Docker+Nginx搭建正向代理服务

悠悠 2022-10-29 12:22 628阅读 0赞

> nginx在企业级来说应用较为广泛的作为反向代理服务器，配合后端集群服务做负载均衡等一些列措施。  
> 本文主要是以正向代理为例，应用场景如：多台服务器处于同一局域网内，其中一台服务器可访问外面，那么可在外网的这台服务器搭建nginx正向代理，其他内网服务器可通过这台服务器间接访问外网。

参考链接：[https://github.com/yadoudou/nginx\_proxy\_docker][https_github.com_yadoudou_nginx_proxy_docker]

需要注意的是，nginx的正向代理默认不支持https，可以使用github大佬chobits写的ngx\_http\_proxy\_connect\_module模块来支持https。  
github地址：[https://github.com/chobits/ngx\_http\_proxy\_connect\_module][https_github.com_chobits_ngx_http_proxy_connect_module]

## Coding ##

#创建工作目录
    mkdir workdir && cd workdir
    #下载nginx包
    wget http://nginx.org/download/nginx-1.17.4.tar.gz
    #从github下载ngx_http_proxy_connect_module模块
    git clone https://github.com/chobits/ngx_http_proxy_connect_module.git nginx_proxy
    # 如果提示git指令不存在。自行：yum install git -y
    # 返回上一级并创建Dockerfile
    cd ../ && touch Dockerfile

**Dockerfile内容**

FROM centos:7
    
    RUN yum install -y patch gcc glibc-devel make openssl-devel pcre-devel zlib-devel gd-devel geoip-devel perl-devel
    
    RUN groupadd -g 101 nginx \
              && adduser  -u 101 -d /var/cache/nginx -s /sbin/nologin  -g nginx nginx 
    
    COPY ./workdir /workdir
    
    WORKDIR /workdir
    
    RUN tar -zxvf nginx-1.17.4.tar.gz && cd nginx-1.17.4 \
           && patch -p1 < /workdir/nginx_proxy/patch/proxy_connect_rewrite_101504.patch \
          && ./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g -O2 -fdebug-prefix-map=/data/builder/debuild/nginx-1.17.1/debian/debuild-base/nginx-1.17.1=. -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie' --add-module=/workdir/nginx_proxy \
         && make && make install \
        && cd /workdir && rm -rf /workdir/* 
    
    CMD ["nginx", "-g", "daemon off;"]

**构建镜像文件**

docker build -t nginx:proxy_1.17.4 .

![构建成功][20210214123502349.png]

**配置nginx.conf正向代理**

#user nobody;
    worker_processes  1;
    
    events { 
        worker_connections  1024;
    }
    
    
    http { 
        include       mime.types;
        default_type  application/octet-stream;
        sendfile        on;
        keepalive_timeout  65;
    
        server { 
            listen       8888;
            resolver 8.8.8.8;
            proxy_connect;
            proxy_connect_allow           443 563;
            proxy_connect_connect_timeout  90s;
            proxy_connect_read_timeout     90s;
            proxy_connect_send_timeout     90s;
            location / { 
                proxy_pass http://$host;
                proxy_set_header Host $host;
            }
        }
    
    }

#构建容器
    docker run --name nginx_proxy -d -p 8888:8888 -v /pan_data/proxy_nginx/nginx.conf:/etc/nginx/nginx.conf nginx:proxy_1.17.4
    #测试正向代理
    curl https://www.baidu.com -v -x 127.0.0.1:8888

对你有帮助的话，点个赞呗~

[https_github.com_yadoudou_nginx_proxy_docker]: https://github.com/yadoudou/nginx_proxy_docker
[https_github.com_chobits_ngx_http_proxy_connect_module]: https://github.com/chobits/ngx_http_proxy_connect_module
[20210214123502349.png]: /images/20221024/b95b9d56ac8142e2a50559a003cd9cce.png