外网访问nginx代理的（资源宝）内网资源

场景：使用Wi-Fi连接的内网web 服务

构思&准备

  • 需要有双网卡的电脑或服务器一台
  • 连接资源宝发射的Wi-Fi，并获取当前电脑内网IP (192.168.0.144)
  • 已知资源宝Wi-Fi访问地址为固定的：192.168.88.100
  • 本机电脑连接资源宝Wi-Fi则可访问资源宝，用nginx代理则可实现局域网访问本地，间接访问到资源宝web服务地址

    • nginx配置 

    server
        listen 80;
        server_name 192.168.0.144;
        location / {
            proxy_pass http://192.168.88.100/;
            proxy_redirect off;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $host:$server_port;
            proxy_cookie_domain 192.168.88.100 192.168.0.144;
            client_max_body_size 10m;
            client_body_buffer_size 128k;
            proxy_connect_timeout 90;
            proxy_send_timeout 90;
            proxy_read_timeout 90;
            proxy_buffer_size 4k;
            proxy_buffers 4 32k;
            proxy_busy_buffers_size 64k;
            proxy_temp_file_write_size 64k;

    重启nginx后发现该web网站存在回调判断。回调端口为10001，且图片、视频资源的端口为9090
    

  • 无法修改源码，则只能通过ngnix替换
    • 

    用的的模块
    
http_substitutions_filter_module
    
修改后nginx配置

    server
        listen 80;
        server_name 192.168.0.144;
        location / {
            proxy_pass http://192.168.88.100/;
            proxy_redirect off;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $host:$server_port;
            proxy_cookie_domain 192.168.88.100 192.168.0.144;
            client_max_body_size 10m;
            client_body_buffer_size 128k;
            proxy_connect_timeout 90;
            proxy_send_timeout 90;
            proxy_read_timeout 90;
            proxy_buffer_size 4k;
            proxy_buffers 4 32k;
            proxy_busy_buffers_size 64k;
            proxy_temp_file_write_size 64k;
            #替换之前 host
            subs_filter '192.168.88.100:9090' '192.168.0.144:9090';
            subs_filter "host + '/dbStatus/'" "'http://192.168.0.144:10001/dbStatus/'";

    其他代理配置
    

    server
    listen 9090;
    server_name 192.168.0.144;
    location /{
        proxy_pass http://192.168.88.100:9090;

    server
    listen 10001;
    server_name 192.168.0.144;
    location /{