nginx 配置 wss

要配置Nginx支持WSS（安全的WebSocket），可以按照以下步骤进行配置。

首先，在nginx.conf文件中添加如下配置信息：

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}

upstream wsbackend {
    server ip1:port1;
    server ip2:port2;
    keepalive 1000;
}

server {
    listen 20038 ssl;
    server_name localhost;
    ssl_certificate /usr/local/nginx-1.17.8/conf/keys/binghe.com.pem;
    ssl_certificate_key /usr/local/nginx-1.17.8/conf/keys/binghe.com.key;
    ssl_session_timeout 20m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_verify_client off;

    location / {
        proxy_http_version 1.1;
        proxy_pass http://wsbackend;
        proxy_redirect off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_read_timeout 3600s;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}

以上配置将监听端口20038，并启用SSL以支持安全连接。同时，配置了代理转发到后端WebSocket服务器。

注意，需要根据实际情况将ip1、port1、ip2和port2替换为后端WebSocket服务器的IP地址和端口号。此外，还需要将ssl_certificate和ssl_certificate_key的路径替换为实际的SSL证书和私钥路径。

配置完成后，重启Nginx服务即可生效。这样，Nginx就成功配置了WSS支持。<span class="em">1</span><span class="em">2</span><span class="em">3</span><span class="em">4</span>