nginx负载均衡转发https

A服务器做负载转发到  B，C两台服务器 ；

这时候要添加https域名，则以下是A服务器的nginx配置

 

upstream backend {
server ip;
server ip2;
}

 

server {
listen 80;
listen 443 ssl;
server_name localhost;

#这个注释掉才能访问http端口
#ssl on;
ssl_certificate /etc/nginx/conf.d/cert/1.crt;
ssl_certificate_key /etc/nginx/conf.d/cert/2.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;

location / {
add_header X-Content-Type-Options nosniff;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-NginX-Proxy true;
proxy_hide_header X-Powered-By;
proxy_hide_header Vary;

proxy_pass http://backend;
proxy_redirect off;
}

}