一、前言
1.1 正向代理功能比較簡單，但是原生nginx不支持https代理，如果訪問https網站，會報錯。
# nginx代理不支持http CONNECT方法： curl: (56) Received HTTP code 400 from proxy after CONNECT
1.2 為了實現對https代理的支持，需要對原有nginx源碼打補丁，就可以讓nginx支持CONNECT模式了。
https://github.com/chobits/ngx_http_proxy_connect_module#build-openresty
二、下載並安裝openresty
shell> yum -y install lua-devel shell> wget http://dlsw.91donkey.com/software/source/nginx/openresty-1.15.8.1.tar.gz shell> git clone https://github.com/chobits/ngx_http_proxy_connect_module.git shell> tar zxf openresty-1.15.8.1.tar.gz shell> vim bundle/nginx-1.15.8/auto/cc/gcc # 將下列代碼註釋掉，能夠減少編譯後nginx二級制文件的大小，提高程序執行效率。 # debug CFLAGS="$CFLAGS -g" shell> cd openresty-1.15.8.1 shell> ./configure --prefix=/opt/openresty --with-http_stub_status_module --with-http_sub_module \ --with-http_auth_request_module --with-http_addition_module \ --add-module=/usr/local/src/ngx_http_proxy_connect_module shell> patch -d build/nginx-1.15.8/ -p 1 < /usr/local/src/ngx_http_proxy_connect_module/patch/proxy_connect_rewrite_101504.patch shell> gmake -j 8 && gmake install shell> echo "/opt/openresty/nginx/sbin/nginx" >> /etc/rc.d/rc.local shell> /opt/openresty/nginx/sbin/nginx # 配置nginx vim語法高亮 shell> cd /usr/local/src/openresty-1.11.2.5/build/nginx-1.11.2/contrib/vim/ shell> mkdir ~/.vim/ && \cp -R * ~/.vim/
三、配置服務器端nginx正向代理
# 在nginx.conf中增加server{}塊，具體如下：
server {
listen 8080;
resolver 8.8.8.8;
resolver_timeout 5s;
proxy_connect;
proxy_connect_allow 443 563;
proxy_connect_connect_timeout 10s;
proxy_connect_read_timeout 10s;
proxy_connect_send_timeout 10s;
location / {
proxy_pass $scheme://$host$request_uri;
proxy_set_header Host $http_host;
proxy_buffers 256 4k;
proxy_max_temp_file_size 0;
proxy_connect_timeout 30;
}
access_log /export/home/logs/proxy/access.log main;
error_log /export/home/logs/proxy/error.log;
}
四、配置終端代理
# 在 /etc/profile 文件中增加如下三項。
export proxy="http://{proxy_server_ip}:8080"
export http_proxy=$proxy
export https_proxy=$proxy
# 使配置生效
shell> source /etc/profile
作者：龍龍小寶
原文：https://www.cnblogs.com/91donkey/p/11639311.html
分享到:
