tt's Note

    反向代理DDNS域名

    开头

    网友在家里开了个emby影视站，使用DDNS域名访问

    但是我家的网络、健身房的网络、流量卡都被跨网qos了，导致访问异常慢

    于是我想到了在他网站的前面用另一个域名就做一层转发，就可以实现三网直连了

    正确配置

    server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  resolver 8.8.8.8 114.114.114.114 valid=10s;
  set $target "xxx";

  location / {
    proxy_pass https://$target:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}

    错误配置

    我一开始就用我常用的方式进行转发，发现好像不能作用于DDNS域名

    server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  location / {
    proxy_pass https://xxx:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}