nginx配置

server {

#listen       80;

#server_name  hzxy.fengzhongit.com;

listen        443 ssl;//表名在443端口监听https请求

server_name   hzxy.fengzhongit.com;//域名

ssl_certificate /home/1_hzxy.fengzhongit.com_bundle.crt;//证书

ssl_certificate_key /home/2_hzxy.fengzhongit.com.key;//key

#charset koi8-r;

#access_log  logs/host.access.log  main;

location / {

//允许跨域访问

add_header Access-Control-Allow-Origin *;

add_header 'Access-Control-Allow-Credentials' 'true';

add_header Access-Control-Allow-Headers X-Requested-With;

add_header Access-Control-Allow-Methods GET,POST,OPTIONS;

proxy_passhttps://hzxy.fengzhongit.com:8443/;//代理地址

proxy_set_header Host $host;//这个一定要设置，表示将请求的主机名传递到后端服务器，如果不传，默认为localhost，则无法实现跨域访问

# 真实的客户端IPproxy_set_header X-Real-IP$remote_addr;

#root   html;

#index  index.html index.htm;

#proxy_pass https://hzxy.fengzhongit.com:8443/;

#proxy_redirect default;

}

location ~ .*\.(htm|html|bmp|jpeg|ico|png|jpg|eot|svg|ttf|woff) {

#所有静态文件直接读取硬盘

root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;

expires 30d; #缓存30天

}

#静态文件交给nginx处理

location ~ .*\.(js|css)?$  {

root /tomcat8/apache-tomcat-8.0.47/webapps/hzxingye;

expires 1d;

}

完整配置：

user nobody;

worker_processes2;

events{

worker_connections1024;

}

http{#设置默认类型为二进制流default_typeapplication/octet-stream;

server_names_hash_bucket_size128;#指定来自客户端请求头的headerbuffer大小，设置为32KBclient_header_buffer_size32k;#指定客户端请求中较大的消息头的缓存最大数量和大小，这里是4个32KBlarge_client_header_buffers432k;#上传文件大小client_max_body_size356m;#nginx的HttpLog模块指定，指定nginx日志的输出格式，输出格式为accesslog_format access'$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';#access日志存在未知access_log  /var/log/nginx/access.log  access;#开启高效模式文件传输模式，将tcp_nopush和tcp_nodelay两个指另设置为on，用于防止网络阻塞。sendfile    on;

tcp_nopush  on;

tcp_nodelay on;#设置客户端连接保持活动的超时时间keepalive_timeout65;

server_tokens  off;#客户端请求主体读取缓存client_body_buffer_size512k;

proxy_connect_timeout5;

proxy_send_timeout60;

proxy_read_timeout5;

proxy_buffer_size16k;

proxy_buffers464k;

proxy_busy_buffers_size128k;

proxy_temp_file_write_size128k;#开启gzipgzip    on;#允许压缩的最小字节数gzip_min_length1k;#4个单位为16k的内存作为压缩结果流缓存gzip_buffers416k;#设置识别HTTP协议版本，默认是1.1gzip_http_version1.1;#gzip压缩比，可在1~9中设置，1压缩比最小，速度最快，9压缩比最大，速度最慢，消耗CPUgzip_comp_level2;#压缩的类型gzip_types text/plain application/x-javascript text/css application/xml;#让前端的缓存服务器混村经过的gzip压缩的页面gzip_vary  on;

upstream mycluster{

server192.168.22.229:8080weight=1;

server192.168.22.230:8080weight=1;

}

server{

listen8088;

server_name192.168.22.228;

charset    utf-8;#设置编码为utf-8;#location / {#    root  html;#    index  index.html index.htm;#}#location ~ .*\.(jsp|do|action)$location / {

proxy_next_upstream http_502 http_504 error timeout invalid_header;

proxy_pass http://mycluster;# 真实的客户端IPproxy_set_header  X-Real-IP$remote_addr;# 请求头中Host信息proxy_set_header  Host$host;# 代理路由信息，此处取IP有安全隐患proxy_set_header  X-Forwarded-For$proxy_add_x_forwarded_for;# 真实的用户访问协议proxy_set_header  X-Forwarded-Proto$scheme;

}#静态文件交给nginx处理location ~ .*\.(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$

{

root  /usr/local/webapps;

expires30d;

}#静态文件交给nginx处理location ~ .*\.(js|css)?$

{

root /usr/local/webapps;

expires1h;

}

error_page500502503504/50x.html;

location = /50x.html {

root  html;

}

}

}