Nginx 四层代理配置模板

  

   

    

     

    
    

     

      worker_processes 4;
     
    
   

    

     

    
    

     

      worker_rlimit_nofile 40000;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      events {
     
    
   

    

     

    
    

     

          worker_connections 8192;
     
    
   

    

     

    
    

     

      }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

      http {
     
    
   

    

     

    
    

     

          upstream rancher {
     
    
   

    

     

    
    

     

              server IP_NODE_1:80;
     
    
   

    

     

    
    

     

              server IP_NODE_2:80;
     
    
   

    

     

    
    

     

              server IP_NODE_3:80;
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     
    map $http_upgrade $connection_upgrade {
     
    
   

    

     

    
    

     

              default Upgrade;
     
    
   

    

     

    
    

     
        ''      close;
     
    
   

    

     

    
    

     

          }
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

          server {
     
    
   

    

     

    
    

     
        listen 443 ssl http2;
     
    
   

    

     

    
    

     

              server_name FQDN;
     
    
   

    

     

    
    

     

              ssl_certificate /certs/fullchain.pem;
     
    
   

    

     

    
    

     

              ssl_certificate_key /certs/privkey.pem;
     
    
   

    

     

    
    

     
 
     
    
   

    

     

    
    

     

              location / {
     
    
   

    

     

    
    

     

                  proxy_set_header Host $host;
     
    
   

    

     

    
    

     

                  proxy_set_header X-Forwarded-Proto $scheme;
     
    
   

    

     

    
    

     

                  proxy_set_header X-Forwarded-Port $server_port;
     
    
   

    

     

    
    

     

                  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     
    
   

    

     

    
    

     

                  proxy_pass http://rancher;
     
    
   

    

     

    
    

     

                  proxy_http_version 1.1;
     
    
   

    

     

    
    

     

                  proxy_set_header Upgrade $http_upgrade;
     
    
   

    

     

    
    

     

                  proxy_set_header Connection $connection_upgrade;
     
    
   

    

     

    
    

     
            # This allows the ability for the execute shell windo
     
    
  
 

文章来源: blog.csdn.net，作者：隔壁老瓦，版权归原作者所有，如需转载，请联系作者。

原文链接：blog.csdn.net/wxb880114/article/details/124970478