各位大佬好,
我的后端192.168.1.x上部署了一个esxi服务器,前端域名绑定的example.com服务器为nginx代理。如果配置文件为以下内容,则无法通过网址https://www.example.com:4443/esxi/访问esxi网页管理页面:
#配置文件1
server {
listen 4443;
server_name http://www.example.com;
#access_log /var/log/nginx/access.log;
#error_log /var/log/nginx/error.log;
ssl on;
ssl_certificate /etc/nginx/ssl/example.com/cert.pem;
ssl_certificate_key /etc/nginx/ssl/example.com/key.pem;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
root /var/www/html;
index 网页链接 网页链接 index.nginx-debian.html;
location / {
try_files $uri $uri/ =404;
}
location /esxi/ {
proxy_pass https://192.168.1.x/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
通过配置文件1,访问https://www.example.com:4443/esxi/访问后,会重定向至https://www.example.com:4443/ui然后出现无法访问的情况。手动输入https://www.example.com:4443/esxi/ui/#/login可以访问登陆界面,但输入用户名和密码后会提示please refresh your browser。无法登录
但是,通过以下方式就可以通过网址https://esxi.example.com:4443/正常登录及访问后台管理页面:
#配置文件2
server {
listen 4443;
server_name esxi.example.com;
ssl on;
ssl_certificate /etc/nginx/ssl/example.com/cert.pem;
ssl_certificate_key /etc/nginx/ssl/example.com/key.pem;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
proxy_pass https://192.168.1.x/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
我的后端192.168.1.x上部署了一个esxi服务器,前端域名绑定的example.com服务器为nginx代理。如果配置文件为以下内容,则无法通过网址https://www.example.com:4443/esxi/访问esxi网页管理页面:
#配置文件1
server {
listen 4443;
server_name http://www.example.com;
#access_log /var/log/nginx/access.log;
#error_log /var/log/nginx/error.log;
ssl on;
ssl_certificate /etc/nginx/ssl/example.com/cert.pem;
ssl_certificate_key /etc/nginx/ssl/example.com/key.pem;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
root /var/www/html;
index 网页链接 网页链接 index.nginx-debian.html;
location / {
try_files $uri $uri/ =404;
}
location /esxi/ {
proxy_pass https://192.168.1.x/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
通过配置文件1,访问https://www.example.com:4443/esxi/访问后,会重定向至https://www.example.com:4443/ui然后出现无法访问的情况。手动输入https://www.example.com:4443/esxi/ui/#/login可以访问登陆界面,但输入用户名和密码后会提示please refresh your browser。无法登录
但是,通过以下方式就可以通过网址https://esxi.example.com:4443/正常登录及访问后台管理页面:
#配置文件2
server {
listen 4443;
server_name esxi.example.com;
ssl on;
ssl_certificate /etc/nginx/ssl/example.com/cert.pem;
ssl_certificate_key /etc/nginx/ssl/example.com/key.pem;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
proxy_pass https://192.168.1.x/;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}