nginx+SLB, nginx端口转发, 强制跳转https

upstream xxx.whenchat.com{ip_hash;server 172.16.xxx.11:8080 max_fails=2 fail_timeout=2s;server 172.16.xxx.12:8080 max_fails=2 fail_timeout=2s;keepalive 300;}server { listen 80; server_name xxx.whenchat.com; # 自行修改成你的域名 return 301 https://$server_name$request_uri;}

server { listen 443 ssl; server_name xxx.whenchat.com; # 自行修改成你的域名 ssl_certificate /home/ssl/02__whenchat.com.pem; # 自行设置证书 ssl_certificate_key /home/ssl/02__whenchat.com.key; # 自行设置证书 ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; allow 61.164.52.xx; deny all;

location / { proxy_pass http://xxx.whenchat.com; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; }}