skn писал(а):
http://www.sysoev.ru/nginx/docs/http/ngx_http_realip_module.html - изучали?
Спасибо за ссылку - изучил. Пересобрал и переустановил nginx. В логах все тоже самое...
Делал по вики. Вот конфиг:
#user nobody;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] $status '
'"$request" $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
sendfile on;
keepalive_timeout 65;
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
gzip on;
server {
listen 443;
server_name cabinet.provider.net;
server_tokens off;
ssl on;
ssl_certificate ssl/server.crt;
ssl_certificate_key ssl/server.key;
# ssl_session_timeout 5m;
# ssl_protocols SSLv2 SSLv3 TLSv1;
# ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
# ssl_prefer_server_ciphers on;
charset windows-1251;
client_max_body_size 10m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Connection close;
proxy_read_timeout 60;
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
proxy_intercept_errors on;
rewrite ^/$ /web/cabinet last;
rewrite ^/(.*)$ /web/$1 last;
location ~ /\.ht {
deny all;
}
location /web/executer {
deny all;
}
location /web/dealer {
deny all;
}
location /web/idealer {
deny all;
}
location ~ ^.*/web/mpsexecuter {
deny all;
}
location ~ ^.*/web/webexecuter {
deny all;
}
location /web {
rewrite ^/web/cabinet$ /bgbilling/webexecuter break;
rewrite ^/web/balance$ /bgbilling/balance_sender break;
rewrite ^/web/error$ /bgbilling/pubexecuter break;
proxy_pass
http://BILLING-IP:8080/bgbilling; proxy_redirect
http://BILLING-IP:8080/bgbilling https://cabinet.provider.net/web; }
location / {
#root /usr/local/nginx/html;
rewrite ^/(.*)$
https://cabinet.provider.net/web/cabinet permanent;
index index.html;
}
error_page 404 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/local/nginx/html;
}
}
server {
listen 80 default;
server_name cabinet.provider.net;
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
server_tokens off;
charset windows-1251;
client_max_body_size 10m;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Connection close;
proxy_read_timeout 60;
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
proxy_intercept_errors on;
rewrite ^/$ /web/cabinet last;
rewrite ^/(.*)$ /web/$1 last;
location ~ /\.ht {
deny all;
}
location /web/executer {
deny all;
}
location /web/dealer {
deny all;
}
location /web/idealer {
deny all;
}
location ~ ^.*/web/mpsexecuter {
deny all;
}
location ~ ^.*/web/webexecuter {
deny all;
}
location /web {
rewrite ^/web/cabinet$ /bgbilling/webexecuter break;
rewrite ^/web/balance$ /bgbilling/balance_sender break;
rewrite ^/web/error$ /bgbilling/pubexecuter break;
proxy_pass
http://BILLING-IP:8080/bgbilling; proxy_redirect
http://BILLING-IP:8080/bgbilling http://cabinet.provider.net/web; }
location / {
#root /usr/local/nginx/html;
rewrite ^/(.*)$
http://cabinet.provider.net/web/cabinet permanent;
index index.html;
}
error_page 404 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/local/nginx/html;
}
# location / {
# rewrite ^/(.*)$
https://cabinet.provider.net/$1 permanent;
# allow all;
# }
}
}
Вход
Регистрация
FAQ
Поиск
(логирование запросов, проверка по адресу в модуле карт).
