nginx域名反向代理

server {

listen 443 ssl;

server_name tdyhpmm.xtion.net; #匹配的域名名称

ssl on;

ssl_certificate /home/tantan/tiandiyihao/ssl/server.crt;

ssl_certificate_key /home/tantan/tiandiyihao/ssl/_.xtion.net.key;

ssl_session_timeout 5m;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置

ssl_prefer_server_ciphers on;

location / {

proxy_pass http://192.168.60.11:8443;

}

}