Различия

Показаны различия между двумя версиями страницы.

--- wiki:technical:upsream [2022/03/27 20:45] – создано Diman
+++ wiki:technical:upsream [2026/04/14 18:05] (текущий) – Diman
@@ Строка 1: / Строка 1: @@
-====Upstream  NGINX====
+====Upstream SSL in NGINX====
-worker_processes  16;
+<code bash>
-# This default error log path is compiled-in to make sure configuration parsing
-# errors are logged somewhere, especially during unattended boot when stderr
-# isn't normally logged anywhere. This path will be touched on every nginx
-# start regardless of error log location configured here. See
-# https://trac.nginx.org/nginx/ticket/147 for more info.
-#
-error_log  /var/log/nginx/error.log;
 #
+# install nginx stream module
-#pid        logs/nginx.pid;
+apt install -y nginx libnginx-mod-stream
-events {
+mkdir /etc/nginx/stream.d/
-    worker_connections  16384;
-}
+##
+# to nginx.conf add
+include /etc/nginx/stream.d/*.conf;
 http {
-  upstream vpro {
+...
-#    server 127.0.0.1:8000 weight=3;
-#    server 127.0.0.1:8001;
-#    server 127.0.0.1:8002;
-     server web1:443;
-  }
-  server {
+</code>
-        listen 80;
-        server_name uplink-vpro.vps-server.ru;
-        location / {
-        proxy_pass http://vpro;
-        proxy_set_header Host uplink-vpro.vps-server.ru;
-        proxy_set_header X-Forwarded-For $remote_addr;
-        }
-   }
-   server {
+=== "stream" directive is not allowed here ===
-        listen 443 ssl;
-        server_name uplink-vpro.vps-server.ru;
-        #        ssl_certificate        /etc/ssl/certs/server.crt;
-        # ssl_certificate_key    /etc/ssl/certs/server.key;
-        # ssl_client_certificate /etc/ssl/certs/ca.crt;
-        #  ssl_verify_client      optional;
-        ssl_certificate      /usr/local/etc/nginx/certs/uplink-vpro.vps-server.ru.pem;
-        ssl_certificate_key  /usr/local/etc/nginx/certs/uplink-vpro.vps-server.ru.key;
-        location / {
-        proxy_pass https://vpro;
-        proxy_set_header Host uplink-vpro.vps-server.ru;
-        proxy_set_header X-Forwarded-For $remote_addr;
-        }
-   }
-}
+<code>
+	worker_processes  16;
+	error_log  /var/log/nginx/error.log;
+	#
+	#pid        logs/nginx.pid;
+	events {
+	    worker_connections  16384;
+	}
+	http {
+	  upstream vpro {
+	     server web1:443;
+	     server web2:443;
+	     server web3:443 weight=3;
+	  }
+	  server {
+		listen 80;
+		server_name uplink-vpro.vps-server.ru;
+		location / {
+		proxy_pass http://vpro;
+		proxy_set_header Host uplink-vpro.vps-server.ru;
+		proxy_set_header X-Forwarded-For $remote_addr;
+		}
+	   }
+	   server {
+		listen 443 ssl;
+		server_name uplink-vpro.vps-server.ru;
+		ssl_certificate      /usr/local/etc/nginx/certs/uplink-vpro.vps-server.ru.pem;
+		ssl_certificate_key  /usr/local/etc/nginx/certs/uplink-vpro.vps-server.ru.key;
+		location / {
+		proxy_pass https://vpro;
+		proxy_set_header Host uplink-vpro.vps-server.ru;
+		proxy_set_header X-Forwarded-For $remote_addr;
+		}
+	   }
+	}
+</code>