ehang-io / nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发,可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面,内网dns解析、内网socks5代理等等……,并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.
https://ehang.io/nps/documents
GNU General Public License v3.0
29.96k stars 5.4k forks source link

域名代理模式--Nginx报错502 #983

Open Androad opened 2 years ago

Androad commented 2 years ago

Describe the bug 使用域名代理模式按照官方文档配置Nginx +http_proxy _port

本地https 网站报502
其他http网站都正常、、

nps配置档:

HTTP(S) proxy port, no startup if empty

http_proxy_ip=0.0.0.0 http_proxy_port=9999 https_proxy_port= https_just_proxy=true

default https certificate setting

https_default_cert_file=conf/server.pem https_default_key_file=conf/server.key

nginx: server { listen 443 ssl http2;

listen [::]:443 ssl http2;

    server_name xx.com ;
    index index.html index.htm index.php default.html default.htm default.php;
    root  /home/wwwroot/xx.com;

    ssl_certificate /usr/local/nginx/conf/ssl/xx.com/fullchain.cer;
    ssl_certificate_key /usr/local/nginx/conf/ssl/xx.com/vm.igee.ml.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    ssl_session_cache builtin:1000 shared:SSL:10m;
    # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

    location / {
    proxy_set_header Host  $http_host;
    proxy_pass http://127.0.0.1:9999;
    }

    access_log off;
}

Additional context 配置的域名代理 访问xx.com代理本地Https网站报错。 其他代理本地Http都是正常,,,

502 Bad Gateway nginx

liyehuicn commented 1 year ago

我的也是这个原因,不知道怎么解决

baiyz0825 commented 1 year ago

一样的问题