关于Nginx 502问题

Question

最近在改备案，需要关站，所有在香港开了个阿里云，然后用Nginx反向代理原服务器，用户访问路径是

香港Nginx反向代理-》境内阿里云负载均衡-》ECS服务器

香港反向代理服务器用的 Nginx 1.17.0，日志中大量下面这种日志。网站间歇式502，经排查，502期间，源站正常，访问一点问题没有，502 持续30秒左右自己就恢复了。怎么弄啊；实在找不到是什么原因，感觉不是墙

upstream wwwzhan {
    server 47.110.1.1:9080 fail_timeout=0;
    server 47.110.1.1:9080 fail_timeout=0;
}
server {
    listen          80 default_server;
    server_name     www.xxxxx.cn;
    access_log off;


location / {
        proxy_pass  http://wwwzhan;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_cache one;
        proxy_cache_valid 200;
        proxy_redirect     off;
        proxy_http_version 1.1;
        proxy_set_header        Host            "www.xxxxx.cn";
        proxy_set_header Connection "";
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
      }
}

下面是错误日志，

2019/06/21 20:27:18 [error] 2313#2313: *1434768 readv() failed (104: Connection reset by peer) while reading upstream, client: 183.82.23.80, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://2.2.2.2:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:18 [error] 2314#2314: *1434738 readv() failed (104: Connection reset by peer) while reading upstream, client: 49.205.221.65, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://2.2.2.2:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:18 [error] 2313#2313: *1434751 readv() failed (104: Connection reset by peer) while reading upstream, client: 222.71.180.185, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.7.168:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:19 [error] 2314#2314: *1434293 readv() failed (104: Connection reset by peer) while reading upstream, client: 202.86.222.102, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.7.168:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:19 [error] 2314#2314: *1434973 readv() failed (104: Connection reset by peer) while reading upstream, client: 27.156.241.17, server: www.xxxxxxx.cn, request: "POST / HTTP/1.1", upstream: "http://2.2.2.2:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:19 [error] 2314#2314: *1434823 readv() failed (104: Connection reset by peer) while reading upstream, client: 61.75.206.53, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:19 [error] 2313#2313: *1434903 readv() failed (104: Connection reset by peer) while reading upstream, client: 119.251.45.245, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:20 [error] 2314#2314: *1434976 readv() failed (104: Connection reset by peer) while reading upstream, client: 183.83.159.84, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:20 [error] 2314#2314: *1434978 readv() failed (104: Connection reset by peer) while reading upstream, client: 183.82.16.193, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://2.2.2.2:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:20 [error] 2314#2314: *1434799 readv() failed (104: Connection reset by peer) while reading upstream, client: 49.205.218.177, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://2.2.2.2:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:21 [error] 2314#2314: *1435012 readv() failed (104: Connection reset by peer) while reading upstream, client: 114.134.184.21, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:21 [error] 2314#2314: *1434999 readv() failed (104: Connection reset by peer) while reading upstream, client: 45.249.81.98, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:22 [error] 2313#2313: *1435131 readv() failed (104: Connection reset by peer) while reading upstream, client: 120.221.32.161, server: www.xxxxxxx.cn, request: "POST / HTTP/1.1", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"
2019/06/21 20:27:22 [error] 2314#2314: *1434595 readv() failed (104: Connection reset by peer) while reading upstream, client: 61.231.35.58, server: www.xxxxxxx.cn, request: "POST / HTTP/1.0", upstream: "http://47.110.1.1:9080/", host: "www.xxxxxxx.cn"

Answer 1

这个应该是到后端服务器经过了gfw，你可以选择在代理服务器和后端之间用ipsec vpn连接或者使用https到后端，总的来说就是加密绕过gfw