堡垒机部署相关

2019独角兽企业重金招聘Python工程师标准>>>

jumpserver堡垒机

ldap连接方式

nginx代理websocket

upstream  jsm  {
    server  10.0.x.x:80;
}
server {
        listen 80;
        server_name   jp.ops.net;
        index  index.html index.htm index.php;

        location / {

        proxy_pass  http://jsm;

        proxy_set_header   Host             $host;
        proxy_set_header   X-Real-IP        $remote_addr;
        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        #websocket
   }
access_log  /usr/local/nginx/logs/jumpserver.log;
}

阿里云堡垒机

ldap 连接方式

转载于:https://my.oschina.net/attacker/blog/2994676