unixforum.org

Код: Выделить всё

worker_processes  2;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  65;

    gzip                on;
    gzip_proxied        any;
    gzip_min_length     1100;
    gzip_http_version   1.0;
    gzip_buffers        4 8k;
    gzip_comp_level     9;
    gzip_types          text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript application/json;


server {
    listen 80;
    return 301 https://$host$request_uri;
}

server {

    listen 11.22.33.44:443;
    server_name domain.ru;
    set $backend 192.168.3.11;

    ssl_certificate           /etc/nginx/ssl/domain.crt;
    ssl_certificate_key       /etc/nginx/ssl/domain.key;

    ssl on;
    ssl_session_cache  builtin:1000  shared:SSL:10m;
    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
    ssl_prefer_server_ciphers on;

    access_log            /var/log/nginx/domain.access.log;

    location / {

      proxy_set_header        Host $host;
      proxy_set_header        X-Real-IP $remote_addr;
      proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header        X-Forwarded-Proto $scheme;

        # WebSocket support (nginx 1.4)
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

      # Fix the “It appears that your reverse proxy set up is broken" error.
      proxy_pass          http://192.168.3.11;
      proxy_read_timeout  90;

    }
  }



}

Код: Выделить всё

2016/07/02 13:35:58 [error] 14140#0: *5263764 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: 168.88.234.30, server: domain.ru, request: "GET /signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=p5OoAOtWZ4CfsbESCROtLNxroXjvJJq3JCDvYZOphbVK0mcngMy8hLZQL%2FbKodHB0phsoo3yk4BfQxluPprLHlsutczFRbjBwhL0zNaW0RnFM%2Fug1pi7LAA%2FaWVFdGEB&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=9 HTTP/1.1", upstream: "http://192.168.3.11:80/signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=p5OoAOtWZ4CfsbESCROtLNxroXjvJJq3JCDvYZOphbVK0mcngMy8hLZQL%2FbKodHB0phsoo3yk4BfQxluPprLHlsutczFRbjBwhL0zNaW0RnFM%2Fug1pi7LAA%2FaWVFdGEB&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=9", host: "domain.ru"
2016/07/02 13:37:00 [error] 14140#0: *5266282 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: 41.132.102.144, server: domain.ru, request: "GET /signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=MNGht4oa1hecz0zN3jdICPCN6aYmjJD3LAWBThpoipRrRuHh%2FwvkEFSUX1nfghIS2RIIO9nGuvDn0j85oJubCHqK1Jort%2F9mvc1H8JF6Szsn2DQryJ5A6yQYs8CcCBG2&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=4 HTTP/1.1", upstream: "http://192.168.3.11:80/signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=MNGht4oa1hecz0zN3jdICPCN6aYmjJD3LAWBThpoipRrRuHh%2FwvkEFSUX1nfghIS2RIIO9nGuvDn0j85oJubCHqK1Jort%2F9mvc1H8JF6Szsn2DQryJ5A6yQYs8CcCBG2&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=4", host: "domain.ru"
2016/07/02 13:37:30 [error] 14141#0: *5269683 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: 41.135.54.153, server: domain.ru, request: "GET /signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=BUf1wKNdHrAcYJDMtHAhMyQE8AViWnxjcKJAv8ECCVSqrHRofysmGes2JAPHRvdwBsemFzSNXeiAI2rAIRQFJKnVeldSlKQTXGHa8GgvcdmrFBpCm5QLHEbl4%2Fkqf%2Bxc&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=0 HTTP/1.1", upstream: "http://192.168.3.11:80/signalr/connect?transport=webSockets&clientProtocol=1.5&connectionToken=BUf1wKNdHrAcYJDMtHAhMyQE8AViWnxjcKJAv8ECCVSqrHRofysmGes2JAPHRvdwBsemFzSNXeiAI2rAIRQFJKnVeldSlKQTXGHa8GgvcdmrFBpCm5QLHEbl4%2Fkqf%2Bxc&connectionData=%5B%7B%22name%22%3A%22globalhub%22%7D%5D&tid=0", host: "domain.ru"