WSS代理

需要代理的wss地址

wss://xy3jsdecoder.ys7.com:20006 外网地址无法直接访问

内网服务器地址 192.168.10.21，

中转服务器地址   test.yunytre.com，

中转服务器nginx配置wss代理，代理  wss://xy3jsdecoder.ys7.com:20006

 server {
          listen 20006 ssl;
          server_name test.yunytre.com;
          ssl_certificate /usr/local/ssl/test.yunytre.com.pem;
          ssl_certificate_key /usr/local/ssl/test.yunytre.com.key;
          ssl_session_timeout 5m;
          ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
          ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
          ssl_prefer_server_ciphers on;
      
          location / { 

            proxy_pass https://xy3jsdecoder.ys7.com:20006;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;##此处Upgrade注意大小写
            proxy_set_header Connection "Upgrade";
            proxy_set_header Remote_addr $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_connect_timeout 15s;
            proxy_send_timeout 3600s;
            proxy_read_timeout 3600s;
        }

生成的中转服务器的代理wss地址为

wss://test.yunytre.com:20006

内网服务器nginx配置，代理 wss://test.yunytre.com:20006

 server {
        listen       80;
        server_name  localhost;

     
        location / {
            root /opt/platform/web/;
            index  index.html index.htm;
         
        }

         location /prod-api/{
	         proxy_pass http://localhost:8080/;
	     }	
	
         
          location /ws { 
            proxy_pass https://test.yunytre.com:20006;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;##此处Upgrade注意大小写
            proxy_set_header Connection "Upgrade";
            proxy_set_header Remote_addr $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_connect_timeout 15s;
            proxy_send_timeout 3600s;
            proxy_read_timeout 3600s;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }

生成的内网的ws地址为   wss://192.168.10.21:80/ws  必须是SSL

内网连接 wss://192.168.10.21:80/ws即可