server {
#listen 80;
#server_name hzxy.fengzhongit.com;
listen 443 ssl;//表名在443端口监听https请求
server_name hzxy.fengzhongit.com;//域名
ssl_certificate /home/1_hzxy.fengzhongit.com_bundle.crt;//证书
ssl_certificate_key /home/2_hzxy.fengzhongit.com.key;//key
#charset koi8-r;
#access_log logs/host.access.log main;
location / {
//允许跨域访问
add_header Access-Control-Allow-Origin *;
add_header 'Access-Control-Allow-Credentials' 'true';
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_passhttps://hzxy.fengzhongit.com:8443/;//代理地址
proxy_set_header Host $host;//这个一定要设置，表示将请求的主机名传递到后端服务器，如果不传，默认为localhost，则无法实现跨域访问
# 真实的客户端IPproxy_set_header X-Real-IP$remote_addr;
#root html;
#index index.html index.htm;
#proxy_pass https://hzxy.fengzhongit.com:8443/;
#proxy_redirect default;
}
location ~ .*\.(htm|html|bmp|jpeg|ico|png|jpg|eot|svg|ttf|woff) {
#所有静态文件直接读取硬盘
root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;
expires 30d; #缓存30天
}
#静态文件交给nginx处理
location ~ .*\.(js|css)?$ {
root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;
expires 1d;
}
完整配置：
user nobody;
worker_processes2;
events{
worker_connections1024;
}
http{#设置默认类型为二进制流default_typeapplication/octet-stream;
server_names_hash_bucket_size128;#指定来自客户端请求头的headerbuffer大小，设置为32KBclient_header_buffer_size32k;#指定客户端请求中较大的消息头的缓存最大数量和大小，这里是4个32KBlarge_client_header_buffers432k;#上传文件大小client_max_body_size356m;#nginx的HttpLog模块指定，指定nginx日志的输出格式，输出格式为accesslog_format access'$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';#access日志存在未知access_log /var/log/nginx/access.log access;#开启高效模式文件传输模式，将tcp_nopush和tcp_nodelay两个指另设置为on，用于防止网络阻塞。sendfile on;
tcp_nopush on;
tcp_nodelay on;#设置客户端连接保持活动的超时时间keepalive_timeout65;
server_tokens off;#客户端请求主体读取缓存client_body_buffer_size512k;
proxy_connect_timeout5;
proxy_send_timeout60;
proxy_read_timeout5;
proxy_buffer_size16k;
proxy_buffers464k;
proxy_busy_buffers_size128k;
proxy_temp_file_write_size128k;#开启gzipgzip on;#允许压缩的最小字节数gzip_min_length1k;#4个单位为16k的内存作为压缩结果流缓存gzip_buffers416k;#设置识别HTTP协议版本，默认是1.1gzip_http_version1.1;#gzip压缩比，可在1~9中设置，1压缩比最小，速度最快，9压缩比最大，速度最慢，消耗CPUgzip_comp_level2;#压缩的类型gzip_types text/plain application/x-javascript text/css application/xml;#让前端的缓存服务器混村经过的gzip压缩的页面gzip_vary on;
upstream mycluster{
server192.168.22.229:8080weight=1;
server192.168.22.230:8080weight=1;
}
server{
listen8088;
server_name192.168.22.228;
charset utf-8;#设置编码为utf-8;#location / {# root html;# index index.html index.htm;#}#location ~ .*\.(jsp|do|action)$location / {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://mycluster;# 真实的客户端IPproxy_set_header X-Real-IP$remote_addr;# 请求头中Host信息proxy_set_header Host$host;# 代理路由信息，此处取IP有安全隐患proxy_set_header X-Forwarded-For$proxy_add_x_forwarded_for;# 真实的用户访问协议proxy_set_header X-Forwarded-Proto$scheme;
}#静态文件交给nginx处理location ~ .*\.(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$
{
root /usr/local/webapps;
expires30d;
}#静态文件交给nginx处理location ~ .*\.(js|css)?$
{
root /usr/local/webapps;
expires1h;
}
error_page500502503504/50x.html;
location = /50x.html {
root html;
}
}
}
