反向代理DDNS域名

开头

网友在家里开了个emby影视站，使用DDNS域名访问

但是我家的网络、健身房的网络、流量卡都被跨网qos了，导致访问异常慢

于是我想到了在他网站的前面用另一个域名就做一层转发，就可以实现三网直连了

正确配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  resolver 8.8.8.8 114.114.114.114 valid=10s;
  set $target "xxx";

  location / {
    proxy_pass https://$target:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}

错误配置

我一开始就用我常用的方式进行转发，发现好像不能作用于DDNS域名

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  location / {
    proxy_pass https://xxx:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}