I'm sorry if this is an nginx question and shouldn't be on this forum. The
nginx forum is pretty much dead.
I have nginx front-ending my node server. It has worked well for some time.
I am now adding ssl to my setup. I want to terminate the SSL at the
front-end nginx because I've heard that node's HTTPS server is slower.
(Correct me if I'm wrong). My understanding is that terminating SSL in
nginx means that simple HTTP would be sent to my back-end node server.
(Again, correct me if I'm wrong).
I switched nginx to use SSL (see conf file below) and my setup didn't work
until I also switched my back-end node server to use https. This doesn't
seem right.
Stupid Question: Is it possible to accidentally terminate on both the
front-end and back-end at the same time? It doesn't seem like this would
be possible and it would be the worst of all possible setups. My current
setup appears to be set this way.
Here is my nginx conf file. I would appreciate it if anyone could take a
quick look and tell me if this should be terminating SSL (converting HTTPS
to HTTP).
server {
listen 80;
rewrite ^(.*)$ https://$host$1 permanent;
}
server {
listen 443 ssl;
ssl on;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
ssl_certificate_key /root/domain.key;
ssl_certificate /root/domain.crt;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
keepalive_timeout 60;
location ~ \/(.*images\/.*|.*\.js|.*\.css|.*\.swf)$ {
root /ri/src;
}
location ~ \/($|acct|help|login|main|test).* {
# node server is listening on port 81
proxy_pass https://localhost:81;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto https;
}
}
--
Job Board: http://jobs.nodejs.org/
Posting guidelines:
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en
