Nginx 反向代理与常见配置片段

反向代理的核心是：把外部请求“正确、安全、可观察”地转发到上游，同时控制超时与缓冲，避免把故障放大。

1. 最小可用反代

location / {
  proxy_pass http://127.0.0.1:8080;
  proxy_set_header Host $host;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto $scheme;
}

2. 超时与缓冲（常见“卡住”来源）

proxy_connect_timeout 5s;
proxy_read_timeout 60s;
proxy_send_timeout 60s;
proxy_buffering on;

3. WebSocket

proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";