{"id":167273,"date":"2020-10-12T00:48:03","date_gmt":"2020-10-11T16:48:03","guid":{"rendered":"http:\/\/4563.org\/?p=167273"},"modified":"2020-10-12T00:48:03","modified_gmt":"2020-10-11T16:48:03","slug":"%e5%85%b3%e4%ba%8e-nginx-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%ef%bc%8c-http-%e6%ad%a3%e5%b8%b8%ef%bc%8c-https-%e8%ae%bf%e9%97%ae%e6%8a%a5-403-%e9%94%99%e8%af%af","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=167273","title":{"rendered":"\u5173\u4e8e nginx \u53cd\u5411\u4ee3\u7406\uff0c HTTP \u6b63\u5e38\uff0c HTTPS \u8bbf\u95ee\u62a5 403 \u9519\u8bef"},"content":{"rendered":"
\n
\n
\n

\u5173\u4e8e nginx \u53cd\u5411\u4ee3\u7406\uff0c HTTP \u6b63\u5e38\uff0c HTTPS \u8bbf\u95ee\u62a5 403 \u9519\u8bef <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/i> 1<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
\u53cd\u5411\u4ee3\u7406\u8f6c\u53d1\u7684\u662f\u4e00\u4e2a JSP \u7684\u7f51\u5740\uff0c\u5728 HTTP \u8bbf\u95ee\u6b63\u5e38\uff0cHTTPS \u5e26\u8bc1\u4e66\u8bbf\u95ee\u5c31\u4f1a\u62a5 403 \u9519\u8bef\uff0c\u800c\u4e14\u8bc1\u4e66\u6ca1\u6709\u95ee\u9898\uff0cHTTPS \u8f6c\u53d1\u5176\u4ed6\u9875\u9762\u53ef\u4ee5\u6b63\u5e38\u8f6c\u53d1\uff0c\u4e0b\u9762\u662f\u914d\u7f6e\u6587\u4ef6\uff0c\u5927\u795e\u6307\u5bfc\u4e0b\u662f\u5426\u9700\u8981\u8c03\u6574\u53c2\u6570\uff0c\u8c22\u8c22\uff01<\/p>\n

#user nobody;
worker_processes 1;<\/p>\n

#error_log logs\/error.log;
#error_log logs\/error.log notice;
#error_log logs\/error.log info;<\/p>\n

#pid logs\/nginx.pid;<\/p>\n

events {
worker_connections 1024;
}<\/p>\n

http {
include mime.types;
default_type application\/octet-stream;<\/p>\n

#log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘
# ‘$status $body_bytes_sent “$http_referer” ‘
# ‘”$http_user_agent” “$http_x_forwarded_for”‘;<\/p>\n

#access_log logs\/access.log main;<\/p>\n

sendfile on;
tcp_nopush on;<\/p>\n

#keepalive_timeout 0;
keepalive_timeout 65;<\/p>\n

gzip on;<\/p>\n

upstream ncc{
ip_hash;
server 10.0.3.21:9081 weight=10;
server 10.0.3.21:9082 weight=10;
server 10.0.3.21:9083 weight=10;
keepalive 300;
}<\/p>\n

server {
listen 80;
server_name localhost;
index index.jsp;
location \/ {
allow all;
index index.jsp index.html;
proxy_pass http:\/\/ncc;
proxy_set_header Host $http_host;
proxy_set_header Cookie $http_cookie;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
client_max_body_size 100m;
client_body_buffer_size 256k;
proxy_buffering off;
proxy_connect_timeout 1;
proxy_send_timeout 30;
proxy_read_timeout 60;
proxy_buffer_size 256k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
proxy_temp_file_write_size 256k;
proxy_max_temp_file_size 128m;
}
}
server {
listen 443 ssl;
#error_page 497 301 =307 https:\/\/$host:443$request_uri;
server_name localhost;
ssl_certificate cert\/piepchina.pem;
ssl_certificate_key cert\/piepchina.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location \/ {
allow all;
index index.jsp index.html;
proxy_pass http:\/\/ncc;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Cookie $http_cookie;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
proxy_set_header Upgrade-Insecure-Requests 1;
}
}<\/p>\n

} <\/p><\/div>\n

\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (42<\/span>) <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n
    \n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Lockeysama <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u8fd8\u662f\u770b\u8bbf\u95ee\u65e5\u5fd7\u5427 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : engineercj <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    user root; <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : whorusq <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    ssl on; <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : bruce0 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u628a\u9519\u8bef log \u6253\u5f00.\u770b\u4e00\u4e0b\u9519\u8bef log \u8fd9\u6837\u6700\u5bb9\u6613\u627e\u5230\u95ee\u9898 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : zunceng <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    443 \u548c 80 \u7684 \u914d\u7f6e\u90fd\u4e0d\u4e00\u6837 <\/p>\n

    Upgrade \uff1f websocket \uff1f <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : simenet <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u76ee\u5f55 \u6743\u9650\u4e0d\u591f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @Lockeysama \u8bbf\u95ee\u65e5\u5fd7\u65e0\u4efb\u4f55\u62a5\u9519\uff0c\u4e5f\u5c31\u662f\u8bf4 nginx \u6b63\u5e38\u8f6c\u53d1\u4e86\uff0c\u4f46\u4f7f\u7528\u8bc1\u4e66\u65b9\u5f0f\u8f6c\u53d1\u65f6\u5019\uff0c\u540e\u7aef\u5e94\u7528\u62d2\u7edd\u4e86\uff0c\u4e0d\u77e5\u9053\u662f\u4e0d\u662f\u5e94\u8be5\u5728 nginx \u914d\u7f6e\u6587\u4ef6\u4e0a\u6dfb\u52a0\u53c2\u6570 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @engineercj \u4e0d\u662f\u8fd9\u4e2a\u95ee\u9898\uff0c\u5982\u679c\u662f\u8fd9\u4e2a\u95ee\u9898\uff0c\u5f71\u54cd\u662f\u5168\u5c40\u7684\uff0c\u4e0d\u4f1a 80 \u7aef\u53e3\u6b63\u5e38\uff0c443 \u4e0d\u6b63\u5e38 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @whorusq ssl on \u7684\u65b9\u5f0f\uff0c\u5df2\u7ecf\u6dd8\u6c70\u4e86\uff0c\u73b0\u5728\u90fd\u662f\u8fd9\u4e48\u7528
    listen 443 ssl; <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Citrus <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    proxy_set_header Host $http_host;<\/p>\n

    ssl \u6bb5\u6ca1\u628a host \u4f20\u8fc7\u53bb\u554a <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @zunceng \u914d\u7f6e\u662f\u6709\u4e9b\u4e0d\u4e00\u6837\uff0c\u6211\u628a timeout \u548c buffer \u8865\u4e0a\u8bd5\u8bd5 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @simenet \u4e0d\u662f\u8fd9\u4e2a\u95ee\u9898\uff0c\u8fd9\u4e2a\u662f\u53cd\u5411\u4ee3\u7406\uff0c\u4e0d\u662f\u4f5c\u4e3a\u672c\u5730 web \u670d\u52a1\u5668 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @Citrus \u56e0\u4e3a\u4e4b\u524d\u89e3\u51b3\u95ee\u9898\uff0c\u6709\u4eba\u8bf4\u9700\u8981\u6ce8\u91ca\u6389\u8fd9\u6761\u3002\u3002\u3002\u6211\u5148\u8865\u4e0a<\/p>\n

    \u4e0b\u9762\u8fd9\u4e24\u6761\u610f\u4e49\u4e00\u81f4\u5417\uff1f<\/p>\n

    # proxy_set_header Host $host:$server_port;
    # proxy_set_header Host $proxy_host; <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : ctOS1H <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u65e5\u5fd7 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : oliverchen <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u662f\u4e0a\u6e38\u6839\u636e HOST \u201c\u4e0d\u5408\u6cd5\u201d\u8fd4\u56de\u7684 403 \u5427\u3002\u8bd5\u8bd5\u5728 ssl server \u90a3\u5757\uff0c\u4e5f\u52a0\u4e0a `proxy_set_header Host $http_host;` \u6216\u8005 `proxy_set_header Host $host;` <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : zunceng <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @guanyujia5444 \u4f60\u628a websocket \u7684\u914d\u7f6e \u5220\u6389\u8bd5\u8bd5 \u5c31\u662f Upgrade \u76f8\u5173\u7684 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @zunceng \u8fd9\u5757\u4e0d\u592a\u61c2\uff0c\u662f\u5220\u6389\u5982\u4e0b\u51e0\u6761\u5417\uff1f<\/p>\n

    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection “upgrade”;
    proxy_set_header Upgrade-Insecure-Requests 1; <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @zunceng \u5df2\u7ecf\u6ce8\u91ca\u6389\u8fd9\u4e09\u6761\uff0c\u8fd8\u662f\u4e0d\u884c\u7684 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u6700\u65b0\u7684\u914d\u7f6e\u5982\u4e0b\uff0c\u4f9d\u7136\u662f http \u7684 81 \u53ef\u4ee5\u8bbf\u95ee\uff0chttps \u7684 8888 \u7aef\u53e3\u65e0\u6cd5\u8bbf\u95ee\uff0c\u4e24\u4e2a\u8f6c\u53d1\u7684\u540e\u7aef\u670d\u52a1\u90fd\u662f\u4e00\u6837\u7684\u3002
    \u8f6c\u53d1\u7684\u534f\u8bae\u662f http \u7684\u3002<\/p>\n

    #user nobody;
    worker_processes 1;<\/p>\n

    error_log logs\/error.log;
    error_log logs\/error.log notice;
    error_log logs\/error.log info;<\/p>\n

    #pid logs\/nginx.pid;<\/p>\n

    events {
    worker_connections 1024;
    }<\/p>\n

    http {
    include mime.types;
    default_type application\/octet-stream;<\/p>\n

    #log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘
    # ‘$status $body_bytes_sent “$http_referer” ‘
    # ‘”$http_user_agent” “$http_x_forwarded_for”‘;<\/p>\n

    #access_log logs\/access.log main;<\/p>\n

    sendfile on;
    tcp_nopush on;<\/p>\n

    #keepalive_timeout 0;
    keepalive_timeout 65;<\/p>\n

    gzip on;<\/p>\n

    upstream ncc{
    ip_hash;
    server 192.168.100.241:9081 weight=10;
    server 192.168.100.241:9082 weight=10;
    keepalive 300;
    }<\/p>\n

    server {
    listen 81;
    server_name localhost;
    index index.jsp;
    location \/ {
    allow all;
    index index.jsp index.html;
    proxy_pass http:\/\/ncc;
    proxy_set_header Host $http_host;
    proxy_set_header Cookie $http_cookie;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    client_max_body_size 100m;
    client_body_buffer_size 256k;
    proxy_buffering off;
    proxy_connect_timeout 1;
    proxy_send_timeout 30;
    proxy_read_timeout 60;
    proxy_buffer_size 256k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_temp_file_write_size 256k;
    proxy_max_temp_file_size 128m;
    }
    }
    server {
    listen 8888 ssl;
    #error_page 497 301 =307 https:\/\/$host:443$request_uri;
    server_name localhost;
    index index.jsp;
    ssl_certificate cert\/2.pem;
    ssl_certificate_key cert\/2.key;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location \/ {
    allow all;
    index index.jsp index.html;
    proxy_pass http:\/\/ncc;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header Cookie $http_cookie;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection “upgrade”;
    proxy_set_header Upgrade-Insecure-Requests 1;
    client_max_body_size 100m;
    client_body_buffer_size 256k;
    proxy_buffering off;
    proxy_connect_timeout 1;
    proxy_send_timeout 30;
    proxy_read_timeout 60;
    proxy_buffer_size 256k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_temp_file_write_size 256k;
    proxy_max_temp_file_size 128m;
    }
    }
    } <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : xuanbg <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u52a0\u8fd9\u51e0\u53e5\uff1a
    set $ssl off;
    if ($scheme = https) {
    set $ssl on;
    } <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u8bbf\u95ee\u7684\u65f6\u5019\uff0c\u6ca1\u6709\u4efb\u4f55\u76f8\u5173\u9519\u8bef\u65e5\u5fd7\uff0c\u6211\u8ba4\u4e3a\u662f\u8f6c\u53d1\u6210\u529f\u4e86\uff0c\u4f46\u540e\u7aef\u670d\u52a1\u62d2\u7edd\u4e86\u3002
    \u4e3a\u5565 http \u5c31\u6b63\u5e38\u8bbf\u95ee\uff0chttps \u5c31\u88ab\u540e\u7aef\u670d\u52a1\u62d2\u7edd\uff0c\u8fd9\u4e2a\u5730\u65b9\u6709\u4e9b\u7591\u95ee\u3002<\/p>\n

    \u53e6\u5916\u8bd5\u4e86\u4e0b\uff0capache \u4f7f\u7528 ajp \u6216\u8005 http \u53cd\u5411\u4ee3\u7406\u8f6c\u53d1\u90fd\u53ef\u884c <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @xuanbg \u662f\u52a0\u5728\u90a3\u4e2a\u6807\u7b7e\u4e2d\uff1f http {}\u5417\uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : xuanbg <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @guanyujia5444 <\/p>\n

    server {
    listen 443 ssl;
    server_name api.i-facture.com;<\/p>\n

    ssl_certificate \/opt\/cert\/api.i-facture.com.pem;
    ssl_certificate_key \/opt\/cert\/api.i-facture.com.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    ssl_prefer_server_ciphers on;<\/p>\n

    set $ssl off;
    if ($scheme = https) {
    set $ssl on;
    }
    \u2026\u2026
    } <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @xuanbg \u8c22\u8c22\uff0c\u6211\u8bd5\u8bd5 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @xuanbg \u8fd8\u662f\u4e0d\u884c <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : tuxz <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u8d34\u4e0b access log <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    https:\/\/hr.xxxx.com.cn:8888\/
    \u8fd9\u4e2a\u662f https \u7684 access \u65e5\u5fd7
    \u770b\u7740\u6ca1\u6709\u5565\u95ee\u9898<\/p>\n

    192.168.100.210 – – [12\/Oct\/2020:17:10:35 +0800] “POST \/nccloud\/riart\/login\/init.do HTTP\/1.1” 200 700 “http:\/\/192.168.100.225:81\/nccloud\/resources\/uap\/rbac\/login\/main\/index.html” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:35 +0800] “GET \/nccloud\/resources\/uap\/public\/img\/picture.ico HTTP\/1.1” 200 9662 “http:\/\/192.168.100.225:81\/nccloud\/resources\/uap\/rbac\/login\/main\/index.html” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:36 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:37 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:38 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:38 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:38 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:39 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:10:39 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:58:19 +0800] “GET \/nccloud HTTP\/1.1” 302 5 “https:\/\/hr.xxxx.com.cn:8888\/” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:58:19 +0800] “GET \/nccloud\/ HTTP\/1.1” 400 657 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:58:20 +0800] “GET \/favicon.ico HTTP\/1.1” 400 657 “http:\/\/hr.xxxx.com.cn:8888\/nccloud\/” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:58:33 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:17:58:35 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38”
    192.168.100.210 – – [12\/Oct\/2020:18:06:18 +0800] “GET \/nccloud\/ HTTP\/1.1” 403 0 “-” “Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/86.0.4240.75 Safari\/537.36 Edg\/86.0.622.38” <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : dudu2017 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u5efa\u8bae\u5f00\u542f debug \u65e5\u5fd7\u770b
    error_log \/path\/to\/log debug; <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : masker <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u90a3\u5c31\u770b\u4e0a\u6e38\u7684\u65e5\u5fd7\u554a <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : yongliu <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    access \u65e5\u5fd7\u53ef\u4ee5\u770b\u5230\u53cd\u5411\u4ee3\u7406\u8fd9\u8fb9\u5e94\u8be5\u662f\u8fc7\u4e86
    \u770b\u770b\u540e\u7aef\u4e3a\u5565\u8fd4\u56de 403 \u5427 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : tsanie <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u8bf4\u4e2a\u9898\u5916\u8bdd\uff0c\u5176\u5b9e\u6211\u6bd4\u8f83\u597d\u5947\u5df2\u7ecf\u91c7\u7528 listen 443 ssl;\u65b9\u5f0f\u76d1\u542c\u4e86\u3002\u4e3a\u4ec0\u4e48\u4e0d\u628a http\/https \u5199\u5230\u540c\u4e00\u4e2a server \u4e2d\uff08\u5982\u679c server_name \u76f8\u540c\uff0c\u8981\u63d0\u4f9b\u7684\u5185\u5bb9\u53c8\u662f\u4e00\u6837\u7684\u8bdd\uff09
    server {
    listen 80;
    listen 443 ssl;
    …
    } <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : xuanbg <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @guanyujia5444 \u4f60\u7684\u8bc1\u4e66\u662f\u6307\u5b9a\u7684 localhost \uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : dany813 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u6700\u540e\u89e3\u51b3\u4e86\u5417 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @yongliu \u6211\u4e5f\u89c9\u5f97\u662f\u8fc7\u4e86\uff0c\u5e94\u8be5\u662f\u540e\u7aef\u7684\u95ee\u9898\uff0c\u4f46\u540e\u7aef\u4e3a\u5565\u62d2\u7edd\u5c31\u4e0d\u77e5\u9053\u4e86\uff0c\u6709\u5565\u80fd\u548c nginx \u51b2\u7a81\u7684\u5417\uff1f apache \u6b63\u5e38\u7684 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @xuanbg \u6307\u5b9a\u7684\u7f51\u5740\uff0c\u6211\u4e5f\u901a\u8fc7\u7f51\u5740\u8bbf\u95ee\u7684\uff0c\u5e94\u8be5\u662f nginx \u5df2\u7ecf\u8f6c\u53d1\u4e86\uff0c\u4f46\u540e\u7aef\u62d2\u7edd\u4e86 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @dany813 \u6ca1\u6709\u89e3\u51b3\uff0c\u6211\u6162\u6162\u8c03\u8bd5\u5427 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @tsanie \u5176\u5b9e\u53ef\u4ee5\u5199\u4e00\u4e2a\u91cc\u9762\uff0c\u4e3b\u8981\u662f\u4e3a\u4e86\u8c03\u8bd5\u65b9\u4fbf\uff0c\u4fbf\u4e8e\u6392\u67e5\u95ee\u9898\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : guanyujia5444 <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u8c22\u8c22\u5927\u5bb6\u7684\u5e2e\u52a9\uff0c\u6211\u8fd9\u8fb9\u5df2\u7ecf\u80af\u5b9a\u662f nginx \u5df2\u7ecf\u6210\u529f\u8f6c\u53d1\u4e86\uff0c\u4f46\u540e\u7aef\u62d2\u7edd\u4e86\u8bc1\u4e66\u7684\u8bbf\u95ee\uff0c\u540c\u6837\u7684\u53cd\u5411\u4ee3\u7406 apache \u5c31\u6b63\u5e38\uff0c\u8fd9\u662f\u5947\u602a\u7684\u70b9\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : yongliu <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @guanyujia5444 #34 \u540e\u7aef\u6ca1\u6709\u65e5\u5fd7\u6253\u5370\u5417\uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Acoffice <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4e5f\u53ef\u80fd\u662f nginx \u672c\u8eab\u7684\u95ee\u9898,\u6362\u4e2a nginx \u7248\u672c\u8bd5\u8bd5. <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : whorusq <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @guanyujia5444 \u770b\u6765\u6211\u7684 nginx \u7248\u672c\u8be5\u5347\u7ea7\u4e00\u6ce2\u4e86 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : whorusq <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    403 \u8fd9\u4e2a\u9519\u8bef\u63d0\u793a\u662f\u6743\u9650\u95ee\u9898\u5e94\u8be5\u6ca1\u4ec0\u4e48\u4e89\u8bae\uff0c\u6211\u89c9\u5f97\u8fd8\u662f\u4ece\u5404\u65b9\u9762\u7684\u6743\u9650\u68c0\u67e5\u4e00\u904d\uff0c\u5305\u62ec\u5404\u7ea7\u6587\u4ef6\u3001\u6587\u4ef6\u5939\u3001\u76f8\u5173\u7528\u6237\u7b49
    \u4e4b\u524d\u9047\u5230\u8fc7\u5b50\u7ea7\u76ee\u5f55\u770b\u7740\u6743\u9650\u4e00\u70b9\u95ee\u9898\u6ca1\u6709\uff0c\u4f46\u662f\u7236\u7ea7\u76ee\u5f55\u5374\u6ca1\u6743\u9650\uff0c\u5bfc\u81f4\u540c\u6837\u63d0\u793a 403 \u7684\u95ee\u9898\uff0c\u4e5f\u6298\u817e\u5f88\u957f\u65f6\u95f4 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n","protected":false},"excerpt":{"rendered":"

    \u5173\u4e8e nginx \u53cd\u5411\u4ee3\u7406\uff0c HT…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/167273"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=167273"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/167273\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=167273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=167273"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=167273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}