Nginx upstream https not proxing other pages(?)

Yuriy Medvedev medvedev.yp at gmail.com
Thu Jun 23 10:19:05 UTC 2016


My config wotk fine with ssl proxy pass

location / {

      proxy_pass https://backend;

      proxy_redirect          off;

      proxy_next_upstream error timeout invalid_header http_502 http_503
http_504;

      proxy_connect_timeout   120s;

      proxy_set_header Host $host;

      proxy_set_header X-Real-IP $remote_addr;

      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      proxy_set_header X-Forwarded-Proto $scheme;

    }

2016-06-23 12:26 GMT+03:00 romkaltu <nginx-forum at forum.nginx.org>:

> Having odd situation, even don't know how to search in google, how to
> describe it...Anyway I'm using Nginx and proxy'ing https traffic to
> upstream
> server. Everything is fine with http (with others domains) but can't get it
> to work with https...
>
> Here is my nginx config
>
> upstream umarket { server 192.168.2.11:443; }
>
> # Upstream
> server {
>     listen 80;
>     listen 443 ssl http2;
>     server_name  umarket.lt;
>
>     error_log  /var/log/nginx/umarket.lt_error.log;
>
>     add_header Strict-Transport-Security "max-age=31536000";
>
>     ssl on;
>     ssl_certificate
> /etc/nginx/ssl/umarket.lt/umarket_lt_chained.crt;
>     ssl_certificate_key         /etc/nginx/ssl/umarket.lt/server.key;
>     ssl_session_cache           builtin:1000 shared:SSL:10m;
>     ssl_protocols               TLSv1 TLSv1.1 TLSv1.2;
>     ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
>     ssl_prefer_server_ciphers   on;
>
>     proxy_redirect              off;
>     proxy_buffering             off;
>     proxy_set_header            Host $host;
>     proxy_set_header            X-Real-IP $remote_addr;
>     proxy_set_header            X-Forwarded-For $proxy_add_x_forwarded_for;
>     proxy_set_header            X-Forwarded-Proto https;
>     proxy_next_upstream         error timeout invalid_header http_500
> http_502 http_503 http_504;
>     proxy_ssl_session_reuse     off;
>     proxy_cache_bypass          $http_secret_header;
>     proxy_ignore_headers        Set-Cookie;
>     proxy_ignore_headers        Cache-Control;
>
>     location = / {
>
>         proxy_pass  $scheme://umarket;
>
>     }
>
> }
>
> Here screenshot whats happening...http://i.stack.imgur.com/3CQc0.png
>
> Posted at Nginx Forum:
> https://forum.nginx.org/read.php?2,267806,267806#msg-267806
>
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160623/f711c347/attachment.html>


More information about the nginx mailing list