KBEngine使用Nginx反向代理支持WSS协议

目前很多H5的游戏需要用https和wss协议,特别是腾讯微信小游戏必须走https协议,而https协议的网站必须用websocket的wss协议才能实现连接.

具体Nginx怎么实现的websocket就不再具体介绍,网络上有很多相关的文章 .

这里只给出我的nginx配置:

1#----------KBEngine登录(loginapp)服务器-----------------
2#这个下面有用到,xxx可以根据需要改掉
3upstream stream_xxx_loginapp{
4    server 127.0.0.1:20013;
5}
6server {
7    listen       30013;
8    server_name  example.loginapp;#根据自己的域名改
9
10    ssl on;
11    ssl_certificate /app/nginx1.14.0/certificate/xxx.crt;#ssl证书
12    ssl_certificate_key /app/nginx1.14.0/certificate/xxx.key;#ssl证书key
13    ssl_session_timeout 5m;
14    ssl_session_cache shared:SSL:50m;
15    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
16    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
17    ssl_prefer_server_ciphers on;
18
19    error_log /data/logs/nginx/error.xxx.log;#错误信息日志
20    access_log /data/logs/nginx/xxx.log main;#访问日志
21
22    location / {
23        proxy_pass http://stream_xxx_loginapp;#上面的upstream有注释,和上面保持一致
24        proxy_read_timeout 300s;
25
26        proxy_set_header Host $host;
27        proxy_set_header X-Real-IP $remote_addr;
28        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
29
30        proxy_http_version 1.1;
31        proxy_set_header Upgrade $http_upgrade;
32        proxy_set_header Connection $connection_upgrade;
33    }
34}
35
36#----------KBEngine登录(baseapp)服务器-----------------
37upstream stream_xxx_baseapp{
38    server 127.0.0.1:20015;
39}
40server {
41    listen       30015;
42    server_name  example.baseapp;#根据自己的域名改
43
44    ssl on;
45    ssl_certificate /app/nginx1.14.0/certificate/xxx.crt;
46    ssl_certificate_key /app/nginx1.14.0/certificate/xxx.key;
47    ssl_session_timeout 5m;
48    ssl_session_cache shared:SSL:50m;
49    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
50    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
51    ssl_prefer_server_ciphers on;
52
53	error_log /data/logs/nginx/error.proxy.fly.baseapp.log;
54    access_log /data/logs/nginx/proxy.fly.baseapp.log main;
55
56    location / {
57        proxy_pass http://stream_xxx_baseapp;
58        proxy_read_timeout 300s;
59
60        proxy_set_header Host $host;
61        proxy_set_header X-Real-IP $remote_addr;
62        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
63
64        proxy_http_version 1.1;
65        proxy_set_header Upgrade $http_upgrade;
66        proxy_set_header Connection $connection_upgrade;
67    }
68}