nginx

有两个服务，从A到B，由A发启请求到B，A会带上Authorization的请求头，和B服务所允许的请求头所冲突

解决办法：加一个中间层(nginx)

本地示例,使用nginx(windows)：修改nginx-1.26.2\conf\nginx.conf

            proxy_set_header Authorization "";
            proxy_pass http://localhost:8081;
            
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

下面的代码会把请求localhost:8089的转发到localhost8081,并把请求头字段去掉

worker_processes  1;
events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;


    server {
        listen       8089;
        server_name  localhost;

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://localhost:8081;
            
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            root   dist;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

}

docker版本的，先打个镜像包

# 使用官方的 Nginx 基础镜像
FROM nginx

# 更新包列表并安装网络测试工具
RUN apt-get update && apt-get install -y \
    iputils-ping \
    traceroute \
    dnsutils \
    net-tools \
    telnet

EXPOSE 80
    

然后改容器里的配置etc\nginx\nginx.conf

下面的配置会把到23.88.32.89:8080的请求转发到21.48.33.10:8088

user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    server {
        listen 8080;  # 监听端口
        server_name 23.88.32.89;  # 服务器名称

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://21.48.33.10:8088;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}

在配置不要使用80端口：权限问题，防火墙限制，端口被占用

如果后端的地址有多个：

1. upstream 块：借助 upstream 块定义了一个名为 backend_servers 的负载均衡器，其中列出了所有后端服务器及其端口。在这个例子中，有两个后端服务器：21.48.33.10:8088 和 21.48.33.10:8089。
2. proxy_pass 指令：在 location 块里，把 proxy_pass 指令的值从具体的后端服务器地址修改为负载均衡器的名称 http://backend_servers。这样一来，Nginx 就会依据负载均衡算法（默认是轮询）把请求转发到后端服务器。

user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    # 定义负载均衡组
    upstream backend_servers {
        server 21.48.33.10:8088;
        server 另一个后端地址:端口号;  # 替换为实际的后端地址和端口
    }

    server {
        listen 8080;  # 监听端口
        server_name 23.88.32.89;  # 服务器名称

        location / {
            proxy_set_header Authorization "";
            proxy_pass http://backend_servers;  # 使用负载均衡组
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}    

如果根据前端的不同路由去匹配不同的后端的话

user nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;

    # 定义第一个后端服务器组
    upstream backend1 {
        server 192.168.1.100:8080;
    }

    # 定义第二个后端服务器组
    upstream backend2 {
        server 192.168.1.101:8081;
    }

    server {
        listen 80;
        server_name example.com;

        # 匹配 /api1 开头的路由，转发到 backend1
        location /api1 {
            proxy_pass http://backend1;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        # 匹配 /api2 开头的路由，转发到 backend2
        location /api2 {
            proxy_pass http://backend2;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        # 默认匹配，可根据需要修改
        location / {
            root   html;
            index  index.html index.htm;
        }
    }
}

# stream 模块配置
stream {
    # 定义一个 TCP 代理
    server {
        listen 12345;  # 监听的 TCP 端口
        proxy_pass backend_tcp_server:5678;  # 转发到的 TCP 目标服务器和端口
    }
}