy_buffers_size128k;
proxy_temp_file_write_size128k;#開啟gzipgzip? ? on;#允許壓縮的最小字節(jié)數(shù)gzip_min_length1k;#4個單位為16k的內(nèi)存作為壓縮結(jié)果流緩存gzip_buffers416k;#設(shè)置識別HTTP協(xié)議版本叠艳，默認(rèn)是1.1gzip_http_version1.1;#gzip壓縮比奶陈，可在1~9中設(shè)置，1壓縮比最小附较，速度最快吃粒，9壓縮比最大，速度最慢拒课，消耗CPUgzip_comp_level2;#壓縮的類型gzip_types text/plain application/x-javascript text/css application/xml;#讓前端的緩存服務(wù)器混村經(jīng)過的gzip壓縮的頁面gzip_vary? on;
upstream mycluster{
server192.168.22.229:8080weight=1;
server192.168.22.230:8080weight=1;
}
server{
listen8088;
server_name192.168.22.228;
charset? ? utf-8;#設(shè)置編碼為utf-8;#location / {#? ? root? html;#? ? index? index.html index.htm;#}#location ~ .*\.(jsp|do|action)$location / {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://mycluster;# 真實(shí)的客戶端IPproxy_set_header? X-Real-IP$remote_addr;# 請求頭中Host信息proxy_set_header? Host$host;# 代理路由信息徐勃，此處取IP有安全隱患proxy_set_header? X-Forwarded-For$proxy_add_x_forwarded_for;# 真實(shí)的用戶訪問協(xié)議proxy_set_header? X-Forwarded-Proto$scheme;
}#靜態(tài)文件交給nginx處理location ~ .*\.(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$
{
root? /usr/local/webapps;
expires30d;
}#靜態(tài)文件交給nginx處理location ~ .*\.(js|css)?$
{
root /usr/local/webapps;
expires1h;
}
error_page500502503504/50x.html;
location = /50x.html {
root? html;
}
}
}
