[{"data":1,"prerenderedAt":245},["ShallowReactive",2],{"tag-nginx-1":3},{"title":4,"articles":5,"hot_article":35,"month_arch":94,"total":81,"cover":242},"nginx - 独孤影的博客",[6,18,26],{"id":7,"title":8,"uri":9,"author":10,"tags":11,"created_at":15,"view_count":16,"content":17},83,"nginx upstream DNS解析问题","nginx-upstream-dns-resolve","duguying",[12,13,14],"nginx","upstream","dns","2022-11-14 11:20:44",365,"\u003Cp>最近发现我香港服务器上放置的几个 web 站点经常会偶尔出现无法访问的情况，这个香港服务器上放置的是 trojan 加 nginx，流量从trojan进入，部分转发出去，另外部分是web站点的流量，转发到nginx，从而实现流量代理和web访问。\u003C\u002Fp>\n\n\u003Cp>这个香港节点出现web访问异常，之前也遇到过几次，都是重启nginx就正常了。这次决定仔细看下是什么情况，登陆节点，首先查看trojan日志，发现在正常转发，再看下nginx的日志，如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:27:11 [error] 22#22: *473474 upstream timed out (110: Connection timed out) while connecting to upstream, client: 61.177.173.46, server: 0.0.0.0:22, upstream: "36.36.106.166:23000", bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:27:27 [error] 22#22: *473486 upstream timed out (110: Connection timed out) while connecting to upstream, client: 203.205.141.115, server: 0.0.0.0:22, upstream: "36.36.106.166:23000", bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:28:36 [error] 22#22: *473490 upstream timed out (110: Connection timed out) while connecting to upstream, client: 203.205.141.115, server: 0.0.0.0:22, upstream: "36.36.106.166:23000", bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>2022\u002F11\u002F14 01:29:19 [error] 22#22: *473492 upstream timed out (110: Connection timed out) while connecting to upstream, client: 61.177.173.52, server: 0.0.0.0:22, upstream: "36.36.106.166:23000", bytes from\u002Fto client:0\u002F0, bytes from\u002Fto upstream:0\u002F0\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>发现nginx日志显示有连接超时，于是我决定判断一下是否真的连接不上，telnet\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>➜  trojan git:\u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>master\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan> telnet 36.36.106.166 \u003Cspan style=\"color:#a5d6ff\">23000\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>Trying 36.36.106.166...\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>^C\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>果然连接不上，我web站点配置如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">server\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">listen\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">10110\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">ssl\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http2\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">server_name\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">xxx.duguying.net\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">root\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fusr\u002Fshare\u002Fnginx\u002Fhtml\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">index\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.php\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.html\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.crt\u003C\u002Fspan>; \n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate_key\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.key\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling_verify\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">add_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Strict-Transport-Security\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">"max-age=31536000"\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">location\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002F\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">include\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">git.deny\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">X-Forwarded-For\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$remote_addr\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Host\u003C\u002Fspan>            \u003Cspan style=\"color:#79c0ff\">$http_host\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Upgrade\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$http_upgrade\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Connection\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">"upgrade"\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_pass\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http:\u002F\u002Fjxx.duguying.net:****\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffering\u003C\u002Fspan>    \u003Cspan style=\"color:#79c0ff;font-weight:bold\">off\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffer_size\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffers\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">100\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    }\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>}\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>web站点的流量经香港节点转发到 \u003Ccode class=\"inline-code\">jxx.duguying.net\u003C\u002Fcode> ，dig一下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>➜  ~ dig jxx.duguying.net\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>; <<>> DiG 9.11.5-P4-5.1+deb10u7-Debian <<>> jxx.duguying.net\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; global options: +cmd\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Got answer:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; ->>HEADER\u003Cspan style=\"color:#a5d6ff\"><<- opco\u003C\u002Fspan>de: QUERY, status: NOERROR, id: \u003Cspan style=\"color:#a5d6ff\">25787\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: \u003Cspan style=\"color:#a5d6ff\">0\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; QUESTION SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;jxx.duguying.net.             IN      A\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; ANSWER SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>jxx.duguying.net.      \u003Cspan style=\"color:#a5d6ff\">60\u003C\u002Fspan>      IN      A       222.248.21.219\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Query time: \u003Cspan style=\"color:#a5d6ff\">22\u003C\u002Fspan> msec\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; SERVER: 192.168.1.1#53\u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>192.168.1.1\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; WHEN: 一 11月 \u003Cspan style=\"color:#a5d6ff\">14\u003C\u002Fspan> 11:17:24 CST \u003Cspan style=\"color:#a5d6ff\">2022\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; MSG SIZE  rcvd: \u003Cspan style=\"color:#a5d6ff\">51\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>发现nginx转发的节点居然不是目前upstream域名解析的节点，这说明我upstream域名dns更新了，但是nginx上upstream域名解析没更新。网上查询之后才知道，域名作为upstream，它的解析节点并不会时事更新。解决方案\u003C\u002Fp>\n\n\u003Cp>方案一：每次dns有变化，重启Nginx （最开始出现故障重启nginx恢复就是这种解决方案）\u003Cbr \u002F>\n方案二：使用Nginx Resolver\u003Cbr \u002F>\n方案三：使用 Nginx-upstream-dynamic-server （nginx模块）\u003Cbr \u002F>\n方案四：使用 ngx_upstream_jdomain （nginx模块）\u003C\u002Fp>\n\n\u003Cp>这里介绍一下方案二，添加resolver相关配置，只需要将nginx配置改为如下\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">server\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">listen\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">10110\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">ssl\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http2\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">server_name\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">xxx.duguying.net\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">resolver\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">127\u003C\u002Fspan>\u003Cspan style=\"color:#a5d6ff\">.0.0.1\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">valid=60s\u003C\u002Fspan>;    \u003Cspan style=\"color:#ff7b72\">\u002F\u002F\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">这里设置dns服务器\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#a5d6ff\">resolver_timeout\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">3s\u003C\u002Fspan>;             \u003Cspan style=\"color:#ff7b72\">\u002F\u002F\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">这里设置dns解析超时时间\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#a5d6ff\">root\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fusr\u002Fshare\u002Fnginx\u002Fhtml\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">index\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.php\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">index.html\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.crt\u003C\u002Fspan>; \n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_certificate_key\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002Fdata\u002Fcerts\u002F_.duguying.net.key\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">ssl_stapling_verify\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff;font-weight:bold\">on\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">add_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Strict-Transport-Security\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">"max-age=31536000"\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    \u003Cspan style=\"color:#ff7b72\">location\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">\u002F\u003C\u002Fspan> {\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">include\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">git.deny\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">X-Forwarded-For\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$remote_addr\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Host\u003C\u002Fspan>            \u003Cspan style=\"color:#79c0ff\">$http_host\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Upgrade\u003C\u002Fspan> \u003Cspan style=\"color:#79c0ff\">$http_upgrade\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_set_header\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">Connection\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">"upgrade"\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_pass\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">http:\u002F\u002Fjxx.duguying.net:****\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffering\u003C\u002Fspan>    \u003Cspan style=\"color:#79c0ff;font-weight:bold\">off\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffer_size\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>        \u003Cspan style=\"color:#ff7b72\">proxy_buffers\u003C\u002Fspan> \u003Cspan style=\"color:#a5d6ff\">100\u003C\u002Fspan>  \u003Cspan style=\"color:#a5d6ff\">128k\u003C\u002Fspan>;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    }\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>}\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n",{"id":19,"title":20,"uri":20,"author":10,"tags":21,"created_at":23,"view_count":24,"content":25},33,"网站升级至HTTP2",[22,12],"http2","2015-12-13 23:25:56",4451,"\u003Cp>HTTP2从提出到现在已经有一段时间了，不过目前使用该协议的网站并不多。不过著名如google, twitter, youtube他们都已经领先升级到了HTTP2协议。今天我也将自己的博客升级到了HTTP2。\u003C\u002Fp>\u003Cp>重新编译安装最新的主线版本nginx 1.9.9\u003C\u002Fp>\u003Cpre class=\"brush:bash;toolbar:false\">.\u002Fconfigure --with-http_v2_module --with-http_ssl_module\nmake\nmake install\u003C\u002Fpre>\u003Cp>修改nginx配置文件\u003C\u002Fp>\u003Cpre class=\"brush:plain;toolbar:false\">server {\n    listen       443    ssl http2 fastopen=3 reuseport;\n    server_name  duguying.net;\n\n    ssl on;\n    ssl_certificate \u002Froot\u002Fssl\u002F1_duguying.net_bundle.crt;\n    ssl_certificate_key \u002Froot\u002Fssl\u002F2_duguying.net.key;\n\n    location \u002F {\n        try_files \u002F_not_exists_ @backend;\n    }\n\n    location @backend {\n        proxy_set_header X-Forwarded-For $remote_addr;\n        proxy_set_header Host            $http_host;\n\n        proxy_pass http:\u002F\u002F127.0.0.1:81;\n    }\n}\u003C\u002Fpre>\u003Cp>主要是添加 \u003Cspan style=\"text-decoration: underline;\">ssl http2 fastopen=3 reuseport\u003C\u002Fspan>。\u003C\u002Fp>\u003Cp>重启nginx服务。\u003C\u002Fp>\u003Cp>接下来可以在浏览器上看到如下闪电图标（需要装插件 HTTP\u002F2 and SPDY indicator）\u003C\u002Fp>\u003Cp>\u003Cimg src=\"\u002F\u002Fduguying.oss-cn-qingdao.aliyuncs.com\u002F2015\u002F12\u002F13\u002Fhttp2.png\" title=\"\" alt=\"http2.png\"\u002F>\u003C\u002Fp>",{"id":27,"title":28,"uri":28,"author":10,"tags":29,"created_at":32,"view_count":33,"content":34},16,"php-fpm网站目录权限配置",[30,31,12],"php-fpm","权限","2014-10-18 01:36:10",7276,"\u003Cp>今天本来想搭建一个现成的php网站系统，打算使用nginx+php-fpm来搭建。可是，问题来了……\u003Cbr\u002F>\u003C\u002Fp>\u003Cp>将php文件放置于\u002Fusr\u002Flocal\u002Fnginx\u002Fhtml下，一切正常，我将php文件放置于其它目录却出问题了，\u003Cspan style=\"line-height: 23px;\">File not found. \u003C\u002Fspan>，nginx配置文件没有任何问题，配置文件如下：\u003Cbr\u002F>\u003C\u002Fp>\u003Cpre class=\"brush:plain;toolbar:false\">worker_processes  1;\n\nevents {\n    worker_connections  1024;\n}\n\nhttp {\n    include       mime.types;\n    default_type  application\u002Foctet-stream;\n\n    sendfile        on;\n    keepalive_timeout  65;\n\n    server {\n        listen       80;\n        server_name  localhost;\n\n        access_log  logs\u002Frex_test.log;\n\n        #root         \u002Ftmpwww\u002Fhello;\n        root          \u002Ftmpwww\u002Ftest;\n\n        location \u002F {\n            index  index.html index.htm;\n        }\n\n        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000\n        #\n        location ~ \\.php$ {\n            fastcgi_pass   127.0.0.1:9000;\n            fastcgi_index  index.php;\n            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;\n            include        fastcgi_params;\n        }\n    }\n}\u003C\u002Fpre>\u003Cp>配置文件是不存在错误的，各种百度谷歌之后，觉得问题应该是出在网站目录权限上，特地测试了一下，手动创建了\u002Ftmpwww文件夹，在其下手动创建hello文件夹，其下放置info.php文件：\u003Cbr\u002F>\u003C\u002Fp>\u003Cpre class=\"brush:php;toolbar:false\"><?php\nphpinfo();\u003C\u002Fpre>\u003Cp style=\"text-align: left;\">访问，正常。为了重现错误，我在tmpwww文件夹下面创建test文件夹，其下info.php。正常，tree -p查看我原来不能正常访问的网站目录，发现部分层级的目录是drwxr-x---，你妹这不是group连读的权限都没有么。chmod 750 \u002Ftmpwww\u002Ftest将\u002Ftmpwww\u002Ftest也改为了\u003Cspan style=\"line-height: 23px;\">drwxr-x---，nginx配置文件改为如上（即网站根切换到\u002Ftmpwww\u002Ftest），File not found. 再次出现，故障重现了。\u003C\u002Fspan>\u003C\u002Fp>\u003Cp style=\"text-align: left;\">\u003Cspan style=\"line-height: 23px;\">\u003Cimg src=\"\u002F\u002Foss-cn-qingdao.aliyuncs.com\u002Fduguying\u002F2014\u002F10\u002F18\u002Fphp_fpm_permission_debug.png\" title=\"\" alt=\"php_fpm_permission_debug.png\"\u002F>\u003C\u002Fspan>\u003C\u002Fp>\u003Cp>\u003Cspan style=\"line-height: 23px;\">总结，\u003Cstrong>对于php-fpm，网站目录必须至少可读，并且其路径中涉及到的各层级目录也必须保证至少可读\u003C\u002Fstrong>，只有这样php-fpm及其worker进程才能访问到网站的根目录。\u003C\u002Fspan>\u003C\u002Fp>",{"title":36,"list":37},"最热文章",[38,44,50,56,62,68,74,80,86,88],{"id":39,"title":40,"uri":41,"author":10,"created_at":42,"view_count":43},28,"docker容器目录与主机目录同步","\u002Farticle\u002Fdocker容器目录与主机目录同步","2014-12-31 12:34:08",15573,{"id":45,"title":46,"uri":47,"author":10,"created_at":48,"view_count":49},21,"beego中使用fis","\u002Farticle\u002Fbeego中使用fis","2014-12-03 10:47:56",9253,{"id":51,"title":52,"uri":53,"author":10,"created_at":54,"view_count":55},20,"用github登录，oauth开发","\u002Farticle\u002F用github登录，oauth开发","2014-11-23 13:33:37",9115,{"id":57,"title":58,"uri":59,"author":10,"created_at":60,"view_count":61},18,"windows服务注册工具nssm","\u002Farticle\u002Fwindows服务注册工具nssm","2014-10-31 21:34:39",9054,{"id":63,"title":64,"uri":65,"author":10,"created_at":66,"view_count":67},49,"用latex排版中文书籍","\u002Farticle\u002F用latex排版中文书籍","2016-10-31 11:12:02",8645,{"id":69,"title":70,"uri":71,"author":10,"created_at":72,"view_count":73},19,"texlive中文书签乱码","\u002Farticle\u002Ftexlive中文书签乱码","2014-11-15 02:54:01",8466,{"id":75,"title":76,"uri":77,"author":10,"created_at":78,"view_count":79},6,"Windows上的软件包管理器chocolatey","\u002Farticle\u002FWindows上的软件包管理器chocolatey","2014-08-10 15:55:22",8012,{"id":81,"title":82,"uri":83,"author":10,"created_at":84,"view_count":85},3,"利用开源和免费资源搭建CI环境","\u002Farticle\u002F利用开源和免费资源搭建CI环境","2014-07-04 16:54:58",7740,{"id":27,"title":28,"uri":87,"author":10,"created_at":32,"view_count":33},"\u002Farticle\u002Fphp-fpm网站目录权限配置",{"id":89,"title":90,"uri":91,"author":10,"created_at":92,"view_count":93},27,"sublime text 2插件开发，外部修改文件无法重新加载","\u002Farticle\u002Fsublime text 2插件开发，外部修改文件无法重新加载","2014-12-26 20:24:13",7055,{"title":95,"list":96},"按月归档",[97,101,104,107,110,113,116,120,124,127,130,133,137,140,143,147,150,153,156,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,224,227,230,233,236,239],{"title":98,"uri":99,"view_count":100},"2026年7月","\u002Farchive\u002F2026\u002F7\u002F1","[1]",{"title":102,"uri":103,"view_count":100},"2026年1月","\u002Farchive\u002F2026\u002F1\u002F1",{"title":105,"uri":106,"view_count":100},"2025年4月","\u002Farchive\u002F2025\u002F4\u002F1",{"title":108,"uri":109,"view_count":100},"2024年6月","\u002Farchive\u002F2024\u002F6\u002F1",{"title":111,"uri":112,"view_count":100},"2024年5月","\u002Farchive\u002F2024\u002F5\u002F1",{"title":114,"uri":115,"view_count":100},"2024年4月","\u002Farchive\u002F2024\u002F4\u002F1",{"title":117,"uri":118,"view_count":119},"2023年12月","\u002Farchive\u002F2023\u002F12\u002F1","[6]",{"title":121,"uri":122,"view_count":123},"2023年11月","\u002Farchive\u002F2023\u002F11\u002F1","[2]",{"title":125,"uri":126,"view_count":100},"2023年10月","\u002Farchive\u002F2023\u002F10\u002F1",{"title":128,"uri":129,"view_count":100},"2023年7月","\u002Farchive\u002F2023\u002F7\u002F1",{"title":131,"uri":132,"view_count":123},"2023年6月","\u002Farchive\u002F2023\u002F6\u002F1",{"title":134,"uri":135,"view_count":136},"2023年5月","\u002Farchive\u002F2023\u002F5\u002F1","[3]",{"title":138,"uri":139,"view_count":123},"2023年4月","\u002Farchive\u002F2023\u002F4\u002F1",{"title":141,"uri":142,"view_count":123},"2023年3月","\u002Farchive\u002F2023\u002F3\u002F1",{"title":144,"uri":145,"view_count":146},"2023年2月","\u002Farchive\u002F2023\u002F2\u002F1","[5]",{"title":148,"uri":149,"view_count":100},"2023年1月","\u002Farchive\u002F2023\u002F1\u002F1",{"title":151,"uri":152,"view_count":123},"2022年12月","\u002Farchive\u002F2022\u002F12\u002F1",{"title":154,"uri":155,"view_count":146},"2022年11月","\u002Farchive\u002F2022\u002F11\u002F1",{"title":157,"uri":158,"view_count":159},"2022年10月","\u002Farchive\u002F2022\u002F10\u002F1","[4]",{"title":161,"uri":162,"view_count":119},"2022年9月","\u002Farchive\u002F2022\u002F9\u002F1",{"title":164,"uri":165,"view_count":146},"2022年8月","\u002Farchive\u002F2022\u002F8\u002F1",{"title":167,"uri":168,"view_count":100},"2019年7月","\u002Farchive\u002F2019\u002F7\u002F1",{"title":170,"uri":171,"view_count":100},"2019年2月","\u002Farchive\u002F2019\u002F2\u002F1",{"title":173,"uri":174,"view_count":100},"2018年9月","\u002Farchive\u002F2018\u002F9\u002F1",{"title":176,"uri":177,"view_count":100},"2018年8月","\u002Farchive\u002F2018\u002F8\u002F1",{"title":179,"uri":180,"view_count":100},"2017年11月","\u002Farchive\u002F2017\u002F11\u002F1",{"title":182,"uri":183,"view_count":100},"2017年8月","\u002Farchive\u002F2017\u002F8\u002F1",{"title":185,"uri":186,"view_count":100},"2017年5月","\u002Farchive\u002F2017\u002F5\u002F1",{"title":188,"uri":189,"view_count":100},"2017年4月","\u002Farchive\u002F2017\u002F4\u002F1",{"title":191,"uri":192,"view_count":100},"2016年11月","\u002Farchive\u002F2016\u002F11\u002F1",{"title":194,"uri":195,"view_count":100},"2016年10月","\u002Farchive\u002F2016\u002F10\u002F1",{"title":197,"uri":198,"view_count":123},"2016年9月","\u002Farchive\u002F2016\u002F9\u002F1",{"title":200,"uri":201,"view_count":100},"2016年8月","\u002Farchive\u002F2016\u002F8\u002F1",{"title":203,"uri":204,"view_count":123},"2016年7月","\u002Farchive\u002F2016\u002F7\u002F1",{"title":206,"uri":207,"view_count":146},"2016年6月","\u002Farchive\u002F2016\u002F6\u002F1",{"title":209,"uri":210,"view_count":100},"2015年12月","\u002Farchive\u002F2015\u002F12\u002F1",{"title":212,"uri":213,"view_count":100},"2015年10月","\u002Farchive\u002F2015\u002F10\u002F1",{"title":215,"uri":216,"view_count":123},"2015年2月","\u002Farchive\u002F2015\u002F2\u002F1",{"title":218,"uri":219,"view_count":100},"2015年1月","\u002Farchive\u002F2015\u002F1\u002F1",{"title":221,"uri":222,"view_count":223},"2014年12月","\u002Farchive\u002F2014\u002F12\u002F1","[8]",{"title":225,"uri":226,"view_count":123},"2014年11月","\u002Farchive\u002F2014\u002F11\u002F1",{"title":228,"uri":229,"view_count":146},"2014年10月","\u002Farchive\u002F2014\u002F10\u002F1",{"title":231,"uri":232,"view_count":136},"2014年9月","\u002Farchive\u002F2014\u002F9\u002F1",{"title":234,"uri":235,"view_count":136},"2014年8月","\u002Farchive\u002F2014\u002F8\u002F1",{"title":237,"uri":238,"view_count":136},"2014年7月","\u002Farchive\u002F2014\u002F7\u002F1",{"title":240,"uri":241,"view_count":123},"2013年9月","\u002Farchive\u002F2013\u002F9\u002F1",{"url":243,"title":244},"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002Fij6x8o4s.webp","老家 摄于2020年秋",1790781592688]