Nginx的WebSocket反向代理实践过程

Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Key: <随机值>
Sec-WebSocket-Version: 13

location /chat/ {
    # 将请求转发到后端 WebSocket 服务
    proxy_pass http://backend;

    # 使用 HTTP/1.1 协议，以支持 Upgrade
    proxy_http_version 1.1;

    # 将客户端请求中的 Upgrade 与 Connection 头转发给后端
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}

proxy_http_version 1.1

proxy_set_header Upgrade $http_upgrade

proxy_set_header Connection “upgrade”

# 将是否存在 Upgrade 头映射成变量
map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
    ...

    location /chat/ {
        proxy_pass http://backend;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}

proxy_read_timeout 3600s;   # 将超时时间提升到 1 小时

http {
    map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
    }

    upstream backend {
        server 127.0.0.1:8080;    # 后端 WebSocket 服务地址
        # 可根据实际情况添加多台服务器，实现负载均衡
    }

    server {
        listen 80;
        server_name example.com;

        # 静态资源处理（可选）
        location /static/ {
            root /var/www/html;
        }

        # WebSocket 代理入口
        location /chat/ {
            proxy_pass http://backend;
            proxy_http_version 1.1;
            proxy_set_header   Upgrade $http_upgrade;
            proxy_set_header   Connection $connection_upgrade;

            # 转发客户端真实 IP（可选）
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;

            # 超时配置
            proxy_read_timeout  3600s;
            proxy_send_timeout  3600s;
        }
    }
}