nginx 地址80端口转发后ip地址自动添加代理的端口

忘是亡心i 2023-10-02 16:33 51阅读 0赞

## 一、环境场景 ： ##

由于服务器80端口不对外开发，外网使用80端口映射服务器1880端口 ，导致web应用 重定向（redirect）后地址后自动填充了1880端口

错误nginx配置如下

upstream pws01{
          server 127.0.0.1:10180 weight=1;
          server 127.0.0.1:10280 weight=1;
          server 127.0.0.1:10380 weight=1;
          server 172.16.33.1:10180 weight=1;
          server 172.16.33.1:10280 weight=1;
          server 172.16.33.1:10380 weight=1;
    }
    server {
            listen       1880;
            listen       4443 ssl;
            server_name www.test.cn ;
    #         access_log  /data/log/nginx/access.log  main;
             error_log  /data/log/nginx/error.log;
                    ssl_certificate /.crt;
                    ssl_certificate_key /.key;
                    ssl_session_timeout 5m;
                    ssl_session_cache    shared:SSL:1m;
                    ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
                    ssl_ciphers               HIGH:!aNULL:!MD5;
                    ssl_prefer_server_ciphers  on;
                    proxy_redirect off;
                    client_max_body_size 100m;
                    client_body_buffer_size 128k;
                    proxy_connect_timeout 1200;
                    proxy_send_timeout 1200;
                    proxy_read_timeout 1200;
                    proxy_buffer_size 4k;
                    proxy_buffers 32 4k;
                    proxy_busy_buffers_size 64k;
                    proxy_set_header        Host            $host:$server_port;
                    proxy_set_header        X-Real-IP       $remote_addr;
                    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header        ddURI           $request_uri;
                    proxy_set_header X-Forwarded-Scheme  $scheme; 
    
    
    location /webapp/ {
                proxy_pass    http://pws01/;
                proxy_redirect http:// $scheme:// ;
            	}
          
    }

解决问题

proxy\_set\_header Host $host:$server\_port; 更改为

proxy\_set\_header Host $host:80; 直接写死80端口，不通过动态参数获取

正确配置文件

upstream pws01{
          server 127.0.0.1:10180 weight=1;
          server 127.0.0.1:10280 weight=1;
          server 127.0.0.1:10380 weight=1;
          server 172.16.33.1:10180 weight=1;
          server 172.16.33.1:10280 weight=1;
          server 172.16.33.1:10380 weight=1;
    }
    server {
            listen       1880;
            listen       4443 ssl;
            server_name www.test.cn ;
    #         access_log  /data/log/nginx/access.log  main;
             error_log  /data/log/nginx/error.log;
                    ssl_certificate /.crt;
                    ssl_certificate_key /.key;
                    ssl_session_timeout 5m;
                    ssl_session_cache    shared:SSL:1m;
                    ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
                    ssl_ciphers               HIGH:!aNULL:!MD5;
                    ssl_prefer_server_ciphers  on;
                    proxy_redirect off;
                    client_max_body_size 100m;
                    client_body_buffer_size 128k;
                    proxy_connect_timeout 1200;
                    proxy_send_timeout 1200;
                    proxy_read_timeout 1200;
                    proxy_buffer_size 4k;
                    proxy_buffers 32 4k;
                    proxy_busy_buffers_size 64k;
                    proxy_set_header        Host            $host:80;
                    proxy_set_header        X-Real-IP       $remote_addr;
                    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header        ddURI           $request_uri;
                    proxy_set_header X-Forwarded-Scheme  $scheme; 
    
    
    location /webapp/ {
                proxy_pass    http://pws01/;
                proxy_redirect http:// $scheme:// ;
            	}
          
    }