正向代理访问非80端口的服务

    1. FROM centos:7
    3. ENV TZ=Asia/Shanghai
    5. RUN cd /etc/yum.repos.d \
    6.     && curl -O http://mirrors.aliyun.com/repo/Centos-7.repo \
    7.     && yum makecache \
    8.     && yum -y install gcc g++ make tar openssl openssl-devel pcre-devel pcre rpm-build rpmdevtools lua lua-devel  
    10. # https://openresty.org/download/openresty-1.15.8.3.tar.gz
    11. COPY openresty-1.15.8.3.tar.gz /opt
    12. # https://github.com/chobits/ngx_http_proxy_connect_module
    13. COPY ngx_http_proxy_connect_module.tgz /opt
    15. RUN cd /opt && tar xaf openresty-1.15.8.3.tar.gz && tar xaf ngx_http_proxy_connect_module.tgz \
    16.     && cd /opt/openresty-1.15.8.3 \
    17.     && ./configure --prefix=/etc/openresty --with-http_stub_status_module --with-http_sub_module --with-http_auth_request_module --with-http_addition_module --add-module=/opt/ngx_http_proxy_connect_module \
    18.     && patch -d build/nginx-1.15.8/ -p 1 < /opt/ngx_http_proxy_connect_module/patch/proxy_connect_rewrite_101504.patch \
    19.     && make -j "$(nproc)" && make install \
    20.     && mkdir -p /etc/openresty/nginx/conf/conf.d \
    21.     && ln -s /etc/openresty/nginx/sbin/nginx /usr/sbin/
    23. EXPOSE 80
    25. # vi nginx.conf: include /etc/openresty/nginx/conf/conf.d/*.conf
    26. VOLUME /etc/openresty/nginx/conf/conf.d
    28. CMD ["nginx", "-g", "daemon off;"]

    /etc/openresty/nginx/conf/conf.d/acdiost.conf

    1. server {
    2.   listen                         80;
    3.   # dns resolver used by forward proxying
    4.   resolver                       8.8.8.8;
    5.   # forward proxy for CONNECT request
    6.   proxy_connect;
    7.   proxy_connect_allow            all;
    8.   proxy_connect_connect_timeout  10s;
    9.   proxy_connect_read_timeout     10s;
    10.   proxy_connect_send_timeout     10s;
    12.   # forward proxy for non-CONNECT request
    13.   location / {
    14.     if ($http_host ~ "(:(\d){5})$"){
    15.           set_by_lua $port "
    16.         local host = ngx.req.get_headers()[\"host\"];
    17.         local port = string.sub(host,-5);
    18.           return port ";
    19.         set $passport $port ;
    20.           proxy_pass http://$host:$passport$request_uri;
    21.     }
    22.     if ($http_host ~ "(:(\d){4})$"){
    23.           set_by_lua $port "
    24.         local host = ngx.req.get_headers()[\"host\"];
    25.         local port = string.sub(host,-4);
    26.           return port ";
    27.         set $passport $port ;
    28.           proxy_pass http://$host:$passport$request_uri;
    29.     }
    30.     if ($http_host ~ "(:(\d){3})$"){
    31.           set_by_lua $port "
    32.         local host = ngx.req.get_headers()[\"host\"];
    33.         local port = string.sub(host,-3);
    34.           return port ";
    35.         set $passport $port ;
    36.           proxy_pass http://$host:$passport$request_uri;
    37.     }
    38.     if ($http_host ~ "(:(\d){2})$"){
    39.           set_by_lua $port "
    40.         local host = ngx.req.get_headers()[\"host\"];
    41.         local port = string.sub(host,-2);
    42.           return port ";
    43.         set $passport $port ;
    44.           proxy_pass http://$host:$passport$request_uri;
    45.     }
    46.     if ($http_host !~ :){
    47.       proxy_pass http://$host$request_uri;
    48.     }
    49.     proxy_pass http://$host;
    50.     proxy_set_header Host $host;
    51.     client_max_body_size 2000m;
    52.     proxy_set_header terminal_id $http_terminal_id;
    53.     proxy_set_header Host $host:$server_port;
    54.     proxy_set_header X_Read_IP $remote_addr;
    55.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    56.     proxy_set_header X-Forwarded-Host $host;
    57.     proxy_set_header X-Forwarded-Server $host;
    58.     proxy_set_header X-Forwarded-Proto $scheme;
    59.   }
    60.   # 测试lua
    61.   location /lua {
    62.     default_type 'text/html';
    63.     content_by_lua 'ngx.say("hello lua")';
    64.   }
    65. }

    测试结果
    image.png
    浏览器配置代理即可。谷歌浏览器需安装插件 Proxy SwitchyOmega