配置文件结构

user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# 动态模块加载
include /usr/share/nginx/modules/*.conf;
events { worker_connections 1024; }
http {
    log_format main '$remote_addr - $remote_user [$time_local] "$request" "$status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for"';
    access_log /var/log/nginx/access.log main;
    gzip on;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    include /etc/nginx/conf.d/*.conf;
    server {
        listen 80;
        listen [::]:80;
        server_name web;
        # 包含默认服务器配置
        include /etc/nginx/default.d/*.conf;
        location / {
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection keep-alive;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_cache_bypass $http_upgrade;
            proxy_set_header X-NginX-Proxy true;
            # 处理http_referer，解决B网站资源加载问题
            if ($http_referer ~ 'bmd') {
                rewrite ^/(.*)$ http://$host/bmd/$1 permanent;
            }
            proxy_pass http://127.0.0.1:5000/;
        }
        location ^~/bmd/ {
            root /usr/local/whitelist;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection keep-alive;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_cache_bypass $http_upgrade;
            proxy_set_header X-NginX-Proxy true;
            # 优化资源路径
            # rewrite ^/bmd/(.*)$ /$1 break;
            # proxy_redirect ~^http://192.168.2.32/bmd/(.*)$ http://127.0.0.1:5001/$1;
            proxy_pass http://127.0.0.1:5001/;
        }
        location /Nginxstatus {
            stub_status on;
            access_log /usr/local/nginx/logs/status.log;
            auth_basic "NginxStatus";
        }
        error_page 404 /404.html;
        location = /40x.html { }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html { }
    }
    server {
        listen 8000;
        listen [::]:8000;
        server_name api;
        # 包含默认服务器配置
        include /etc/nginx/default.d/*.conf;
        location /api/v1 {
            proxy_pass http://127.0.0.1:5003;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection keep-alive;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_cache_bypass $http_upgrade;
        }
        error_page 404 /404.html;
        location = /40x.html { }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html { }
    }
}

配置解析

• location / { }：表示所有请求的默认处理位置
• proxy_pass http://127.0.0.1:5000/;：将请求代理转发至backend服务器（如.NET Core 3.1应用程序）
• if ($http_referer ~ 'bmd') { rewrite ^/(.*)$ http://$host/bmd/$1 permanent; }：根据http_referer字段判断是否需要跳转至B网站
• location ^~/bmd/ { }：定义了 /bmd/ 路径的处理规则
• root /usr/local/whitelist;：指定B网站的物理路径
• proxy_pass http://127.0.0.1:5001/;：将请求代理转发至B网站的backend服务器

关键配置要点

• 使用rewrite指令实现路径重写
• 通过proxy_set_header设置必要的HTTP头信息
• 使用proxy_cache控制缓存策略
• 配合proxy_pass实现请求转发

安装Nginx

• 在CentOS7上安装Nginx：

yum install nginx

配置Nginx

• 修改默认配置文件：

nano /etc/nginx/conf.d/default.conf

• 填写自定义配置
• 保存并退出

启动Nginx

systemctl start nginx
systemctl enable nginx

验证配置

• 使用curl命令测试：

curl -I http://192.168.2.32
curl -I http://192.168.2.32/bmd/

路径配置

• 确保A网站和B网站的实际路径配置正确
• /usr/local/whitelist需要挂载或创建为B网站的物理路径

缓存设置

• 根据实际需求调整proxy_cache_bypass和proxy_cache的配置

性能优化

• 根据实际负载调整keepalive_timeout和worker_connections的值