Arce 发表于 2021-8-23 12:55:24

封80端口应对策略 Nginx反向代理For WIN2003超级傻瓜式配置

Win下最新版本儿:nginx-0.8.31
下载地址:http://sysoev.ru/nginx/nginx-0.8.31.zip
下载后解压到任意位置,然后修改里面的nginx.conf和添加proxy.conf后启动Nginx.exe即可!

proxy.conf内容:
复制代码代码如下:


proxy_redirect off;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header REMOTE-HOST $remote_addr;

proxy_set_header X-Forwarded-For $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;



client_max_body_size 10m;

client_body_buffer_size 128k;



# client_body_temp_path /var/nginx/client_body_temp;



proxy_connect_timeout 90;

proxy_send_timeout 90;

proxy_read_timeout 90;

#proxy_send_lowat 12000;



proxy_buffer_size 32k;

proxy_buffers 4 32k;

proxy_busy_buffers_size 64k;

proxy_temp_file_write_size 64k;



# proxy_temp_path /var/nginx/proxy_temp;



proxy_ignore_client_abort on;



proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;



proxy_max_temp_file_size 128m;
nginx.conf内容:
复制代码代码如下:


#user nobody;

worker_processes 1;



#error_log logs/error.log;

#error_log logs/error.log notice;

#error_log logs/error.log info;



#pid logs/nginx.pid;

events {

worker_connections 1024;

}

http {

include mime.types;

include proxy.conf;

default_type application/octet-stream;



#log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘

# ‘$status $body_bytes_sent “$http_referer” ‘

# ‘”$http_user_agent” “$http_x_forwarded_for”‘;



#access_log logs/access.log main;



sendfile on;

#tcp_nopush on;



#keepalive_timeout 0;

keepalive_timeout 65;



#gzip on;



server {

listen 80;

server_name localhost;



#charset koi8-r;



#access_log logs/host.access.log main;



location / {

root html;

index index.html index.htm;

}



#error_page 404 /404.html;



# redirect server error pages to the static page /50x.html

#

error_page 500 502 503 504 /50x.html;

location = /50x.html {

root html;

}



# proxy the PHP scripts to Apache listening on 127.0.0.1:80

#

#location ~ \.php$ {

# proxy_pass http://127.0.0.1;

#}



# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000

#

#location ~ \.php$ {

# root html;

# fastcgi_pass 127.0.0.1:9000;

# fastcgi_index index.php;

# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;

# include fastcgi_params;

#}



# deny access to .htaccess files, if Apache's document root

# concurs with nginx's one

#

#location ~ /\.ht {

# deny all;

#}

}

# another virtual host using mix of IP-, name-, and port-based configuration

#

#server {

# listen 8000;

# listen somename:8080;

# server_name somename alias another.alias;



# location / {

# root html;

# index index.html index.htm;

# }

#}

# HTTPS server

#

#server {

# listen 443;

# server_name localhost;



# ssl on;

# ssl_certificate cert.pem;

# ssl_certificate_key cert.key;



# ssl_session_timeout 5m;



# ssl_protocols SSLv2 SSLv3 TLSv1;

# ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

# ssl_prefer_server_ciphers on;



# location / {

# root html;

# index index.html index.htm;

# }

#}

# 其他的都不用管,只要放对地方就可以,最主要是下面这一行,照着填就可以了!一行一个站,一个站对一个端口,端口不要重复,否则你的IIS内的站启动不了!

server { listen 80; server_name 1.jb51.net; location / { proxy_pass http://208.28.188.249:81; }}

server { listen 80; server_name 2.jb51.net; location / { proxy_pass http://208.28.188.249:82; }}

}
这是代理服务器上的配置,就是找个没封80的IP或租个国外的VPS都可以,否则会和你本机已经开放的80冲突,然后通过这个代理服务器跳转到你封80的机器上,封80的机器的站点上添加个空主机头端口是81即可,这里的81是随便填的,计算机内有655535个端口你可以随便设置,这样封80就在也没什么用了!

哥再写个具体傻瓜式操作步骤:
1、上面的软件下载解压到你的80没封的服务器配置好,这上面最好不要有网站,否则会和你原来的网站用的80冲突;
2、把你的域名解析到上面没封80的IP上,然后去你封80的机器上把原来的站点上添加个空主机头端口是81,如http://192.168.0.11:81可以访问到你的网站上就可以了;
3、Nginx.exe每改一次配置文件需要在任务管理器内结束任务后再启动一次才会生效,是实时生效的!记住两个Nginx.exe的进程都要结束掉,否则没用;
4、1.jb51.net这里是换成你的域名的,多个域名用空格分开,没有限制,一个站一行,不要多个站放在一行;
5、启Nginx.exe直接双击即可,会一闪而过,只要任务管理器的进程里出现两个Nginx.exe就是正常运行了,否则就是配置文件错误没有启动;
6、出现504 Gateway Time-out这个错误是你的代理服务器无法访问http://192.168.0.11:81这个地址,你可以试下,如果你可以服务器不可以可能和你的防火墙或策略有关;

文档来源:http://www.zzvips.com/article/16123.html
页: [1]
查看完整版本: 封80端口应对策略 Nginx反向代理For WIN2003超级傻瓜式配置