nginx夸城市代理上网

绝地灬酷狼 2022-06-12 23:14 148阅读 0赞

需求：

A城市---vpn---B城市（服务器所在地），C城市访问B城市服务器的就需要走公网，所以B城市需要开通公网，但是B城市没有公网ip分配给主机，计划通过代理来上网。

方案确定为通过nginx代理，C城市----公网-------A城市---vpn-----B城市（服务器）。  
1、给主机映射一个公网地址和端口。  
2、域名解析  
3、nginx代理配置  
\[root@wall nginx\]$ cat nginx.conf  
\#basic  
user nginx;     
worker\_processes 1;     
pid /var/run/nginx.pid;     
worker\_rlimit\_nofile 202400;     
events     
\{     
use epoll;     
worker\_connections 202400;     
\}     
http     
\{     
fastcgi\_connect\_timeout 300s;  
fastcgi\_send\_timeout 300s;  
fastcgi\_read\_timeout 300s;  
  include   mime.types;     
  default\_type  application/octet-stream;     
  fastcgi\_intercept\_errors on;     
  charset  utf-8;     
  server\_names\_hash\_bucket\_size 128;     
  client\_header\_buffer\_size 4k;     
  large\_client\_header\_buffers 4 32k;     
  client\_max\_body\_size 999m;     
  sendfile on;     
  tcp\_nopush  on;     
    
  keepalive\_timeout 60;     
    
  tcp\_nodelay on;     
  client\_body\_buffer\_size  512k;     
    
  proxy\_connect\_timeout  5;     
  proxy\_read\_timeout   28400;     
  proxy\_send\_timeout   28400;     
  proxy\_buffer\_size  16k;     
  proxy\_buffers    4 64k;     
  proxy\_busy\_buffers\_size 128k;     
  proxy\_temp\_file\_write\_size 128k;     
    
  gzip on;     
  \#gzip\_disable "msie6";    
  gzip\_disable "MSIE \[1-6\]\\.";  
  gzip\_min\_length  1k;     
  gzip\_buffers   4 16k;     
  gzip\_http\_version 1.1;     
  gzip\_comp\_level 2;     
  gzip\_types   text/plain application/x-javascript text/css application/xml;     
  gzip\_vary on;  
    
\#server\_tag off;  
\#server\_info off;  
\#server\_tokens off;  
  
  
\#\#\#2012-12-19 change nginx logs     
log\_format  main  '$http\_x\_forwarded\_for - $remote\_user \[$time\_local\] "$http\_host" "$request" '    
    '$status $body\_bytes\_sent "$http\_referer" '    
    '"$http\_user\_agent"  $request\_time $remote\_addr';    
  
  
  
  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#加载vhost  
include /etc/nginx/conf.d/\*.conf;  
  
  
\}  
  
  
\[root@wall nginx\]$ cd   
conf.d/                 fastcgi\_params.default  mime.types.default      scgi\_params.default       
fastcgi.conf            koi-utf                 nginx.conf              uwsgi\_params              
fastcgi.conf.default    koi-win                 nginx.conf.default      uwsgi\_params.default      
fastcgi\_params          mime.types              scgi\_params             win-utf                   
\[root@wall nginx\]$ cd conf.d/  
\[root@wall conf.d\]$ ls  
wall.conf  
\[root@wall conf.d\]$ cat wall.conf   
upstream wall \{  
  server 192.168.1.2:80;    （B城市服务器地址）  
\#check interval=3000 rise=2 fall=5 timeout=30000;  
\}  
  
  
server \{  
  
  
listen 83;  
server\_name wall\*;  
location /  
  
  
  \{  
  proxy\_next\_upstream http\_502 http\_504 error timeout invalid\_header;  
  proxy\_set\_header Host  $host;  
  proxy\_set\_header X-Real-IP $remote\_addr;  
  proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
  \#proxy\_set\_header X-Forwarded-Proto https;  
  proxy\_pass http://wall;  
  expires off;  
  \}  
\}