环境:
一台 nginx 服务器 192.168.10.251
两台 windowsserver2012 IIS 服务器 (192.168.10.252,192.168.10.253)
从阿里云上下载 ssl 证书并上传到 nginx 服务器
nginx 配置文件 添加证书
- upstream test_1.com {
- # ip_hash;
- server 192.168.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
- server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
- }
- server {
- listen 443;
- #access_log logs/access.log ;
- server_name test_1.com;
- ssl on;
- ssl_certificate /usr/local/nginx/cert/test_1.pem;
- ssl_certificate_key /usr/local/nginx/cert/test_1.key;
- ssl_session_cache shared:SSL:1m;
- ssl_session_timeout 5m;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
- ssl_prefer_server_ciphers on;
- location / {
- root html;
- index index.HTML index.htm;
- proxy_redirect off;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://test_1.com;
- client_max_body_size 50m;
- }
- }
- upstream test_2.com {
- # ip_hash;
- server 122.226.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
- server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
- }
- server {
- listen 443;
- #access_log logs/access.log ;
- server_name test_2.com;
- ssl on;
- ssl_certificate /usr/local/nginx/cert/test_2.pem;
- ssl_certificate_key /usr/local/nginx/cert/test_2.key;
- ssl_session_cache shared:SSL:1m;
- ssl_session_timeout 5m;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
- ssl_prefer_server_ciphers on;
- location / {
- root HTML;
- index index.HTML index.htm;
- proxy_redirect off;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://test_2.com;
- client_max_body_size 50m;
- }
- }
- }
参考:
- https://blog.csdn.net/fragrant_no1/article/details/83785882
- https://www.cnblogs.com/beyang/p/7718463.html
- https://blog.csdn.net/weixin_38187317/article/details/81670073
- https://www.cnblogs.com/beyang/p/7718463.html
来源: http://www.bubuko.com/infodetail-3032062.html