{"id":156,"date":"2024-10-30T18:12:53","date_gmt":"2024-10-30T10:12:53","guid":{"rendered":"https:\/\/zhoujibin.com\/?p=156"},"modified":"2024-10-30T18:12:53","modified_gmt":"2024-10-30T10:12:53","slug":"nginx%e5%90%8c%e4%b8%80%e7%ab%af%e5%8f%a3%e5%90%8c%e6%97%b6%e7%9b%91%e5%90%achttp%e5%92%8chttps","status":"publish","type":"post","link":"https:\/\/blog.zhoujibin.com\/?p=156","title":{"rendered":"Nginx\u540c\u4e00\u7aef\u53e3\u540c\u65f6\u76d1\u542chttp\u548chttps"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">nginx\u7248\u672c<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>1.22.1<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u4f9d\u8d56\u6a21\u5757<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>stream\u3001stream_ssl\u3001stream_ssl_preread<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u914d\u7f6e\u4ee3\u7801<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code># \u5982\uff1a8080\u7aef\u53e3\u6839\u636ehttp\u548chttps\u5206\u522b\u8f6c\u5411\u4e0d\u540c\u7684\u670d\u52a1\uff1ahttps\u8df3\u8f6c\u81f3127.0.0.1:8081\uff0chttp\u8df3\u8f6c\u81f3127.0.0.1:8082\uff0c\u5728nginx\u914d\u7f6e\u6587\u4ef6\u4e2d\u6dfb\u52a0\u5982\u4e0b\u4ee3\u7801\u5373\u53ef\uff1a\n# \u6ce8\u610f\uff0c\u4ee5\u4e0b\u4ee3\u7801\u4f4d\u7f6e \u548c http \u914d\u7f6e\u5e73\u7ea7\n# begin \nstream {\n    upstream web_https {\n        # \u53ef\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u8c03\u6574\n        server 127.0.0.1:8081;\n    }\n    upstream web_http {\n        # \u53ef\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u8c03\u6574\n        server 127.0.0.1:8082;\n    }\n\n# \u5173\u4e8e ssl_preread_protocol \u76f8\u5173\u8bf4\u660e\u8bf7\u53c2\u8003\uff1ahttps:\/\/nginx.org\/en\/docs\/stream\/ngx_stream_ssl_preread_module.html\n    map $ssl_preread_protocol  $upstream {\n        \"\" web_http;\n        # ssl_preread_protocol\u7684\u503c\u4e0ehttps\u4e2d ssl_protocols \u6709\u5173\n        \"TLSv1.1\" web_https;\n        \"TLSv1.2\" web_https;\n        \"TLSv1.3\" web_https;\n        default web_https;\n     }\n    # http and https on the same port\n    server {\n        listen 8080;\n        proxy_pass $upstream;\n        ssl_preread on;\n    }\n}\n# end\n\n# \u82e5\u5728\u540c\u4e00\u53f0\u670d\u52a1\u5668\uff0c\u53ef\u6dfb\u52a0\u5982\u4e0b\u4ee3\u7801\u8fdb\u884c\u6d4b\u8bd5\n# https \nserver\n{\n    # https\n     listen 8081  ssl http2;\n    server_name 127.0.0.1;\n    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;\n    # ssl\u914d\u7f6e begin\n    # \u7565...\n    # ssl\u914d\u7f6e end\n     location \/ {\n         default_type application\/json;\n          return 200 '{\"msg\":\"this is &#91;https] page\"}';\n    }\n\n}\n# http\nserver\n{\n    # http\n     listen 8082;\n    server_name 127.0.0.1;\n\n    location \/ {\n        default_type application\/json;\n          return 200 '{\"msg\":\"this is &#91;http] page\"}';\n    }\n }\n\n # \u914d\u7f6e\u5b8c\u6bd5\u540e\u91cd\u542f\u670d\u52a1\u5373\u53ef\u3002<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u91cd\u542f\u670d\u52a1<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>service nginx restart;<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u6d4b\u8bd5<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code># http\u8bbf\u95ee\nhttp:&#47;&#47;127.0.0.1:8080\n# \u7ed3\u679c\uff1a'{\"msg\":\"this is &#91;http] page\"}'\n# https\u8bbf\u95ee\nhttps:\/\/127.0.0.1:8080\n# \u7ed3\u679c\uff1a'{\"msg\":\"this is &#91;https] page\"}'<\/code><\/pre>\n\n\n\n<h1 class=\"wp-block-heading\">\u5176\u4ed6\u95ee\u9898<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">\u82e5\u6d4b\u8bd5http\u8fde\u63a5\u65f6\u81ea\u52a8\u8df3\u8f6c\u81f3https\uff0c\u63a7\u5236\u53f0\u63d0\u793a307<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u65b9\u68481<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\u5728 Chrome \u7684 URL \u5b57\u6bb5\u4e2d\u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9\uff1achrome:\/\/net-internals\/#hsts\uff0c\u7136\u540e\u641c\u7d22\u60a8\u7684\u7f51\u7ad9\u5e76\u5c06\u5176\u5220\u9664\u3002<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u65b9\u68482<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\u60a8\u53ef\u80fd\u662f\u5728\u9876\u7ea7\u57df\u4e2d\u8bbe\u7f6e\u7684 HSTS \u5e76\u5305\u542b\u4e86\u5b50\u57df\uff0c\u56e0\u6b64\u53ef\u4ee5\u4ece\u5176\u4e2d\u5220\u9664\u5b50\u57df\u3002\uff08\u539f\u6587\uff1aYou may also set this at a top level domain and include subdomains so you may need to delete from there.\uff09\uff08\u5bf9\u4e8e\u6b64\u5904\u7684\u300c\u9876\u7ea7\u57df\u300d\u6211\u7684\u7406\u89e3\u662f\u6307\u4e00\u7ea7\u57df\u540d \/ \u4e3b\u57df\u540d\uff0c\u539f\u6587\u60f3\u63cf\u8ff0\u7684\u60c5\u51b5\u662f Strict-Transport-Security \u5b57\u6bb5\u4e2d\u8bbe\u7f6e\u4e86\u5b50\u57df\u7684\u60c5\u51b5\uff0c\u8bed\u6cd5\u4e3a Strict-Transport-Security: max-age=&lt;expire-time&gt;; includeSubDomains\u3002\u8fd9\u6837\u5f53\u5b50\u57df\u4e0d\u518d\u9700\u8981 HTTPS \u65f6\uff0c\u53ef\u4ee5\u5bf9\u7236\u57df\u7684 Header \u8fdb\u884c\u66f4\u65b0\u4ee5\u4e22\u5f03 includeSubDomains\u3002\uff09<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u65b9\u68483<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\u66f4\u6539\u670d\u52a1\u5668\u914d\u7f6e\u4e2d\u7684 Header Strict-Transport-Security \u5b57\u6bb5\uff1a\u5148\u53d1\u5e03 max-age \u4e3a 0 \u7684 Header\uff0c\u7136\u540e\u91cd\u65b0\u8bbf\u95ee\u7f51\u7ad9\u4ee5\u6e05\u9664\u6b64 Header\uff0c\u6700\u540e\u505c\u6b62\u53d1\u5e03\u6b64 Header\u3002\u8fd9\u5bf9\u4e8e\u5176\u4ed6\u4e0d\u592a\u5bb9\u6613\u6e05\u9664 Header \u7684\u6d4f\u89c8\u5668\u5f88\u6709\u5e2e\u52a9\u3002<\/code><\/pre>\n\n\n\n<p>\u53c2\u8003\uff1a<a href=\"https:\/\/charlesfeng.cn\/status-code-307-and-hsts\/\">HTTPS -&gt; HTTP \u5f15\u8d77\u7684 307 \u72b6\u6001\u7801\u4e0e HSTS<\/a><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">\u53c2\u8003\u8fde\u63a5<\/h1>\n\n\n\n<p><a href=\"https:\/\/nginx.org\/en\/docs\/stream\/ngx_stream_ssl_preread_module.html\">Nginx\u914d\u7f6e\u8bf4\u660e<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/blog.csdn.net\/makenothing\/article\/details\/79670702\">Nginx https \u534f\u8bae\u914d\u7f6e ssl_protocols \u7684\u76f8\u5173\u95ee\u9898_<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>nginx\u7248\u672c \u4f9d\u8d56\u6a21\u5757 \u914d\u7f6e\u4ee3\u7801 \u91cd\u542f\u670d\u52a1 \u6d4b\u8bd5 \u5176\u4ed6\u95ee\u9898 \u82e5\u6d4b\u8bd5http\u8fde\u63a5\u65f6\u81ea\u52a8\u8df3\u8f6c\u81f3https\uff0c\u63a7\u5236\u53f0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[44,33],"class_list":["post-156","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linxu","tag-nginx"],"_links":{"self":[{"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/posts\/156"}],"collection":[{"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=156"}],"version-history":[{"count":1,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/posts\/156\/revisions"}],"predecessor-version":[{"id":157,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=\/wp\/v2\/posts\/156\/revisions\/157"}],"wp:attachment":[{"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.zhoujibin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}