# openssl

wget https://www.openssl.org/source/openssl-1.1.1c.tar.gz

#zilib

wget http://www.zlib.net/zlib-1.2.11.tar.gz

#pcre

wget  https://netix.dl.sourceforge.net/project/pcre/pcre/8.40/pcre-8.40.tar.gz

#nginx

wget http://nginx.org/download/nginx-1.17.3.tar.gz

tar -zxvf xxxx.tar.gz

. 首先  使用 tar 包 安装上 zlib openssh 以及 pcre 三个包

Firest 进入解压缩好的目录

./configure  or  ./config

second

make && make install

. 进行安装nginx

#进入nginx 的目录

执行配置.

./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module  --with-http_gzip_static_module --with-stream --with-stream_ssl_module

# 注意 stream 就可以进行 TCP层的反向代理了.

参考网站:https://blog.csdn.net/jijiuqiu6646/article/details/78675891

打开nginx 时会报错 如下:

[root@k8smaster sbin]# ./nginx

./nginx: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory

[root@k8smaster sbin]# openssl version

openssl: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory

参考网站:

https://blog.csdn.net/caohongshuang/article/details/78031978

查看 依赖关系
ldd $(which /usr/local/nginx/sbin/nginx)

[root@k8smaster sbin]# ldd $(which /usr/local/nginx/sbin/nginx)
linux-vdso.so.1 => (0x00007ffe6b5f2000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f95a7389000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f95a716d000)
libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f95a6f36000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f95a6cd4000)
libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007f95a6a42000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f95a6559000)
libz.so.1 => /lib64/libz.so.1 (0x00007f95a6343000)
libc.so.6 => /lib64/libc.so.6 (0x00007f95a5f76000)
/lib64/ld-linux-x86-64.so.2 (0x00007f95a758d000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f95a5d73000)

进入到openssl 相关的目录 进行 软连接处理

[root@k8smaster sbin]# cd /usr/local/lib64/
[root@k8smaster lib64]# ll
total 10468
drwxr-xr-x 2 root root 55 Sep 2 18:26 engines-1.1
-rw-r--r-- 1 root root 5619436 Sep 2 18:26 libcrypto.a
lrwxrwxrwx 1 root root 16 Sep 2 18:26 libcrypto.so -> libcrypto.so.1.1
-rwxr-xr-x 1 root root 3383960 Sep 2 18:26 libcrypto.so.1.1
-rw-r--r-- 1 root root 1022072 Sep 2 18:26 libssl.a
lrwxrwxrwx 1 root root 13 Sep 2 18:26 libssl.so -> libssl.so.1.1
-rwxr-xr-x 1 root root 684992 Sep 2 18:26 libssl.so.1.1
drwxr-xr-x 2 root root 61 Sep 2 18:26 pkgconfig
[root@k8smaster lib64]# ln libssl.so.1.1 /usr/lib64/libssl.so.1.1
[root@k8smaster lib64]# ln libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1

注意 第三步 nginx的 configure 时有一个配置简述

Configuration summary

  + using system PCRE library

  + using system OpenSSL library

  + using system zlib library

  nginx path prefix: "/usr/local/nginx"

  nginx binary file: "/usr/local/nginx/sbin/nginx"

  nginx modules path: "/usr/local/nginx/modules"

  nginx configuration prefix: "/usr/local/nginx/conf"

  nginx configuration file: "/usr/local/nginx/conf/nginx.conf"

  nginx pid file: "/usr/local/nginx/logs/nginx.pid"

  nginx error log file: "/usr/local/nginx/logs/error.log"

  nginx http access log file: "/usr/local/nginx/logs/access.log"

  nginx http client request body temporary files: "client_body_temp"

  nginx http proxy temporary files: "proxy_temp"

  nginx http fastcgi temporary files: "fastcgi_temp"

  nginx http uwsgi temporary files: "uwsgi_temp"

  nginx http scgi temporary files: "scgi_temp"

vim /usr/local/nginx/conf/nginx.conf

增加上与 http 同级的配置节:

stream{

    server {

      listen ;

      proxy_pass 10.24.14.56:;

  }

}

# 注意 第一点 需要有 分号 我经常忘记

# 第二点 大括号要处理好.

如果 80 端口已经使用的花 可以在http 里面讲 80端口修改一下就可以了.

/usr/local/nginx/sbin/nginx -s reload

stream{

   upstream zhaobsh{

    server 10.24.14.56:;

    server 10.24.210.11:;

    }

   server {

      listen ;

      proxy_pass zhaobsh;

  }

}