nginx端口转发,https却访问到了其他的页面

各位大虾好!
我的NGINX里有两个服务,分别占用了8080端口和8088端口,在nginx.conf里的做了分端口转发,具体配置如下:


      server {
        listen 80;
        listen 443 ssl;
        server_name dvlec.lechange.com;

        ssl_certificate      /usr/local/nginx/ssl/server-com.crt;
        ssl_certificate_key  /usr/local/nginx/ssl/server-com.key;
        ssl_session_timeout  5m;
        ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers  ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4;
        ssl_prefer_server_ciphers   on;

        location / {
                proxy_pass http://localhost:8080;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Real-Port $remote_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
}

server {
        listen 80;     #这个端口是给外网用的
        listen 8081;        #这个端口是给内网开的
        server_name dvllcsvr.lechange.com;
        location / {
                proxy_pass http://localhost:8088;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Real-Port $remote_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
}

然后把dvlec.lechange.com和dvllcsvr.lechange.com的域名都解析到了这个nginx的外网IP上,现在在浏览器里可以正常的通过http和https打开dvlec的页面,也可以用http正常访问dvllcsvr,但是当我使用https打开dvllcsvr的时候,虽然浏览器的地址栏没变,但是内容却是dvlec的内容,请问这是为何?

阅读 5.9k
1 个回答

因为443端口的默认server是dvlec,所以显示的是dvlec的内容
你把notexist.lechange.com指向外网IP,使用https访问也会显示dvlec的内容

如果不想出现这种情况,你需要配置一个默认的https server

      server {
        listen 443 ssl default_server;
        server_name _;
        ssl_certificate      /usr/local/nginx/ssl/server-com.crt;
        ssl_certificate_key  /usr/local/nginx/ssl/server-com.key;
        return 404;
    }
撰写回答
你尚未登录,登录后可以
  • 和开发者交流问题的细节
  • 关注并接收问题和回答的更新提醒
  • 参与内容的编辑和改进,让解决方法与时俱进
推荐问题