Socket.io与NGINX和https2

Question

我有node.js应用程序，它是由NGINX服务。我无法连接socket.io，并继续获取404请求建立连接的POST请求。

它的工作在本地，所以它必须是一个NGINX问题。

# HTTP - redirect all requests to HTTPS: 
    server { 
    listen 80; 
    listen [::]:80; 
    return 301 https://$host$request_uri; 
    } 
    # HTTPS - proxy requests on to local Node.js app: 
    server { 
    listen 443 ssl http2; 
    server_name example.com; 
    ssl on; 
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; 
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; 
    ssl_session_timeout 5m; 
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
    ssl_prefer_server_ciphers on; 
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; 
    location/{ 
     proxy_set_header X-Real-IP $remote_addr; 
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
     proxy_set_header X-NginX-Proxy true; 
     proxy_set_header X-Forwarded-Proto https; 
     proxy_pass http://127.0.0.1:8080; 
     proxy_ssl_session_reuse off; 
     proxy_set_header Host $http_host; 
     proxy_cache_bypass $http_upgrade; 
     proxy_redirect off; 
    } 
} 

感谢您的任何帮助。

Answer 1

看一看NGINX文档。

https://www.nginx.com/blog/websocket-nginx/

enter chttp { 
map $http_upgrade $connection_upgrade { 
    default upgrade; 
    '' close; 
} 

upstream websocket { 
    server 192.168.100.10:8010; 
} 

server { 
    listen 8020; 
    location/{ 
     proxy_pass http://websocket; 
     proxy_http_version 1.1; 
     proxy_set_header Upgrade $http_upgrade; 
     proxy_set_header Connection $connection_upgrade; 
    } 
} 

}

Answer 2

由于WebSockets的使用Upgrade头在HTTP 1.1推出，你需要在你的路线专门使用这种协议和Connection头设置为upgrade。

您还需要一个独特的名字指定proxy_pass指令。

你的配置是这样的事情：

upstream sockets { 
    server localhost:8080; 
} 

# HTTP - redirect all requests to HTTPS: 
server { 
    listen 80; 
    listen [::]:80; 
    return 301 https://$host$request_uri; 
} 

# HTTPS - proxy requests on to local Node.js app: 
server { 
    listen 443 ssl http2; 
    server_name example.com; 
    ssl on; 
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; 
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; 
    ssl_session_timeout 5m; 
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
    ssl_prefer_server_ciphers on; 
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; 

    location/{ 

     proxy_set_header X-Real-IP $remote_addr; 
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
     proxy_set_header X-NginX-Proxy true; 
     proxy_set_header X-Forwarded-Proto https; 
     proxy_set_header Host $host; 

     proxy_pass http://sockets; 

     proxy_set_header Upgrade $http_upgrade; 
     proxy_set_header Connection "upgrade"; 
     proxy_set_header Host $http_host; 

     proxy_http_version 1.1; 
     proxy_ssl_session_reuse off; 
     proxy_cache_bypass $http_upgrade; 
     proxy_redirect off; 
    } 

}