一、背景
内网环境有多套系统，都监听80、443 端口
只有一个公网IP出口，无法实现将多个系统的 80 、443同时映射到公网IP上
只能通过加层来解决，通过基于域名的nginx虚拟机主机承载内网多套系统，将nginx虚拟机主机服务器上 80、443映射出去就可以了。
二、配置虚拟主机
在虚拟主机服务器上，安装nginx
# cat /etc/yum.repos.d/nginx.repo
#########################################
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1
############################################
# yum list available --disablerepo="*" --enablerepo="nginx"
# yum -y install nginx --enablerepo="nginx"
# mkdir /etc/nginx/ssl
# cat /etc/nginx/nginx.conf
###############################################################
# For more information on configuration, see:
# * Official English Documentation:http://nginx.org/en/docs/
# * Official Russian Documentation:http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
# stream转发
stream {
proxy_connect_timeout 10s;
include /etc/nginx/conf.d/stream/*.conf;
}
# http转发
http {
client_max_body_size 500M;
include mime.types;
default_type application/octet-stream;
server_tokens off;
sendfile on;
keepalive_timeout 65;
send_timeout 600;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header host $host;
proxy_send_timeout 600;
proxy_read_timeout 600;
proxy_connect_timeout 600;
proxy_max_temp_file_size 4096m;
#################################################
# 开启websocket支持
proxy_http_version 1.1;
proxy_set_header Connection "";
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
###################################################
include /etc/nginx/conf.d/http/*.conf;
}
###############################################################
# cat /etc/nginx/conf.d/http/443.conf
###################################################################
upstream x1_443_service {
server 192.168.1.101:443 max_fails=2 fail_timeout=60s;
}
upstream x2_443_service {
server 192.168.1.102:443 max_fails=2 fail_timeout=60s;
}
# 虚拟机主机x1
server {
listen 443 ssl;
server_name www.example1.com;
ssl_certificate /etc/nginx/ssl/www.example1.com.cer;
ssl_certificate_key /etc/nginx/ssl/www.example1.com.key;
location / {
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
send_timeout 600;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header host $host;
proxy_pass https://x1_443_service;
# websocket
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
#虚拟主机x2
server {
listen 443 ssl;
server_name www.example2.com;
ssl_certificate /etc/nginx/ssl/www.example2.com.pem;
ssl_certificate_key /etc/nginx/ssl/www.example2.com.key;
location / {
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
send_timeout 600;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header host $host;
proxy_pass https://x2_443_service;
# websocket
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
###################################################################
# cat /etc/nginx/conf.d/stream/10086.conf
############################################
upstream 10086_service {
hash $remote_addr consistent;
server 192.168.1.103:10086 max_fails=2 fail_timeout=60s;
}
server {
listen 10086;
proxy_pass 10086_service;
}
############################################
# systemctl restart nginx
# ss -tan | grep -w 443
# ss -tan | grep -w 10086
三、测试
在windows测试机器添加hosts映射
C:\Windows\System32\drivers\etc
##############################
192.168.1.100 www.example1.com
192.168.1.100 www.example2.com
###############################
浏览器分别访问 https://www.example1.com https://www.example2.com
四、参考
nginx虚拟主机概念和类型介绍
https://blog.51cto.com/sandshell/1957701
Nginx 虚拟主机配置
https://www.cnblogs.com/wushuaishuai/p/9343044.html
How to Create an Nginx Virtual Host
https://www.keycdn.com/support/nginx-virtual-host
Server Block Examples
https://www.nginx.com/resources/wiki/start/topics/examples/server_blocks
Nginx如何处理一个请求
https://tengine.taobao.org/nginx_docs/cn/docs/http/request_processing.html