自建MinIO对象存储(二)：配置集群域名访问

秒速五厘米 2023-06-17 05:52 10阅读 0赞

因为我的项目需要兼容AWS-SDK进行网页直传，所以需要配置域名访问，（AWS-SDK访问对象存储的URL时会自动去掉端口号，所以只能用域名访问）

这里我使用nginx进行反向代理和负载均衡，官方文档是这样配置的：

server {
     listen 80;
     server_name example.com;
     location / {
       proxy_set_header Host $http_host;
       proxy_pass http://localhost:9000;
     }
    }

https协议的配置：

worker_processes  1;
    events {
        worker_connections  1024;
    }
    http {
        include       mime.types;
        default_type  application/octet-stream;
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
        sendfile        on;
        server_tokens  off;
        keepalive_timeout  65;
        client_max_body_size 50m;
        access_log   /var/log/nginx/nginx.access.log;
        error_log    /var/log/nginx/nginx.error.log;
        upstream minio_server {
            server 192.168.10.101:9000;
            server 192.168.10.102:9000;
            ip_hash;
        }
        server {
            listen       80;
            server_name  minio.test.com;
            return 301   https://$host$request_uri;
        }
        server {
            listen        443 ssl;
            server_name   minio.test.com;
            ssl_certificate      /usr/local/nginx/cert-ssl/minio.test.com.pem;
            ssl_certificate_key  /usr/local/nginx/cert-ssl/minio.test.com.key;
            ssl_session_timeout 5m;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_prefer_server_ciphers on;
            location / {
                proxy_pass http://minio_server;
                proxy_redirect    off;
                proxy_set_header  Host             $http_host;
                proxy_set_header  X-Real-IP        $remote_addr;
                proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
            }
         }
    }

这里我只使用http协议，我的配置如下：

![20191127170534168.png][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ_size_16_color_FFFFFF_t_70][]

配置完就可以直接用域名访问管理界面了

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ_size_16_color_FFFFFF_t_70 1][]

[20191127170534168.png]: https://img-blog.csdnimg.cn/20191127170534168.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191127170546776.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191127170608540.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpeXV4NDg2OQ==,size_16,color_FFFFFF,t_70