Nginx反向代理模板分享

提供一些重要网站的反向代理模板代码。其中谷歌搜索引擎做了负载均衡和缓存加速，一些HTTPS加密传输的网站需要提供SSL证书。domain替换成主域名即可，各取所需吧。

#user nobody;
worker_processes 1;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;


events {
 worker_connections 1024;
}


http {
 include mime.types;
 default_type application/octet-stream;

 #log_format main '$remote_addr - $remote_user [$time_local] "$request" '
 # '$status $body_bytes_sent "$http_referer" '
 # '"$http_user_agent" "$http_x_forwarded_for"';

 #access_log logs/access.log main;

 sendfile on;
 #tcp_nopush on;

 #keepalive_timeout 0;
 keepalive_timeout 65;

 #gzip on;

 server {

 listen 443;
server_name localhost;
 ssl on;
 ssl_certificate /usr/local/nginx/conf/woo.crt;
 ssl_certificate_key /usr/local/nginx/conf/woo.key;
 ssl_session_timeout 5m;
 

 #error_page 404 /404.html;

 # redirect server error pages to the static page /50x.html
 #
 error_page 500 502 503 504 /50x.html;
 location = /50x.html {
 root html;
 }

 # proxy the PHP scripts to Apache listening on 127.0.0.1:80
 #
 #location ~ \.php$ {
 # proxy_pass http://127.0.0.1;
 #}

 # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
 #
 #location ~ \.php$ {
 # root html;
 # fastcgi_pass 127.0.0.1:9000;
 # fastcgi_index index.php;
 # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
 # include fastcgi_params;
 #}

 # deny access to .htaccess files, if Apache's document root
 # concurs with nginx's one
 #
 #location ~ /\.ht {
 # deny all;
 #}
 }


 # another virtual host using mix of IP-, name-, and port-based configuration
 #
 #server {
 # listen 8000;
 # listen somename:8080;
 # server_name somename alias another.alias;

 # location / {
 # root html;
 # index index.html index.htm;
 # }
 #}


 # HTTPS server
 #
 #server {
 # listen 443 ssl;
 # server_name localhost;

 # ssl_certificate cert.pem;
 # ssl_certificate_key cert.key;

 # ssl_session_cache shared:SSL:1m;
 # ssl_session_timeout 5m;

 # ssl_ciphers HIGH:!aNULL:!MD5;
 # ssl_prefer_server_ciphers on;

 # location / {
 # root html;
 # index index.html index.htm;
 # }
 #}

server
{
listen 80;
server_name cl.domain.com;
location / {
proxy_pass http://t66y.com/;
proxy_redirect off;
proxy_set_header Referer http://$host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
 listen 80;
 server_name dl.domain.com;
 rewrite ^(.*) https://dl.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name dl.domain.com;

location / {
proxy_pass https://www.cmule.com/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
 listen 80;
 server_name ny.domain.com;
 rewrite ^(.*) https://ny.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name ny.domain.com;

location / {
proxy_pass http://cn.nytimes.com/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
 listen 80;
 server_name dw.domain.com;
 rewrite ^(.*) https://dw.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name dw.domain.com;

location / {
proxy_pass http://china.dwnews.com/;
proxy_redirect http://china.dwnews.com/ /;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
sub_filter china.dwnews.com dw.domain.com;
sub_filter_once off;

}
}

server {
 listen 80;
 server_name github.domain.com;
 rewrite ^(.*) https://github.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name github.domain.com;

location / {
proxy_pass https://github.com/;
proxy_redirect https://github.com/ /;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

server {
 listen 80;
 server_name wiki.domain.com;
 rewrite ^(.*) https://wiki.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name wiki.domain.com;


location / {
proxy_pass https://en.wikipedia.org/;
proxy_redirect https://en.wikipedia.org/ /;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

server {
 listen 80;
 server_name kindle.domain.com;
 rewrite ^(.*) https://kindle.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name kindle.domain.com;

location / {
proxy_pass https://kindle.appspot.com/;
proxy_redirect https://kindle.appspot.com/ /;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
 listen 80;
 server_name rss.domain.com;
 rewrite ^(.*) https://rss.domain.com$1 permanent;
 }
 
server {
listen 443;
server_name rss.domain.com;

location / {
proxy_pass https://kindle.appspot.com/;
proxy_redirect https://kindle.appspot.com/ /;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
proxy_cache_path /var/nginx/cache/one levels=1:2 keys_zone=one:10m max_size=10g;
 proxy_cache_key "$host$request_uri";

 upstream google {
 server 74.125.239.112:80 max_fails=3;
 server 74.125.239.113:80 max_fails=3;
 server 74.125.239.114:80 max_fails=3;
 server 74.125.239.115:80 max_fails=3;
 server 74.125.239.116:80 max_fails=3;
 }

 
 server {
 listen 80;
 server_name g.domain.com;
 rewrite ^(.*) https://g.domain.com$1 permanent;
 }

 server {
 listen 443;
 server_name g.domain.com
 ssl on;
 ssl_certificate /usr/local/nginx/conf/woo.crt;
 ssl_certificate_key /usr/local/nginx/conf/woo.key;
 location / {
 proxy_cache one;
 proxy_cache_valid 200 302 1h;
 proxy_cache_valid 404 1m;
 proxy_redirect https://www.google.com/ /;
 proxy_cookie_domain google.com g.domain.com;
 proxy_pass http://google;
 proxy_set_header Host "www.google.com";
 proxy_set_header Accept-Encoding "";
 proxy_set_header User-Agent $http_user_agent;
 proxy_set_header Accept-Language "en-US";
 proxy_set_header Cookie "PREF=ID=047808f19f6de346:U=0f62f33dd8549d11:FF=2:LD=zh-CN:NW=1:TM=1325338577:LM=1332142444:GM=1:SG=2:S=rE0SyJh2w1IQ-Maw";
 sub_filter www.google.com g.domain.com;
 sub_filter_once off;
 }
 }



}

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

#user nobody;

worker_processes 1;

#error_log logs/error.log;

#error_log logs/error.log notice;

#error_log logs/error.log info;

#pid logs/nginx.pid;

events {

worker_connections 1024;

}

http {

include mime.types;

default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '

# '$status $body_bytes_sent "$http_referer" '

# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;

#tcp_nopush on;

#keepalive_timeout 0;

keepalive_timeout 65;

#gzip on;

server {

listen 443;

server_name localhost;

ssl on;

ssl_certificate /usr/local/nginx/conf/woo.crt;

ssl_certificate_key /usr/local/nginx/conf/woo.key;

ssl_session_timeout 5m;

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html

error_page 500 502 503 504 /50x.html;

location = /50x.html {

root html;

}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80

#location ~ \.php$ {

# proxy_pass http://127.0.0.1;

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000

#location ~ \.php$ {

# root html;

# fastcgi_pass 127.0.0.1:9000;

# fastcgi_index index.php;

# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;

# include fastcgi_params;

# deny access to .htaccess files, if Apache's document root

# concurs with nginx's one

#location ~ /\.ht {

# deny all;

}

# another virtual host using mix of IP-, name-, and port-based configuration

#server {

# listen 8000;

# listen somename:8080;

# server_name somename alias another.alias;

# location / {

# root html;

# index index.html index.htm;

# }

# HTTPS server

#server {

# listen 443 ssl;

# server_name localhost;

# ssl_certificate cert.pem;

# ssl_certificate_key cert.key;

# ssl_session_cache shared:SSL:1m;

# ssl_session_timeout 5m;

# ssl_ciphers HIGH:!aNULL:!MD5;

# ssl_prefer_server_ciphers on;

# location / {

# root html;

# index index.html index.htm;

# }

server

{

listen 80;

server_name cl.domain.com;

location / {

proxy_pass http://t66y.com/;

proxy_redirect off;

proxy_set_header Referer http://$host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name dl.domain.com;

rewrite ^(.*) https://dl.domain.com$1 permanent;

}

server {

listen 443;

server_name dl.domain.com;

location / {

proxy_pass https://www.cmule.com/;

proxy_redirect off;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name ny.domain.com;

rewrite ^(.*) https://ny.domain.com$1 permanent;

}

server {

listen 443;

server_name ny.domain.com;

location / {

proxy_pass http://cn.nytimes.com/;

proxy_redirect off;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name dw.domain.com;

rewrite ^(.*) https://dw.domain.com$1 permanent;

}

server {

listen 443;

server_name dw.domain.com;

location / {

proxy_pass http://china.dwnews.com/;

proxy_redirect http://china.dwnews.com/ /;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

sub_filter china.dwnews.com dw.domain.com;

sub_filter_once off;

}

server {

listen 80;

server_name github.domain.com;

rewrite ^(.*) https://github.domain.com$1 permanent;

}

server {

listen 443;

server_name github.domain.com;

location / {

proxy_pass https://github.com/;

proxy_redirect https://github.com/ /;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name wiki.domain.com;

rewrite ^(.*) https://wiki.domain.com$1 permanent;

}

server {

listen 443;

server_name wiki.domain.com;

location / {

proxy_pass https://en.wikipedia.org/;

proxy_redirect https://en.wikipedia.org/ /;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name kindle.domain.com;

rewrite ^(.*) https://kindle.domain.com$1 permanent;

}

server {

listen 443;

server_name kindle.domain.com;

location / {

proxy_pass https://kindle.appspot.com/;

proxy_redirect https://kindle.appspot.com/ /;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

server {

listen 80;

server_name rss.domain.com;

rewrite ^(.*) https://rss.domain.com$1 permanent;

}

server {

listen 443;

server_name rss.domain.com;

location / {

proxy_pass https://kindle.appspot.com/;

proxy_redirect https://kindle.appspot.com/ /;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

proxy_cache_path /var/nginx/cache/one levels=1:2 keys_zone=one:10m max_size=10g;

proxy_cache_key "$host$request_uri";

upstream google {

server 74.125.239.112:80 max_fails=3;

server 74.125.239.113:80 max_fails=3;

server 74.125.239.114:80 max_fails=3;

server 74.125.239.115:80 max_fails=3;

server 74.125.239.116:80 max_fails=3;

}

server {

listen 80;

server_name g.domain.com;

rewrite ^(.*) https://g.domain.com$1 permanent;

}

server {

listen 443;

server_name g.domain.com

ssl on;

ssl_certificate /usr/local/nginx/conf/woo.crt;

ssl_certificate_key /usr/local/nginx/conf/woo.key;

location / {

proxy_cache one;

proxy_cache_valid 200 302 1h;

proxy_cache_valid 404 1m;

proxy_redirect https://www.google.com/ /;

proxy_cookie_domain google.com g.domain.com;

proxy_pass http://google;

proxy_set_header Host "www.google.com";

proxy_set_header Accept-Encoding "";

proxy_set_header User-Agent $http_user_agent;

proxy_set_header Accept-Language "en-US";

proxy_set_header Cookie "PREF=ID=047808f19f6de346:U=0f62f33dd8549d11:FF=2:LD=zh-CN:NW=1:TM=1325338577:LM=1332142444:GM=1:SG=2:S=rE0SyJh2w1IQ-Maw";

sub_filter www.google.com g.domain.com;

sub_filter_once off;

}

Nginx反向代理模板分享

发布者

Javen

发表评论取消回复

发布者

Javen

发表评论 取消回复

发表评论取消回复