Install and configure nginx as a tcp proxy

Install and configure nginx as a tcp proxy
Previously, haproxy was used for Proxy tcp. After nginx 1.9, one more choice is available. You can use nginx as a proxy. In this way, you do not need to get familiar with haproxy again.
Tcp proxy is essentially port-to-port ing and forwarding, which is relatively simple. Not as complex as http layer proxy. I usually use https proxy. As we all know, I used to use nginx proxy https to configure certificates and other things. However, for the tcp layer, there is no certificate. Purely simple and clean forwarding configuration, which is very refreshing; of course, sometimes the http layer proxy is replaced with tcp. The reason is that the tcp proxy configuration is simpler and the performance is higher.
I. nginx download and Installation Method 1: http://nginx.org/en/download.html ::::through rpmpackage Installation

1. Add the installation source and create the nginx. repo file under/etc/yum. repos. d.

1. [Nginx]
2. Name = nginx repo
3. Baseurl = http://nginx.org/packages/centos/?releasever/?basearch/
4. Gpgcheck = 0
5. Enabled = 1

2. Install nginx

1. # Yum clean all
2. # Yum install nginx

3. view the installation path and version

1. # Whereis nginx
2. #/Usr/sbin/nginx-v
3. Nginx version: nginx/1.10.1

4. view the default configuration file path

1. #/Usr/sbin/nginx-h
2. -C filename: set configuration file (default:/etc/nginx. conf)

Ii. nginx configuration 1. Directory Planning

1. Mkdir-p/opt/service/nginx/conf
2. Mkdir-p/opt/logs/nginx
3. Cd/opt/service/nginx
4. Ln-s/usr/sbin/nginx
5. Ln-s/opt/logs/nginx log

/Opt/service/nginx/
── Conf
── Log->/opt/logs/nginx
── Nginx->/usr/sbin/nginx

2. Configure nginx. conf

1. User nginx;
2. Worker_processes 16;
3. Worker_rlimit_nofile 100000;
5. Error_log/opt/service/nginx/log/error. log error;
6. Pid/opt/service/nginx. pid;
7. 
   Events {
8. Use epoll;
9. Worker_connections 10240;
10. }
12. Include/opt/service/nginx/conf/*. conf;

3. Configure the tcp proxy
/Opt/service/nginx/conf/nginx_tcp_proxy.conf

1. Stream {
2. #---------------------------------------------------------------------
3. # Tcp proxy
4. #---------------------------------------------------------------------
5. Upstream weixin_proxy {
6. Hash $ remote_addr consistent;
7. Server wx.qq.com: 443 weight = 1 max_fails = 3 fail_timeout = 60 s;
8. }
10. Server {
11. Listen 443;
12. Proxy_connect_timeout 10 s;
13. Proxy_pass weixin_proxy;
14. Proxy_buffer_size 64 k;
15. }
16. }

3. Start and maintain nginx1 and edit nginx. sh

1. #! /Bin/sh
   
2. # Description: nginx server
   
3. # Nginx-this script is used to control nginx service
   
4. # Processname nginx
   
5. # Nginx version: nginx/1.10.1
   
6. 
   
7. Nginx = "/usr/sbin/nginx"
   
8. Prog = "nginx"
   
9. Conf_file = "/etc/nginx. conf"
   
10. 
    
11. Start (){
    
12. If ['pgrep $ prog | wc-l'-eq 2]; then
    
13. If [-x $ nginx] & [-f $ conf_file]; then
    
14. $ Nginx-c $ conf_file
    
15. Ret = $?
    
16. If [$ ret-eq 0]; then
    
17. Echo "$ prog start successed"
    
18. Else
    
19. Echo "$ prog start failed"
    
20. Fi
    
21. Else
    
22. Echo "$ prog config file not exist"
    
23. Fi
    
24. Else
    
25. Num = 'pgrep $ prog'
    
26. Echo "$ prog is already started... $ num"
    
27. Fi
    
28. }
    
29. 
    
30. 
    
31. Stop (){
    
32. If ['pgrep $ prog | wc-l'-ne 2]; then
    
33. Killall-9 $ prog
    
34. Ret = $?
    
35. If [$ ret-eq 0]; then
    
36. Echo "$ prog stop successed"
    
37. Else
    
38. Echo "$ prog stop failed"
    
39. Fi
    
40. Else
    
41. Echo "$ prog is already stopped ..."
    
42. Fi
    
43. }
    
44. 
    
45. Restart (){
    
46. Stop
    
47. Sleep 2
    
48. Start
    
49. }
    
50. 
    
51. Reload (){
    
52. If ['pgrep $ prog | wc-l'-ne 0]; then
    
53. Pid = 'ps-ef | grep $ prog | grep master | awk '{print $2 }''
    
54. If [-x $ nginx] & [-f $ conf_file]; then
    
55. Kill-HUP $ pid
    
56. Ret = $?
    
57. If [$ ret-eq 0]; then
    
58. Echo "$ prog reload successed"
    
59. Else
    
60. Echo "$ prog reload failed"
    
61. Fi
    
62. Else
    
63. Echo "$ prog config file is not exist"
    
64. Fi
    
65. Else
    
66. Echo "$ prog is stopped, please start $ prog first ..."
    
67. Fi
    
68. }
    
69. 
    
70. Check (){
    
71. If [-x $ nginx] & [-f $ conf_file]; then
    
72. $ Nginx-t-c $ conf_file
    
73. Ret = $?
    
74. If [$ ret-eq 0]; then
    
75. Echo "$ prog check successed"
    
76. Else
    
77. Echo "$ prog check failed"
    
78. Fi
    
79. Else
    
80. Echo "$ prog program or config file not exit! "
    
81. Fi
    
82. }
    
83. 
    
84. Case $1 in
    
85. Start)
    
86. Start
    
87. ;;
    
88. Stop)
    
89. Stop
    
90. ;;
    
91. Restart)
    
92. Restart
    
93. ;;
    
94. Reload)
    
95. Reload
    
96. ;;
    
97. Check)
    
98. Check
    
99. ;;
    
100. *)
     
101. Echo "Usage: $0 {start | stop | restart | reload | check }"
     
102. Esac

2. Start nginx. sh

1. Chmod a + rwx nginx. sh
2. ./Nginx. sh restart

The entire directory structure is as follows:

1. # Ll
   
2. Total 8
   
3. Drwxr-xr-x 2 root 33 Dec 21 17: 16 conf
   
4. Lrwxrwxrwx 1 root 15 Dec 21 17: 00 log->/opt/logs/nginx
   
5. Lrwxrwxrwx 1 root 15 Dec 21 16:59 nginx->/usr/sbin/nginx
   
6. -Rw-r -- 1 root 6 Dec 21 17:21 nginx. pid
   
7. -Rwxrwxrwx 1 root 2172 Dec 21 17:20 nginx. sh

Problem:
When the back-end of Contemporary management is a domain name, the dns of the domain name changes. Nginx does not know. See the document. nginx provides the dns refresh function on a regular basis, but my configuration does not seem to play a role.
Add this configuration at the end of nginx. conf.
Resolver 100.100.2.136 valid = 1 s;
Include/etc/nginx/nginx_vhost/*. conf;