nginx 地址80端口转发后ip地址自动添加代理的端口-蒲公英云

nginx 地址80端口转发后ip地址自动添加代理的端口

忘是亡心i 2023-10-02 16:33 82阅读 0赞

一、环境场景：

由于服务器80端口不对外开发，外网使用80端口映射服务器1880端口，导致web应用重定向（redirect）后地址后自动填充了1880端口

错误nginx配置如下

upstream pws01{
      server 127.0.0.1:10180 weight=1;
      server 127.0.0.1:10280 weight=1;
      server 127.0.0.1:10380 weight=1;
      server 172.16.33.1:10180 weight=1;
      server 172.16.33.1:10280 weight=1;
      server 172.16.33.1:10380 weight=1;
}
server {
        listen       1880;
        listen       4443 ssl;
        server_name www.test.cn ;
#         access_log  /data/log/nginx/access.log  main;
         error_log  /data/log/nginx/error.log;
                ssl_certificate /.crt;
                ssl_certificate_key /.key;
                ssl_session_timeout 5m;
                ssl_session_cache    shared:SSL:1m;
                ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
                ssl_ciphers               HIGH:!aNULL:!MD5;
                ssl_prefer_server_ciphers  on;
                proxy_redirect off;
                client_max_body_size 100m;
                client_body_buffer_size 128k;
                proxy_connect_timeout 1200;
                proxy_send_timeout 1200;
                proxy_read_timeout 1200;
                proxy_buffer_size 4k;
                proxy_buffers 32 4k;
                proxy_busy_buffers_size 64k;
                proxy_set_header        Host            $host:$server_port;
                proxy_set_header        X-Real-IP       $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header        ddURI           $request_uri;
                proxy_set_header X-Forwarded-Scheme  $scheme; 
location /webapp/ {
            proxy_pass    http://pws01/;
            proxy_redirect http:// $scheme:// ;
            }
}

解决问题

proxy_set_header Host $host:$server_port; 更改为

proxy_set_header Host $host:80; 直接写死80端口，不通过动态参数获取

正确配置文件

upstream pws01{
      server 127.0.0.1:10180 weight=1;
      server 127.0.0.1:10280 weight=1;
      server 127.0.0.1:10380 weight=1;
      server 172.16.33.1:10180 weight=1;
      server 172.16.33.1:10280 weight=1;
      server 172.16.33.1:10380 weight=1;
}
server {
        listen       1880;
        listen       4443 ssl;
        server_name www.test.cn ;
#         access_log  /data/log/nginx/access.log  main;
         error_log  /data/log/nginx/error.log;
                ssl_certificate /.crt;
                ssl_certificate_key /.key;
                ssl_session_timeout 5m;
                ssl_session_cache    shared:SSL:1m;
                ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
                ssl_ciphers               HIGH:!aNULL:!MD5;
                ssl_prefer_server_ciphers  on;
                proxy_redirect off;
                client_max_body_size 100m;
                client_body_buffer_size 128k;
                proxy_connect_timeout 1200;
                proxy_send_timeout 1200;
                proxy_read_timeout 1200;
                proxy_buffer_size 4k;
                proxy_buffers 32 4k;
                proxy_busy_buffers_size 64k;
                proxy_set_header        Host            $host:80;
                proxy_set_header        X-Real-IP       $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header        ddURI           $request_uri;
                proxy_set_header X-Forwarded-Scheme  $scheme; 
location /webapp/ {
            proxy_pass    http://pws01/;
            proxy_redirect http:// $scheme:// ;
            }
}