nginx | My IT thoughts collection

We need two servers:

NGINX
- Serve static files
- Serve maintenance page
- Control access via GeoIP tables
- Offer HTTPS protocol to clients (443)
- Maintain reverse proxy to Tomcat on HTTP
TOMCAT
- Will hold deployed application
- Communicates on port 8080

For a reverse proxy we need to configure nginx:

nginx.conf

...
http {
    ...    
    # Tomcat
    upstream tomcat {
       server localhost:8080;
    }

    ...
    include /etc/nginx/conf.d/*.conf;

...

http {

...

# Tomcat

upstream tomcat {

server localhost:8080;

}

...

include /etc/nginx/conf.d/*.conf;

site.conf

server {
    ...
    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Authorization "";
        proxy_redirect off;
        proxy_connect_timeout 240;
        proxy_send_timeout 240;
        proxy_read_timeout 240;
        proxy_pass http://tomcat;
    }
    ...
}

server {

...

location / {

proxy_set_header Host $http_host;

proxy_set_header X-Forwarded-Host $host;

proxy_set_header X-Forwarded-Server $host;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-Proto https;

proxy_set_header Authorization "";

proxy_redirect off;

proxy_connect_timeout 240;

proxy_send_timeout 240;

proxy_read_timeout 240;

proxy_pass http://tomcat;

}

...

}

Tomcat configuration more simple:

server.xml

...
    &lt;Connector port="8080" protocol="HTTP/1.1"
        connectionTimeout="20000"
        redirectPort="8443"
        proxyPort="443"
    /&gt;
...

...

<Connector port="8080" protocol="HTTP/1.1"

connectionTimeout="20000"

redirectPort="8443"

proxyPort="443"

...

Gzip static module allows you to serve per-compressed files instead of “on the fly” compressed files.

Nginx:

...
server {
    ...
    #STATIC FILES
    location /resources {
        #access_log off;
        expires 1d;
        add_header Cache-Control public;
        root /usr/share/nginx/html/resources;
        gzip on;
        gzip_static on;
        gzip_http_version 1.1;
        gzip_comp_level 2;
        gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;
        gzip_vary on;
    }
    ....
}

...

server {

...

#STATIC FILES

location /resources {

#access_log off;

expires 1d;

add_header Cache-Control public;

root /usr/share/nginx/html/resources;

gzip on;

gzip_static on;

gzip_http_version 1.1;

gzip_comp_level 2;

gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;

gzip_vary on;

}

....

}

Python script

we do need to build the gzip files every time we do update our project. This script will scan all files in resource directory and gzip each file:

#!/usr/bin/python
import fnmatch
import os
from os.path import exists

resources_path = "/usr/share/nginx/html/resources"

for root, dirnames, filenames in os.walk(resources_path):
    for (filename) in filenames:
        filename = root + "/" + filename
        gzip_filename = filename + ".gz"
        if exists(gzip_filename):
            os.remove(gzip_filename)
        os.system('gzip -9 &lt; ' + filename + ' &gt; ' + gzip_filename)

#!/usr/bin/python

import fnmatch

import os

from os.path import exists

resources_path = "/usr/share/nginx/html/resources"

for root, dirnames, filenames in os.walk(resources_path):

for (filename) in filenames:

filename = root + "/" + filename

gzip_filename = filename + ".gz"

if exists(gzip_filename):

os.remove(gzip_filename)

os.system('gzip -9 < ' + filename + ' > ' + gzip_filename)

My IT thoughts collection

Tag Archives: nginx

Reverse Proxy Nginx -> Tomcat

nginx.conf

site.conf

server.xml

Nginx and gzip_static

Nginx:

Python script

by JadeBaboon Team