Guest User

Untitled

a guest
Mar 28th, 2018
375
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.02 KB | None | 0 0
  1.  
  2. upstream default-nginx-z-80 {
  3. # Load balance algorithm; empty for round robin, which is the default
  4.  
  5. least_conn;
  6.  
  7. keepalive 32;
  8.  
  9. server 10.1.228.195:80 max_fails=0 fail_timeout=0;
  10.  
  11. }
  12.  
  13. ## start server z-ingress.mixhub.cn
  14. server {
  15. server_name z-ingress.mixhub.cn ;
  16.  
  17. listen 80;
  18.  
  19. listen [::]:80;
  20.  
  21. set $proxy_upstream_name "-";
  22.  
  23. location / {
  24. port_in_redirect off;
  25.  
  26. set $proxy_upstream_name "default-nginx-z-80";
  27.  
  28. set $namespace "default";
  29. set $ingress_name "nginx-z";
  30. set $service_name "";
  31.  
  32. client_max_body_size "1m";
  33.  
  34. proxy_set_header Host $best_http_host;
  35.  
  36. # Pass the extracted client certificate to the backend
  37.  
  38. proxy_set_header ssl-client-cert "";
  39. proxy_set_header ssl-client-verify "";
  40. proxy_set_header ssl-client-dn "";
  41.  
  42. # Allow websocket connections
  43. proxy_set_header Upgrade $http_upgrade;
  44.  
  45. proxy_set_header Connection "";
  46.  
  47. proxy_set_header X-Real-IP $the_real_ip;
  48.  
  49. proxy_set_header X-Forwarded-For $the_real_ip;
  50.  
  51. proxy_set_header X-Forwarded-Host $best_http_host;
  52. proxy_set_header X-Forwarded-Port $pass_port;
  53. proxy_set_header X-Forwarded-Proto $pass_access_scheme;
  54. proxy_set_header X-Original-URI $request_uri;
  55. proxy_set_header X-Scheme $pass_access_scheme;
  56.  
  57. # Pass the original X-Forwarded-For
  58. proxy_set_header X-Original-Forwarded-For $http_x_forwarded_for;
  59.  
  60. # mitigate HTTPoxy Vulnerability
  61. # https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
  62. proxy_set_header Proxy "";
  63.  
  64. # Custom headers to proxied server
  65.  
  66. proxy_connect_timeout 5s;
  67. proxy_send_timeout 60s;
  68. proxy_read_timeout 60s;
  69.  
  70. proxy_redirect off;
  71.  
  72. proxy_buffering off;
  73. proxy_buffer_size "4k";
  74. proxy_buffers 4 "4k";
  75. proxy_request_buffering "on";
  76.  
  77. proxy_http_version 1.1;
  78.  
  79. proxy_cookie_domain off;
  80. proxy_cookie_path off;
  81.  
  82. # In case of errors try the next upstream server before returning an error
  83. proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
  84.  
  85. proxy_pass http://default-nginx-z-80;
  86.  
  87. }
  88.  
  89. }
  90. ## end server z-ingress.mixhub.cn
Advertisement
Add Comment
Please, Sign In to add comment