{"id":1554,"date":"2020-07-08T23:30:45","date_gmt":"2020-07-08T14:30:45","guid":{"rendered":"https:\/\/oboki.net\/?p=1554"},"modified":"2020-07-27T23:31:43","modified_gmt":"2020-07-27T14:31:43","slug":"nginx-reverse-proxy-ssl-offload-%ec%84%a4%ec%a0%95","status":"publish","type":"post","link":"https:\/\/oboki.net\/workspace\/system\/linux\/nginx-reverse-proxy-ssl-offload-%ec%84%a4%ec%a0%95\/","title":{"rendered":"[nginx] reverse proxy &#038; SSL offload \uc124\uc815"},"content":{"rendered":"<h2>nginx \uc124\uce58<\/h2>\n<pre><code class=\"language-bash\">curl https:\/\/nginx.org\/download\/nginx-1.19.1.tar.gz | tar xz\ncd nginx-1.19.1 &amp;&amp; .\/configure --prefix=\/usr\/local\/nginx --with-http_ssl_module\nmake &amp;&amp; make install<\/code><\/pre>\n<h2>reverse proxy \ubc0f SSL offload \uc124\uc815<\/h2>\n<p><code>cd \/usr\/local\/nginx<\/code> \uacbd\ub85c\ub85c \uc774\ub3d9\ud574\uc11c <code>vim conf\/airflow.conf<\/code> \uc124\uc815\ud30c\uc77c\uc744 \ub2e4\uc74c\uacfc \uac19\uc774 \ub9cc\ub4e4\uc5b4\uc900\ub2e4.<\/p>\n<pre><code class=\"language-conf\">events {\n    use epoll;\n    multi_accept on;\n    worker_connections 4096;\n}\n\nhttp {\n    server {\n        listen       80;\n        server_name  airflow.centos.vm.oboki.net;\n        root         html;\n\n        location \/ {\n            return 301 https:\/\/airflow.centos.vm.oboki.net$request_uri;\n        }\n    }\n\n    server {\n        listen       443 ssl;\n        server_name  airflow.centos.vm.oboki.net\n        root         html;\n\n        ssl_certificate      \/usr\/local\/cert\/airflow.centos.vm.oboki.net.crt;\n        ssl_certificate_key  \/usr\/local\/cert\/airflow.centos.vm.oboki.net.key;\n        ssl_session_timeout  5m;\n        ssl_protocols  SSLv2 SSLv3 TLSv1 TLSv1.2;\n        ssl_ciphers  HIGH:!aNULL:!MD5;\n        ssl_prefer_server_ciphers   on;\n\n        location ~ \/\\.ht {\n            deny  all;\n        }\n\n        location \/ {\n            proxy_pass http:\/\/localhost:8080;\n            proxy_set_header Host $host;\n            proxy_redirect off;\n            proxy_http_version 1.1;\n            proxy_set_header Upgrade $http_upgrade;\n            proxy_set_header Connection &quot;upgrade&quot;;\n        }\n    }\n}<\/code><\/pre>\n<h2>nginx \uc2e4\ud589<\/h2>\n<pre><code class=\"language-bash\">sbin\/nginx -c .\/conf\/airflow.conf -p .<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>nginx \uc124\uce58 curl https:\/\/nginx.org\/download\/nginx-1.19.1.tar.gz | tar xz cd nginx-1.19.1 &amp;&amp; .\/configure &#8211;prefix=\/usr\/local\/nginx &#8211;with-http_ssl_module make &amp;&amp; make install reverse proxy \ubc0f SSL offload \uc124\uc815 cd \/usr\/local\/nginx \uacbd\ub85c\ub85c \uc774\ub3d9\ud574\uc11c vim conf\/airflow.conf \uc124\uc815\ud30c\uc77c\uc744 \ub2e4\uc74c\uacfc \uac19\uc774 \ub9cc\ub4e4\uc5b4\uc900\ub2e4. events { use epoll; multi_accept on; worker_connections 4096; } http { server { listen 80; server_name airflow.centos.vm.oboki.net; root html; location \/ { [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,19],"tags":[],"class_list":["post-1554","post","type-post","status-publish","format-standard","hentry","category-linux","category-network"],"_links":{"self":[{"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/posts\/1554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/comments?post=1554"}],"version-history":[{"count":0,"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/posts\/1554\/revisions"}],"wp:attachment":[{"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/media?parent=1554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/categories?post=1554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oboki.net\/workspace\/wp-json\/wp\/v2\/tags?post=1554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}