Shulou(Shulou.com)05/31 Report--

This article mainly introduces "how nginx implements ssl reverse proxy". In daily operation, I believe many people have doubts about how nginx implements ssl reverse proxy. Xiaobian consulted various materials and sorted out simple and easy operation methods. I hope to help you answer the doubts of "how nginx implements ssl reverse proxy"! Next, please follow the small series to learn together!

Steps:

1. Generate an authoritative SSL Certificates pair (if you issue it yourself, https is not recognized by the browser, that is, https will have a big red cross above it)

Recommend a free website:

2. Deploy nginx based on ssl.key and ssl.crt

First nginx needs to support ssl_module, then modify nginx.conf as follows

server { listen 443; server_name localhost; ssl on; ssl_certificate /opt/tengine/conf/ssl/free4lab.crt; ssl_certificate_key /opt/tengine/conf/ssl/free4lab_nopass.key; ssl_session_timeout 5m; }

Put the crt file and key file in the corresponding position, notice that the key here is nopassword, that is, when restarting nginx, you do not need to enter a password.

free4lab_nopass.key is generated from free4lab.key, and the generated command is as follows:

openssl rsa -in free4lab.key -out free4lab_nopass.key

And then you just type in the code.

3. Modify the corresponding service configuration file to listen on port 443

upstream account.free4lab.com { session_sticky cookie=uid fallback=on path=/ mode=insert option=indirect; server 192.168.1.62:8084 weight=10; server 192.168.1.63:8082 weight=10;}server { listen 80; listen 443; server_name account.free4lab.com; location / { session_sticky_hide_cookie upstream=account.free4lab.com; proxy_pass http://account.free4lab.com; }}

Visit https://account.free4lab.com like this, and the mark above https is green! enjoy

At this point, the study of "how nginx implements ssl reverse proxy" is over, hoping to solve everyone's doubts. Theory and practice can better match to help you learn, go and try it! If you want to continue learning more relevant knowledge, please continue to pay attention to the website, Xiaobian will continue to strive to bring more practical articles for everyone!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.