不看会后悔的nginx代理操作

yum -y update
yum -y install gcc pcre pcre-devel zlib zlib-devel openssl openssl-devel patch git

mkdir /usr/local/nginx_modules
cd /usr/local/nginx_modules
git clone https://github.com/chobits/ngx_http_proxy_connect_module.git

wget http://nginx.org/download/nginx-1.19.8.tar.gz
tar -zxvf nginx-1.19.8.tar.gz
cd nginx-1.19.8/

patch -p1 < /usr/local/nginx_modules/ngx_http_proxy_connect_module/patch/proxy_connect_rewrite_1018.patch

groupadd www
useradd -g www www

./configure \
--user=www \
--group=www \
--prefix=/usr/local/nginx \
--with-http_ssl_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-threads \
--add-module=/usr/local/nginx_modules/ngx_http_proxy_connect_module

make

make install

cd /usr/local/nginx
// 检查配置文件
./sbin/nginx -t

cd /usr/local/nginx
./sbin/nginx

ps -ef|grep nginx  // 检查是否启动成功

./sbin/nginx -s stop // 停止
./sbin/nginx -s reload // 重新启动

user  www;
worker_processes  4;


events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    server_names_hash_bucket_size 128;
    client_max_body_size    20m;
    client_body_buffer_size 256k;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    sendfile on;
    tcp_nopush     on;
    keepalive_timeout 60;
    tcp_nodelay on;
    server {
        listen 9080;

        resolver 114.114.114.114 valid=60s ipv6=off;
        resolver_timeout 5s;

        proxy_connect;
        proxy_connect_connect_timeout  10s;
        proxy_connect_read_timeout     10s;
        proxy_connect_send_timeout     10s;

        location / {
            set $forbiden  Y;

            if ($host =  "www.baidu.com" ) {
                set $forbiden  N;
            }

            if ( $forbiden = Y){
                 return 403;
            }
            proxy_set_header Host $host;
            proxy_pass http://$host;
        }
    }
}

 export http_proxy=http://$proxy_ip:$proxy_port
 export https_proxy=http://$proxy_ip:$proxy_port