nginx在绝大数的场景中我们使用其用于做web中间件或反向代理使用，但是nginx实际上也提供了正向代理的功能。下面我们来进行nginx正向代理配置操作，以便大家能够掌握nginx正向代理配置方法。
目录
第一步：获取nginx正向代理模块
# git clone https://github.com/chobits/ngx_http_proxy_connect_module
第二步：下载nginx源码包
# wget http://nginx.org/download/nginx-1.9.12.tar.gz
# tar xf nginx-1.9.12.tar.gz
第三步：通过补丁方法把上述下载的正向代理模块导入到nginx模块存储目录
# cd nginx-1.9.12/
# patch -p1 < /root/ngx_http_proxy_connect_module/patch/proxy_connect.patch
第四步：编译安装nginx
# yum -y install openssl-devel zlib-devel prce-devel
# ./configure --add-dynamic-module=/root/ngx_http_proxy_connect_module
# make && make install
第五步：配置所允许通过代理主机的主机列表
# cat /usr/local/nginx/conf/client-allow.conf
allow 127.0.0.1;
allow 192.168.216.1;
allow 192.168.216.185;
第六步：修改nginx配置文件
# cat /usr/local/nginx/conf/nginx.conf
#usernobody;
worker_processes1;
#error_loglogs/error.log;
#error_loglogs/error.lognotice;
#error_loglogs/error.loginfo;
#pidlogs/nginx.pid;
load_module /usr/local/nginx/modules/ngx_http_proxy_connect_module.so; #位置注意
events {
worker_connections1024;
}
http {
include mime.types;
default_typeapplication/octet-stream;
#log_formatmain$remote_addr - $remote_user [$time_local] "$request"
#$status $body_bytes_sent "$http_referer"
#"$http_user_agent" "$http_x_forwarded_for";
#access_loglogs/access.logmain;
sendfileon;
#tcp_nopush on;
#keepalive_timeout0;
keepalive_timeout65;
#gzipon;
server {
listen 8080; #代理端口
resolver119.29.29.29; #域名解析服务器
proxy_connect;
proxy_connect_allow 443 563;
proxy_connect_connect_timeout 10s;
proxy_connect_read_timeout10s;
proxy_connect_send_timeout10s;
location / {
proxy_pass;
proxy_set_header Host $host;
}
include client-allow.conf; #主机白名单
deny all; #除了主机白名单中的主机，拒绝所有
#error_page404/404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504/50x.html;
location = /50x.html {
root html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ .php$ {
#proxy_pass ;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ .php$ {
#root html;
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_indexindex.php;
#fastcgi_paramSCRIPT_FILENAME/scripts$fastcgi_script_name;
#includefastcgi_params;
#}
# deny access to .htaccess files, if Apaches document root
# concurs with nginxs one
#
#location ~ /.ht {
#denyall;
#}
}
# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
#listen 8000;
#listen somename:8080;
#server_namesomenamealiasanother.alias;
#location / {
#root html;
#indexindex.html index.htm;
#}
#}
# HTTPS server
#
#server {
#listen 443 ssl;
#server_namelocalhost;
#ssl_certificatecert.pem;
#ssl_certificate_keycert.key;
#ssl_session_cacheshared:SSL:1m;
#ssl_session_timeout5m;
#ssl_ciphersHIGH:!aNULL:!MD5;
#ssl_prefer_server_cipherson;
#location / {
#root html;
#indexindex.html index.htm;
#}
#}
}
第七步：检查并启动nginx服务
# /usr/local/nginx/sbin/nginx -t #检查配置文件
# /usr/local/nginx/sbin/nginx # 启动服务
# /usr/local/nginx/sbin/nginx -s stop #关闭
# /usr/local/nginx/sbin/nginx -s reload #重启加载配置文件
# ss -anput | grep ":8080" #检查端口
第八步：被代理主机配置
第九步：被代理主机验证nginx正向代理可用性
# ss -anput | grep ":8080"
tcpLISTEN 0128 *:8080*:* users:(("nginx",pid=19515,fd=6),("nginx",pid=19514,fd=6))
tcpESTAB00192.168.216.184:8080 192.168.216.185:35718 users:(("nginx",pid=19515,fd=11))
tcpESTAB00192.168.216.184:8080 192.168.216.185:35712 users:(("nginx",pid=19515,fd=3))
原作者：黑马程序员
原平台：黑马程序员官网
原链接：五分钟9步搞定nginx正向代理配置方法