摘要:本文通过NGINX反向代理实现自定义域名HTTPS协议访问华为云OBS服务,采用均衡负载ELB搭建后台服务增强应用高可用性。
创建ECS并安装NGINX服务
注意:安全组设置需要开放80,443端口,默认网络安全组即可
wget http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
rpm -ivh nginx-release-centos-7-0.el7.ngx.noarch.rpm
yum -y install nginx
systemctl start nginx
systemctl enable nginx
证书及秘钥上传
1.秘钥以.key文件结尾文件
2.证书以.crt或者.pem结果文件
3.上传到/usr/local/ssl/(目录可自定义)
配置NGINX
vim /etc/nginx/conf.d/default.conf
server {
listen 80;
listen 443 ssl;
ssl_certificate /usr/local/ssl/domain_name.pem;//replace domain_name to your actual value
ssl_certificate_key /usr/local/ssl/domain_name.key;
#server_name domain_name;
server_name ********;###public ip
#access_log /var/log/nginx/host.access.log main;
location / {
root /home/www/public_html/domain_name/public/;
proxy_pass https://bucketname.endpoint;//the bucket you want to access
index index.html index.htm;
}
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ .php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}
# deny access to .htaccess files, if Apache’s document root
# concurs with nginx’s one
#
#location ~ /.ht {
# deny all;
#}
}
检测NGINX配置及设置开机启动
nginx -t
systemctl stop nginx
systemctl start nginx
发送HTTP/HTTPS请求获取OBS数据
http://public ip
https://public ip
制作镜像,新创建一台ECS服务器
使用ECS-NGINX-S1创建镜像,申请一台服务器,实现两台服务器互相backup
创建ELB服务,添加HTTPS监听及后端服务器
1.创建HTTP/HTTPS ELB
2.添加HTTPS监听器
3.添加证书crt,秘钥pem
4.添加后台服务器,设置80端口
测试ELB HTTPS请求服务访问OBS服务
最后ELB 公网IP绑定自定义域名,大功告成!
内容出处:,
声明:本网站所收集的部分公开资料来源于互联网,转载的目的在于传递更多信息及用于网络分享,并不代表本站赞同其观点和对其真实性负责,也不构成任何其他建议。如果您发现网站上有侵犯您的知识产权的作品,请与我们取得联系,我们会及时修改或删除。文章链接:http://www.yixao.com/tech/28279.html