配置虛擬主機

• http

http {
  server {
    listen       80;  #端口號
    server_name  www.test.com; #域名
    location / {
        root   data/www;  # 項目路徑
        index  index.html index.htm;
    }
 }
}

• https

http {
    省略...
    server {
     listen 443;
     server_name hotel.test.com;
     ssl on;
     ssl_certificate   /etc/nginx/cert/a.pem;
     ssl_certificate_key  /etc/nginx/cert/a.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     location / {
        proxy_pass  http://172.17.0.2:8008;
        index  index.php;
     }
    }
}

反向代理

• 作用

1. 接受請求，轉發(fā)給內網(wǎng)的其他服務器，并返回結果給客戶端

• 好處

1. 隱藏真實的IP地址
2. 解決前后端分離跨域問題

• 配置反向代理

server {
        # 監(jiān)聽的端口
        listen       80;
        # 監(jiān)聽的域名
        server_name  test.domain_name.com;

        # 頭信息
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        # proxy_pass，代理轉發(fā)
        location / {
            proxy_pass  http://api.domain_name.com;
        proxy_connect_timeout 600;
            proxy_read_timeout 600;
            index  index.php;
        }
 }

• 配置好反向代理, header頭數(shù)據(jù)帶不過去怎么辦？

在http中添加 underscores_in_headers on;