server {
      listen 443 ssl;
      server_name  www.test.com;
      ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
      ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #加密算法
      
    location /testapi/ {
            proxy_pass https://www.test2.cn/testapi/;
            proxy_set_header Host $proxy_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_ssl_session_reuse off;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
   
   ssl_certificate      test.com.pem;
   ssl_certificate_key  test.com.key;
   ssl_session_cache    shared:SSL:1m;
   ssl_session_timeout  5m;
   ssl_prefer_server_ciphers  on;
   

 

posted on 2022-10-24 17:08  枫叶飘零黄昏血  阅读(1088)  评论(0编辑  收藏  举报