☰

落后于负载均衡器时在 nginx 中覆盖 $scheme

tag-icon • tag-icon nginx ssl load-balancing
落后于负载均衡器时在 nginx 中覆盖 $scheme

我在负载均衡器后面有一个 nginx 服务器。负载均衡器处理 SSL 终止，所有请求都通过端口 80 到达 nginx。我还使用SRCache 模块使用 Redis 进行全页面缓存。缓存模块使用 URL 作为缓存键，如$schemeGET$host$request_uri。我在想，我可以以$scheme某种方式覆盖 nginx 的变量，这样缓存键方案就会变成 ，https而不是 。http我不确定如何做到这一点，或者是否可能。

我的应用程序在各种事件发生后都会清除缓存，并生成使用 的缓存键，https但 nginx 正在使用http缓存键。这意味着由于缓存键名称不匹配，缓存无法正确清除。

如果有帮助的话，这是我的网站配置：

server {
listen 80;

server_name example.com example.org example.net ;

set $redirect_to_https 0;
if ( $http_x_forwarded_proto != 'https' ) {
  set $redirect_to_https 1;
}
if ( $request_uri = '/health-check.php' ) {
  set $redirect_to_https 0;
}
if ( $redirect_to_https = 1 ) {
  return 301 https://$host$request_uri;
}

# Uncomment the following line for domain mapping
server_name_in_redirect off;

access_log /var/log/nginx/example.com.access.log rt_cache_redis;
error_log /var/log/nginx/example.com.error.log;


root /var/www/example.com/htdocs;
index index.php index.html index.htm;

include  common/redis-php7.conf;

include common/wpcommon-php7-modified.conf;
include common/locations-php7.conf;
include /var/www/example.com/conf/nginx/*.conf;
}

更新这里是缓存配置

# Redis NGINX CONFIGURATION
# DO NOT MODIFY, ALL CHANGES LOST AFTER UPDATE EasyEngine (ee)
set $skip_cache 0;
# POST requests and URL with a query string should always go to php
if ($request_method = POST) {
  set $skip_cache 0;
}
if ($query_string != "") {
  set $skip_cache 1;
}
# Don't cache URL containing the following segments
if ($request_uri ~* "(/wp-admin/|/xmlrpc.php|wp-.*.php|index.php|/feed/|sitemap(_index)?.xml|[a-z0-9_-]+-sitemap([0-9]+)?.xml)") {
  set $skip_cache 1;
}
# Don't use the cache for logged in users or recent commenter
if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
  set $skip_cache 1;
}
# Use cached or actual file if they exists, Otherwise pass request to WordPress
location / {
  try_files $uri $uri/ /index.php?$args;
}

location /redis-fetch {
    internal  ;
    set  $redis_key $args;
    redis_pass  redis;
}
location /redis-store {
    internal  ;
    set_unescape_uri $key $arg_key ;
    redis2_query  set $key $echo_request_body;
    redis2_query expire $key 14400;
    redis2_pass  redis;
}

location ~ \.php$ {
  set $key "nginx-cache:$scheme$request_method$host$request_uri";
  try_files $uri =404;

  srcache_fetch_skip $skip_cache;
  srcache_store_skip $skip_cache;

  srcache_response_cache_control off;

  set_escape_uri $escaped_key $key;

  srcache_fetch GET /redis-fetch $key;
  srcache_store PUT /redis-store key=$escaped_key;

  more_set_headers 'X-SRCache-Fetch-Status $srcache_fetch_status';
  more_set_headers 'X-SRCache-Store-Status $srcache_store_status';

  include fastcgi_params;
  fastcgi_pass php7;
}

答案1

好的，这里我们看到了用于 redis 查找的缓存键：

location ~ \.php$ {
  set $key "nginx-cache:$scheme$request_method$host$request_uri";

问题在于$scheme反映了与 nginx 建立的连接（来自您的负载均衡器），但您的缓存模块正在使用来自的方案$http_x_forwarded_proto，这反映了实际使用的方案。

只需进行这样的更改就足够了。

相关内容