使用 Nginx 在本地反向代理 Github

server {
	resolver 127.0.0.1;
	listen 127.0.0.2:443 ssl;
	http2 on;
	server_name github.com;
	ssl_certificate /etc/nginx/ssl/github.com.pem;
	ssl_certificate_key /etc/nginx/ssl/github.com-key.pem;
	location / {
		set $backend "github.com";
		proxy_pass https://$backend;
		proxy_ssl_server_name on;
		proxy_ssl_verify on;
		proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
		proxy_ssl_name $backend;
		proxy_set_header Host $backend;
		proxy_buffer_size 32k;
		proxy_buffers 4 32k;
		proxy_connect_timeout 2s;
		error_page 502 504 = @fallback;
	}
	location @fallback {
		proxy_pass https://20.27.177.113;
		proxy_ssl_server_name off;
		proxy_ssl_verify on;
		proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
		proxy_ssl_name $backend;
		proxy_set_header Host $backend;
		proxy_buffer_size 32k;
		proxy_buffers 4 32k;
	}
}

原理参考： https://zhuanlan.zhihu.com/p/411165246

Nginx反向代理配置参考： https://nginx.org/en/docs/http/ngx_http_proxy_module.html

Nginx 对外的所有网络连接皆使用公用电信网提供的国际出入口信道，未对流量进行额外加密，也未建立任何逻辑上的新信道。