用nginx做正向代理，即（使内网机器可以通过互联网服务器上互联网

本文介绍: https://github.com/c hobit s/ngx_http_proxy_connect_module 下载地址。此处使用的是nginx-1.20.2，对应proxy_connect_rewrite_1018.pat c h。查看正向代理模块 proxy_connect_rewrite_1018.pat c h的位置。https://nginx.org/en/download.html 官网下载地址。安装 nginx 安装位置根据编译时配置的–p refix=ngin x 版本与代理模块对照表。

https://ngin x.org/en/download.html 官网下载地址

https://git hub.com/chobit s/ngx_http_proxy_connect_mod ule 下载地址

ngin x版本与代理模块对照表
在这里插入图片描述

此处使用的是ng inx-1.20.2，对应proxy_connect_rewrite_1018.patch

tar -xf nginx.tar.gz
unzip ngx_http_proxy_connect_module-master.zip
mv ngx_http_proxy_connect_module-master ngx_http_proxy_connect_module

基础运行环境安装

yum -y install make gcc openssl openssl-devel pcre-devel zlib zlib-devel

ll ../ngx_http_proxy_connect_module/patch/

patch -p1 &lt; /nginx/ngx_http_proxy_connect_module/patch/proxy_connect_rewrite_1018.patch

#配置configure --prefix 代表安装的路径，--with-http_ssl_module 安装ssl，--with-http_stub_status_module查看nginx的客户端状态
./configure --add-module=/nginx/ngx_http_proxy_connect_module --prefix=/usr/local/nginx-1.20.2 --with-http_ssl_module --with-http_stub_status_module

make &amp;&amp; make install

server {
    listen 8030;
    server_name localhost;
    resolver 114.114.114.114 ipv6=off;
    proxy_connect;                               
    proxy_connect_allow            all;
    proxy_connect_connect_timeout  10s;
    proxy_connect_read_timeout     10s;
    proxy_connect_send_timeout     10s;
    
    location / {
        proxy_pass https://$host$request_uri;
        proxy_set_header HOST $host;
        proxy_http_version  1.1;
        proxy_ssl_server_name on;
    }
}

 curl -I http://www.baidu.com/ -v -x 127.0.0.1:8030
 curl -I https://www.baidu.com/ -v -x 127.0.0.1:8030
 
HTTP/1.1 200 Connection Established
Proxy-agent: nginx

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Sun, 12 Feb 2023 09:31:07 GMT
Etag: "575e1f60-115"
Last-Modified: Mon, 13 Jun 2016 02:50:08 GMT
Pragma: no-cache
Server: bfe/1.0.8.18

# 追加配置
vim /etc/profile
# 这里的地址要写代理的服务器地址
http_proxy=192.168.0.20:80
# 这里的地址要写代理的服务器地址
https_proxy=192.168.0.20:443
# 这里的地址要写代理的服务器地址
ftp_proxy=192.168.0.20:443
export http_proxy
export https_proxy
export ftp_proxy
# 加载配置
source /etc/profile

curl -I https://www.baidu.com -v -x http://ip:8030

HTTP/1.1 200 Connection Established
Proxy-agent: nginx

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Sun, 12 Feb 2023 09:31:07 GMT
Etag: "575e1f60-115"
Last-Modified: Mon, 13 Jun 2016 02:50:08 GMT
Pragma: no-cache
Server: bfe/1.0.8.18