1、rewrite

链接

  1.                 location  /keystone {
  2.             rewrite ^/keystone/(.*)$  /v3/$1 break;
  3.             proxy_pass http://192.100.3.1:5000;
  4.         }
  5.          location  /glance {
  6.             rewrite ^/glance/(.*)$  /v2/$1 break;
  7.             proxy_pass http://192.100.3.1:9292;
  8.         }
  9.          location  /nova {
  10.             rewrite ^/nova/(.*)$  /v2.1/$1 break;
  11.             proxy_pass http://192.100.3.1:8774;
  12.         }
  13.          location  /cinder {
  14.             rewrite ^/cinder/(.*)$  /v3/$1 break;
  15.             proxy_pass http://192.100.3.1:8776;
  16.         }
  18.          location  /network {
  19.             rewrite ^/network/(.*)$  /v2.0/$1 break;
  20.             proxy_pass http://192.100.3.1:9696;
  21.         }

2、upstream：负载均衡

upstream

  1.          #配置负载均衡
  2.     upstream imageserver{
  3.         #Round Robin;轮询算法  默认为轮询
  4.         #least_conn ; 将活动连接最少的请求发送到服务器，再次考虑服务器权重：
  5.         #ip_hash;
  6.         server 192.100.3.29:81 weight=1;
  7.         server 192.100.3.29:82 weight=1;    
  8.     }
  10.     server{
  11.         listen 81;
  12.         server_name 192.100.3.29;
  13.         root html;
  14.         access_log logs/81-access.log main;
  15.     }
  17.     server{
  18.         listen 82;
  19.         server_name localhost;
  20.         root html;
  21.         access_log logs/82-access.log main;
  22.     }
  24.     server {
  25.         listen    8080;
  26.         location ~* \.(jpg|gif|jepg|png){
  27.         proxy_set_header X-Forwarded-For $remote_addr;
  28.         proxy_pass http://imageserver;
  29.         }
  30.      }

3、stream：四层代理

nginx 从1.9.0版本开始支持四层代理，但做四层代理时 编译需要添加 —with-stream模块
./configure --with-stream
官网配置

  1. #和http同级
  2. stream {
  4.     upstream ssh_proxy {
  5.         server 192.100.5.228:22;
  6.     }
  7.     server {
  8.         listen 2222;
  9.         proxy_pass ssh_proxy;
  10.     }
  12.     server {
  13.         listen 3333;
  14.         proxy_pass 192.100.5.222:3306;
  15.     }
  16. }

5、缓存

image.png

6、http

链接

7、location

链接

  1. location / {
  2.     deny  192.168.1.1;
  3.     allow 192.168.1.0/24;
  4.     allow 10.1.1.0/16;
  5.     allow 2001:0db8::/32;
  6.     deny  all;
  7. }
  9. 查看状态
  10. location /status {
  11.     stub_status on;
  12.     access_log off;
  13.     allow 192.100.5.115;
  14.     deny all;
  15. }
  17. location /  {
  18.         proxy_pass http://192.100.5.222:28080;
  19. }
  21. location = / {
  22.     root   dist;
  23.     index  index.html index.htm;
  24. }
  26. location ~* .(html|jpg|png|ico|woff|ttf|css|js)$ {
  27.         root dist;
  28. }
  1. upstream pve.server{
  2.     ip_hash;
  3.     server 192.100.3.201:8006 weight=1;
  4.     server 192.100.3.202:8006 weight=1;
  5.     server 192.100.3.203:8006 weight=1;
  7. }
  9. server {
  10.     listen  1888 ssl;
  11.     ssl_certificate ssl/server-cert.cer;
  12.     ssl_certificate_key ssl/server-key.key;
  14.     server_name localhost;
  16.     location / {
  17.         root dist;
  18.         index index.html index.htm;
  19.     }
  21.     location /api3/ {
  22.         proxy_pass https://pve.server/;
  23.         proxy_http_version 1.1;
  24.         proxy_set_header Upgrade $http_upgrade;
  25.         proxy_set_header Connection "Upgrade";
  26.     }
  28.     location ~ (/api2|/xtermjs|/novnc) {
  29.         proxy_pass https://pve.server;
  30.         proxy_http_version 1.1;
  31.         proxy_set_header Upgrade $http_upgrade;
  32.         proxy_set_header Connection "Upgrade";
  33.     }
  35. }

8、fastcgi_params

  1. fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
  2. fastcgi_param  QUERY_STRING       $query_string;
  3. fastcgi_param  REQUEST_METHOD     $request_method;
  4. fastcgi_param  CONTENT_TYPE       $content_type;
  5. fastcgi_param  CONTENT_LENGTH     $content_length;
  7. fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
  8. fastcgi_param  REQUEST_URI        $request_uri;
  9. fastcgi_param  DOCUMENT_URI       $document_uri;
  10. fastcgi_param  DOCUMENT_ROOT      $document_root;
  11. fastcgi_param  SERVER_PROTOCOL    $server_protocol;
  12. fastcgi_param  REQUEST_SCHEME     $scheme;
  13. fastcgi_param  HTTPS              $https if_not_empty;
  15. fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
  16. fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
  18. fastcgi_param  REMOTE_ADDR        $remote_addr;
  19. fastcgi_param  REMOTE_PORT        $remote_port;
  20. fastcgi_param  SERVER_ADDR        $server_addr;
  21. fastcgi_param  SERVER_PORT        $server_port;
  22. fastcgi_param  SERVER_NAME        $server_name;

示例：

  1. #user  nobody;
  2. worker_processes  1;
  4. #error_log  logs/error.log;
  5. #error_log  logs/error.log  notice;
  6. #error_log  logs/error.log  info;
  8. #pid        logs/nginx.pid;
  11. events {
  12.     worker_connections  1024;
  13. }
  16. http {
  17.     include       mime.types;
  18.     default_type  application/octet-stream;
  19.     #开启main日志格式
  20.     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  21.                       '$status $body_bytes_sent "$http_referer" '
  22.                       '"$http_user_agent" "$http_x_forwarded_for"';
  24.     #access_log  logs/access.log  main;
  26.     sendfile        on;
  27.     #tcp_nopush     on;
  28.     gzip on;
  29.     gzip_min_length 200;
  30.     gzip_types text/plain application/xml; 
  31.     #keepalive_timeout  0;
  32.     keepalive_timeout  65;
  34.     #配置负载均衡
  35.     upstream imageserver{
  36.             server 192.100.3.29:81 weight=1;
  37.             server 192.100.3.29:82 weight=1;    
  38.     }
  40.     server{
  41.       listen 81;
  42.       server_name 192.100.3.29;
  43.       root html;
  44.       access_log logs/81-access.log main;
  45.     }
  47.     server{
  48.       listen 82;
  49.       server_name localhost;
  50.       root html;
  51.       access_log logs/82-access.log main;
  52.     }
  53.     #gzip  on;
  54.     server {
  55.       listen    8080;
  56.       #root /test/nginx/jpg;
  58.       location ~* \.(jpg|gif|jepg|png){
  59.       proxy_set_header X-Forwarded-For $remote_addr;
  60.       proxy_pass http://imageserver;
  61.             }
  63.       location /proxy{
  64.         alias /test/nginx/jpg;
  65.         autoindex on;
  66.       }
  67.     }    
  69.     server {
  70.         listen       80;
  71.         server_name  localhost;
  73.         #charset koi8-r;
  75.         #access_log  logs/host.access.log  main;
  77.         location / {
  78.             root   html;
  79.             index  index.html index.htm;
  80.         }
  81.         location /images {
  82.             root   data;   # alias data/images
  83.             autoindex on;
  84.         }
  85.         #location /jpg{
  86.          #   root /test/nginx;
  87.               #  autoindex on;
  88.         #}
  89.         location = /jpg/2.jpg {
  90.           root /test/nginx/;
  91.           autoindex on;
  92.         }
  94.         location /proxy{
  95.             proxy_pass http://127.0.0.1:8080;
  96.         }
  97.         #error_page  404              /404.html;
  99.         # redirect server error pages to the static page /50x.html
  100.         #
  101.         error_page   500 502 503 504  /50x.html;
  102.         location = /50x.html {
  103.             root   html;
  104.         }
  106.         # proxy the PHP scripts to Apache listening on 127.0.0.1:80
  107.         #
  108.         #location ~ \.php$ {
  109.         #    proxy_pass   http://127.0.0.1;
  110.         #}
  112.         # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
  113.         #
  114.         #location ~ \.php$ {
  115.         #    root           html;
  116.         #    fastcgi_pass   127.0.0.1:9000;
  117.         #    fastcgi_index  index.php;
  118.         #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
  119.         #    include        fastcgi_params;
  120.         #}
  122.         # deny access to .htaccess files, if Apache's document root
  123.         # concurs with nginx's one
  124.         #
  125.         #location ~ /\.ht {
  126.         #    deny  all;
  127.         #}
  128.     }
  131.     # another virtual host using mix of IP-, name-, and port-based configuration
  132.     #
  133.     #server {
  134.     #    listen       8000;
  135.     #    listen       somename:8080;
  136.     #    server_name  somename  alias  another.alias;
  138.     #    location / {
  139.     #        root   html;
  140.     #        index  index.html index.htm;
  141.     #    }
  142.     #}
  145.     # HTTPS server
  146.     #
  147.     #server {
  148.     #    listen       443 ssl;
  149.     #    server_name  localhost;
  151.     #    ssl_certificate      cert.pem;
  152.     #    ssl_certificate_key  cert.key;
  154.     #    ssl_session_cache    shared:SSL:1m;
  155.     #    ssl_session_timeout  5m;
  157.     #    ssl_ciphers  HIGH:!aNULL:!MD5;
  158.     #    ssl_prefer_server_ciphers  on;
  160.     #    location / {
  161.     #        root   html;
  162.     #        index  index.html index.htm;
  163.     #    }
  164.     #}
  166. }