# cat hosts.conf #app调试 upstream gl-appsrv_pools { server 10.1x0.2xx.1x0:8040; server 10.x9x.20.208:8040; check interval=3000 rise=2 fall=3 timeout=2000 type=http; check_http_send "GET /chk/chk.html HTTP/1.0 Host jxxk.xxxxx.com "; } # server { listen 80 default backlog=2048; listen 443 ssl; server_name jxxk.xxxxx.com; #ssl on; ssl_certificate /etc/cert/xxxxx3140913.pem; ssl_certificate_key /etc/cert/xxxx3140913.key; #ssl_session_cache shared:SSL:1m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_protocols SSLv2 SSLv3 TLSv1; ssl_protocols TLSv1.2 TLSv1.1; #ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; ssl_prefer_server_ciphers on; location / { proxy_pass http://gl-appsrv_pools; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /nstatus { check_status; access_log off; allow xx.10x.1x.2x;#可以允许多个ip多我allow ip1; allow ip2; deny all; } } #其中/chk/chk.html 是在/data/apps/app-xxxx-test/webapps/下面的