Many users choose to run confluence behind the reverse proxy and also enable HTTPS. It is necessary to configure your confluence reverse proxy correctly, and to avoid many of the problems encountered in using confluence later.Both proxy and HTTPS access are already configure
default is 80 (which is why the Nginx Listener 80 port is often not a problem), and the client obtains the page element based on the returned address.4. So in the above case, if the Proxy_set_header Host $host is set, the address of other elements of the client Access page will be HTTP://1.1.1.1/..., can see, or through the Nginx proxy, But here's the problem:
First, the premise condition
This method is only applicable to Nginx Web services, the recommended installation of military LNMP or Oneinstack, the installation of their own nginx can be compiled.
Second, modify the host configuration file
Military brother Lnmp or Oneinstack configuration file in/usr/local/nginx/conf/vhost/youdomain.com.conf, add the following
Nginx enforces https (automatic jump from http to https)Nginx returns 400 for sites with https enabled for http access. the web site entered by the browser is http by default, and it is annoying to change the URL to https every ti
Advantages of using Nginx
Nginx as a Web server, nginx processing static files, index files, automatic indexing is very efficient.
Nginx as a proxy server, Nginx can implement the reverse pr
The business needs to provide services over HTTPS and enter HTTP to automatically jump to HTTPS.The rewrite method of 1.nginxRewrite all HTTP requests over rewrite to HTTPSserver {Listen 80;server_name qunyingliu.qq.com;Rewrite ^ (. *) $ https://$host $ permanent;}2. index.html Refresh Web pageJumpIndex.htmlNginx Configurationserver {Listen 80;server_name qunyingliu.qq.com;Location/{#index. HTML is placed i
/javascript;server_name demo2.localhost;location / { proxy_pass http://demo2.localhost; include /etc/nginx/proxy_params;}
}
**
Try it
**
You can try to build it. Https://index.docker.io/u/jwilder/nginx-proxy/Run the nginx proxy
Nginx optimization-including HTTPS, keepalive, etc.First, Nginx Tcp_nopush, Tcp_nodelay, Sendfile1. Tcp_nodelay How can you force the socket to send data in its buffer? One solution is the tcp_nodelay option for the TCP stack. This allows the data in the buffer to be sent out immediately.The Tcp_nodelay option of Nginx
. Compiling and installingSetting Installation Parameters[Email protected] nginx-1.10.2]#./configure--prefix=/usr/local/nginx--with-http_ssl_moduleCompiling and installing[[email protected] nginx-1.10.2]# make[[email protected] nginx-1.10.2]# make installOpenSSL generates a test CA certificate: See Resources1.1.1.4. Mo
Apache
Yum Install httpd mod_ssl-/etc/httpd/conf.d/443 HTTPS443> ServerName example.com sslengineon/cert/server.crt /cert/ Server.key proxyrequests on proxyvia in Order deny,allow allow from all systemctl restart httpd
Nginx
Nginx default does not support proxy HTTPS
Reference GOCN
Sometimes you need to turn the backend HTTP service into HTTPS, and you can use a proxy.
Reamark: If it is a Golang backend service, you can use the library Go-oryx-lib/https directly.
This agent supports self-signed certificates and also supports Letsencrypt certificates.
Remark:letsencrypt only support a small number of domain names, such as thei
Nginx Proxy reverse Proxy and internal redirection
Nginx Proxy is the trump card function of Nginx, using proxy can basically achieve a complete 7-layer load balancing, it has these cha
: This article mainly introduces the differences between nginx Reverse proxy and forward proxy. For more information about PHP tutorials, see. I have always had no idea how to understand the reverse direction of the reflection proxy. after Baidu knows it, I finally figured out a little bit by combining the following fi
. There is no switch between user mode and kernel mode, and a copy from buffer to buffer is completed directly in the kernel.
DMA copies the data directly from the Kernelbuffer to the protocol stack, without switching or requiring data to be copied from user mode to kernel mode, since the data is in kernel.
The steps are reduced, the switchover is reduced, the copy is reduced, and the natural performance is increased. This is why it is said that opening the sendfile on option in the
What is Nginx?Nginx (engine x) is a high-performance HTTP and reverse proxy server, also a IMAP/POP3/SMTP server.Nginx is a lightweight Web server/reverse proxy server and e-mail (IMAP/POP3) proxy server that is released under a bsd-like protocol. It is characterized by the
; HTTPS ### proxy_set_header X-forwarded-proto $scheme;
} location/{Rewrite ^ http://$server _name$request_uri? permanent;
}
}
About rewrite and location the reference here. When the browser accesses http://example.com/account/login.xx , 301 to https://example.com/account/login.xx , In this SSL encrypted virtual host also matches to/account/login, the reverse pr
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.