Nginx reverse proxy port 443

前面简单完成了2台机器的负载均衡,那么我这边有个https的网站是不是可用呢?
经过我这里简单的测试是不行的。
那么我这边来分析一下解决思路。

The first thing that comes to mind may be that my side is port 443, so my reverse proxy address also needs to be 443. I
Nginx reverse proxy port 443
added a port 443 in IIS and found it useless.

Then I found that the domain name I visited in IIS has been closed by me, so this shows that what I need is to configure the certificate
, so is it possible to configure the NGINX proxy, so modify
Nginx reverse proxy port 443
it on the original basis, first of all Copy the certificate file to the sslkey folder under nginx's conf. It does not have a root directory.
Nginx reverse proxy port 443

    listen       443 ssl;  #这里443后面需要加上ssl
    server_name  localhost;#域名

    ssl_certificate sslkey/harvest.crt;#这是你的证书文件
    ssl_certificate_key sslkey/harvest.key;;#这是你的证书文件
    ssl_session_timeout 5m;#照抄
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;#照抄
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;#照抄
    ssl_prefer_server_ciphers on;#照抄

If you still can't access it, you can first look at LOG to see if port 443 is occupied by some application.
If it is not a high probability, your server firewall does not do 443 inbound rules.
Well, another small problem has been solved. (Pro-test available)

Guess you like

Origin blog.51cto.com/15034497/2663960