nginx conf

ssl_certificate      /web/certificates/mydomain.com.pem;
ssl_certificate_key  /web/certificates/mydomain.com.key;

# Web server
#
server {
    listen              80;
    listen              443 ssl;
    server_name         www.mydomain.com;

    location / {
      root      /web/htdocs/www.mydomain.com;
      include   php.conf;
      include   block-hidden.conf;
    }
}

# Websocket
#
upstream websocketpool {
  ip_hash; # Clients with the same IP are redirected to the same backend

  server 10.0.0.60:9000  fail_timeout=20s weight=1; # id=web-01
  server 10.0.0.250:9000 fail_timeout=20s weight=1; # id=web-02
  server 10.0.0.152:9000 fail_timeout=20s weight=1; # id=web-03
}

server {
  listen        80;
  listen        443 ssl;
  server_name   ws.mydomain.com 10.*;
  access_log    /var/log/nginx/ws.mydomain.com.access.log  main;

  location / {
    proxy_pass http://websocketpool;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-NginX-Proxy true;
    proxy_redirect off;
    error_page 500 502 /error/500.html;
  }
}