Nginx反代cloudflare站点报502或403错误解决办法

卡片描述
在一次安装aapanel面板的时候 发现下载文件的时候非常慢，于是我下载了脚本文件打开发现有

    echo "Selected download node..."
    nodes=(https://node.aapanel.com)

于是就开始了“反代之路”发现并没有那么简单，因为cloudflare默认屏蔽了Nginx的反代，直接用反代配置文件肯定报502或者403，捣鼓了一下，所以就有了今天这篇文章额教程~

本文使用 https://node.aapanel.com/ 作为反代目标站点

以下是宝塔&aapanel的Nginx默认反代配置文件

#PROXY-START/ location ^~ / { proxy_pass https://node.aapanel.com; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_http_version 1.1; # proxy_hide_header Upgrade; #Persistent connection related configuration add_header X-Cache $upstream_cache_status; #Set Nginx Cache set $static_filevY6oU8Aw 0; if ( $uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$" ) { set $static_filevY6oU8Aw 1; expires 1m; } if ( $static_filevY6oU8Aw = 0 ) { add_header Cache-Control no-cache; } } #PROXY-END/

将上面的配置文件的$host改成你需要反代的目标网站

特别注意：
在添加反代的时候，格式是http(s)://node.aapanel.com 修改$host的时候仅需填写目标网站的域名即可 不需要写 http(s):// 和 / 否则会报400错误。

再加这个配置

#反代CF增加规则 proxy_ssl_name $host; #把$host改成目标域名 proxy_ssl_server_name on;

完整的 全局 Nginx反代配置文件如下：

#PROXY-START/ location ^~ / { proxy_pass https://node.aapanel.com; proxy_set_header Host node.aapanel.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_http_version 1.1; # proxy_hide_header Upgrade; #Persistent connection related configuration #反代CF增加规则 proxy_ssl_name node.aapanel.com; #把$host改成目标域名 proxy_ssl_server_name on; add_header X-Cache $upstream_cache_status; #Set Nginx Cache set $static_filevY6oU8Aw 0; if ( $uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$" ) { set $static_filevY6oU8Aw 1; expires 1m; } if ( $static_filevY6oU8Aw = 0 ) { add_header Cache-Control no-cache; } } #PROXY-END/

方法二(推荐临时使用)

指定 路径(aapanel) 全局反代

# PROXY-START/ location /aapanel/ { # 去掉 /aapanel 前缀后再转发 rewrite ^/aapanel(/.*)$ $1 break; proxy_pass https://node.aapanel.com; proxy_set_header Host node.aapanel.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_http_version 1.1; proxy_ssl_name node.aapanel.com; proxy_ssl_server_name on; add_header X-Cache $upstream_cache_status; set $static_file9uY9s480 0; if ($uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$") { set $static_file9uY9s480 1; expires 1m; } if ($static_file9uY9s480 = 0) { add_header Cache-Control no-cache; } } # PROXY-END/

现在你就可以成功的反代cloudflare的站点了~

声明：本站所有文章，如无特殊说明或标注，均为本站原创发布。任何个人或组织，在未征得本站同意时，禁止复制、盗用、采集、发布本站内容到任何网站、书籍等各类媒体平台。如若本站内容侵犯了原著者的合法权益，可联系我们进行处理。