1. user  root;
    2. worker_processes  4;
    4. #error_log  logs/error.log;
    5. #error_log  logs/error.log  notice;
    6. #error_log  logs/error.log  info;
    8. #pid        logs/nginx.pid;
    9. worker_rlimit_nofile 65535;
    11. events {
    12.     worker_connections  65535;
    13. }
    16. http {
    17.     include       mime.types;
    18.     default_type  application/octet-stream;
    20.     #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    21.     #                  '$status $body_bytes_sent "$http_referer" '
    22.     #                  '"$http_user_agent" "$http_x_forwarded_for"';
    24.     #access_log  logs/access.log  main;
    26.     sendfile        on;
    27.     #tcp_nopush     on;
    29.     add_header X-Frame-Options SAMEORIGIN;
    31.     #keepalive_timeout  0;
    32.     keepalive_timeout  2400;
    34.     #gzip  on;
    36.     proxy_connect_timeout 6000; #单位秒
    37.     proxy_send_timeout 6000; #单位秒
    38.     proxy_read_timeout 6000; #单位秒
    39.     proxy_buffer_size 1024k;
    40.     proxy_buffers 4 1024k;
    41.     proxy_busy_buffers_size 1024k;
    42.     proxy_temp_file_write_size 1024k;
    44.     include /etc/nginx/conf.d/framework_upstream.conf;
    46.     server {
    47.         listen       8099;
    48.         server_name  localhost;
    49.         proxy_send_timeout 600;
    50.         proxy_read_timeout 600;
    51.         proxy_connect_timeout 600;    
    52.         client_max_body_size 5120m;
    54.     }
    57.     server {
    58.         #listen       9099;
    59.         listen       443 ssl default;
    60.         server_name  localhost;
    62.         location  / {
    63.           if ( $request_uri = "/" ) {
    64.             rewrite "/" https://10.42.34.100:$server_port/dgdpsportal/#/index break;
    65.           }
    66.         }
    68.         proxy_send_timeout 600;
    69.         proxy_read_timeout 600;
    70.         proxy_connect_timeout 600;    
    71.         client_max_body_size 5120m;
    72.         #允许跨域请求的域，* 代表所有
    73.         add_header 'Access-Control-Allow-Origin' *;
    74.         #允许带上cookie请求
    75.         add_header 'Access-Control-Allow-Credentials' 'true';
    76.         #允许请求的方法，比如 GET/POST/PUT/DELETE
    77.         add_header 'Access-Control-Allow-Methods' *;
    78.         #允许请求的header
    79.         add_header 'Access-Control-Allow-Headers' *;
    81.         # 引用ssl证书
    82.         ssl_certificate      /etc/nginx/ssl/server.crt;
    83.         ssl_certificate_key  /etc/nginx/ssl/server.key;
    84.         # 协议优化(可选,优化https协议,增强安全性)
    85.         ssl_protocols        TLSv1.2;
    86.         # ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
    87.         ssl_ciphers          ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    88.         ssl_prefer_server_ciphers  on;
    89.         ssl_session_cache    shared:SSL:10m;
    90.         ssl_session_timeout  10m;
    92.         include /etc/nginx/conf.d/framework_location.conf;
    94.     }    
    95. }

    proxyconnect_timeout :后端服务器连接的超时时间发起握手等候响应超时时间（默认60秒） proxyread_timeout:连接成功后等候后端服务器响应时间其实已经进入后端的排队之中等候处理（也可以说是后端服务器处理请求的时间） proxy_send_timeout :后端服务器数据回传时间就是在规定时间之内后端服务器必须传完所有的数据

    说明，重定向实现 在nginx中配置ip直接访问的默认站点

    2.         location  / {
    3.           if ( $request_uri = "/" ) {
    4.             rewrite "/" https://10.42.34.100:$server_port/dgdpsportal/#/index break;
    5.           }
    6.         }

    framework_upstream.conf

    1. upstream idatafusion {
    2.     server 127.0.0.1:10000 weight=1;
    3. }

    framework_location.conf

    1. location /idatafusion{
    2.     proxy_set_header   Host             $host:$server_port;
    3.     proxy_set_header   X-Real-IP        $remote_addr;
    4.     proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    5.     proxy_cookie_path  /idatafusion       /idatafusion;
    6.     proxy_set_header   Cookies          $http_cookies;
    8.     proxy_set_header X-Forwarded-Proto $scheme;
    10.     proxy_buffer_size 128k;
    11.     proxy_buffers    8 128k;
    12.     proxy_busy_buffers_size 128k;
    13.     proxy_pass http://idatafusion/idatafusion;
    14. }