nginx 多个ssl配置冲突

znzwmz · 2014-08-11T16:33:52+00:00

Nginx的配置文件是root吗发件人: openresty@googlegroups.com [mailto:openresty@g...

nginx 多个ssl配置冲突

znzwmz

B服务器：ssl.conf:

server{
listen 443;
ssl on;
server_name service.app.com;
include /usr/local/openresty/nginx/conf/route.conf;
}
server{
listen 443;
ssl on;
server_name service1.app.com;
include /usr/local/openresty/nginx/conf/route1.conf;
}

A服务器：ssl.conf
server {
listen 443;
ssl on;
server_name www.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service.app.com;
}
}
server {
listen 443;
ssl on;
server_name www1.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service1.app.com;
}
}

配置的思路是www.app.com->service.app.com www1.app.com->service1.app.com

但是，我屏蔽掉b服务器的service.app.com的配置后，www和www1都会到service1.app.com 否则都会到service.app.com。

Attachment: smime.p7s
Description: S/MIME cryptographic signature

znzwmz

测试后发现：

B服务器上的ssl配置，哪个写在前面，就会由哪个来受理请求来的服务。

是不是A 服务器上的反向代理配置缺少了什么，导致A在请求B时缺少必要的信息，导致B只能用第一个ssl配置出来请求？

在 2014年8月11日星期一UTC+8下午4时33分55秒，周维明写道：

B服务器：ssl.conf:
server{
listen 443;
ssl on;
server_name service.app.com;
include /usr/local/openresty/nginx/conf/route.conf;
}
server{
listen 443;
ssl on;
server_name service1.app.com;
include /usr/local/openresty/nginx/conf/route1.conf;
}

A服务器：ssl.conf
server {
listen 443;
ssl on;
server_name www.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service.app.com;
}
}
server {
listen 443;
ssl on;
server_name www1.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service1.app.com;
}
}
配置的思路是www.app.com->service.app.com www1.app.com->service1.app.com
但是，我屏蔽掉b服务器的service.app.com的配置后，www和www1都会到service1.app.com 否则都会到service.app.com。

znzwmz

已解决。

A服务器修改配置：proxy_set_header Host $host; 修改为 proxy_set_header Host $proxy_host;

在 2014年8月11日星期一UTC+8下午4时33分55秒，周维明写道：

B服务器：ssl.conf:
server{
listen 443;
ssl on;
server_name service.app.com;
include /usr/local/openresty/nginx/conf/route.conf;
}
server{
listen 443;
ssl on;
server_name service1.app.com;
include /usr/local/openresty/nginx/conf/route1.conf;
}

A服务器：ssl.conf
server {
listen 443;
ssl on;
server_name www.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service.app.com;
}
}
server {
listen 443;
ssl on;
server_name www1.app.com;
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass https://service1.app.com;
}
}
配置的思路是www.app.com->service.app.com www1.app.com->service1.app.com
但是，我屏蔽掉b服务器的service.app.com的配置后，www和www1都会到service1.app.com 否则都会到service.app.com。