buyfakett
    ← 返回博客

    反向代理DDNS域名

    背景

    网友在家里搭建了一个Emby影视站，使用DDNS域名进行访问

    但是我家的网络、健身房的网络以及流量卡都存在跨网QoS限制，导致访问速度异常缓慢

    于是我想到在其网站前通过另一个域名做一层转发，从而实现三网直连

    正确配置

    server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  resolver 8.8.8.8 114.114.114.114 valid=10s;
  set $target "xxx";

  location / {
    proxy_pass https://$target:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}

    错误配置

    我最初使用了常规的转发方式，发现无法适用于DDNS域名:

    server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  location / {
    proxy_pass https://xxx:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}