答复: nginx plus with ssl on TCP load balance not work

Server NGINX
#1

When I’m trying http ssl, I found need to set proxy_set_header
X-Forwarded-Proto $scheme; in server block, or it will also encounter
ERR_TOO_MANY_REDIRECTS.

Is TCP has same kind of setting?

-----邮件原件-----
发件人: smith [mailto:[email protected]]
发送时间: 2015年6月11日 8:28
收件人: [email protected]
主题: 答复: nginx plus with ssl on TCP load balance not work

The 80 is normal, And I tried use http ssl, also works. Don’t know Why
TCP not work.

-----邮件原件-----
发件人: [email protected] [mailto:[email protected]] 代表 Roman
Arutyunyan
发送时间: 2015年6月11日 8:25
收件人: [email protected]
主题: Re: nginx plus with ssl on TCP load balance not work

What about the 80 port of the stream balancer?
Does it proxy the connection normally?

PS: no access log is supported in the stream module.
Connection information (addresses etc) is logged to error log with the
info loglevel.

On 11 Jun 2015, at 10:49, smith [email protected] wrote:

events {
’
#gzip on;
And the content in previous email is in xxxx.d/xxxx.conf
Arutyunyan

Hi,
Connection timed out) while connecting to upstream, client: 10.0.0.1,
proxy_pass backend;
ssl_certificate ssl/chained.crt;

And I’m using amazon linux

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

–
Roman A.

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

#2

Stream proxy has no idea what the underlying protocol is.
It cannot change anything in it like http headers etc.

On 11 Jun 2015, at 11:34, smith [email protected] wrote:

The 80 is normal, And I tried use http ssl, also works. Don’t know Why TCP not
work.
PS: no access log is supported in the stream module.

error_log /var/log/nginx/error.log warn;
include /etc/nginx/mime.types;
#tcp_nopush on;

Could you provide the full config of the nginx/stream balancer?

Page access always report ERR_TOO_MANY_REDIRECTS.
The configuration is like this, remove the real ip
listen 443 ssl;
#ssl_session_timeout 4h;

BTW, tcp how to set access log?
Roman A.
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

–
Roman A.

#3

So it’s not supported?

-----邮件原件-----
发件人: [email protected] [mailto:[email protected]] 代表 Roman
Arutyunyan
发送时间: 2015年6月11日 8:43
收件人: [email protected]
主题: Re: nginx plus with ssl on TCP load balance not work

Stream proxy has no idea what the underlying protocol is.
It cannot change anything in it like http headers etc.

On 11 Jun 2015, at 11:34, smith [email protected] wrote:

The 80 is normal, And I tried use http ssl, also works. Don’t know Why TCP not
work.

http {
sendfile on;
stream {

10.0.0.2 this ip is the nginx ip, while it is used as upstream?

 ssl_handshake_timeout 3s;

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

–
Roman A.

nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx