Nginx 配置與 檢測WSS 示例

Message Websocket 的 SSL 代理服務

# php messageWorker.php -d start 守護進程方式啟動 Websocket, 其它 start,restart,stop, ps -aux | grep messageWoker
# 測試 https://demo.yiparts.debian/wss 是否正常有返回頁面
# 使用域名連接 wss://demo.yiparts.debian/wss
# 如果還是連接失敗, 檢查域名白名單 cfg('websocket>whiteList')
注意: $connection->onWebSocketConnect 中可能存在 域名白名單 判斷
location /wss 這條規(guī)則建立放在所規(guī)則的最前面，這樣就不會被別的規(guī)則給覆蓋了

    listen 443 ssl;

    ssl_certificate /home/qg/ssl/certs/demo.yiparts.debian.crt;
    ssl_certificate_key /home/qg/ssl/certs/demo.yiparts.debian.key;

    ssl_session_timeout 5m;
    ssl_session_cache shared:SSL:50m;
    ssl_protocols SSLv3 SSLv2 TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

    location /wss
    {
        proxy_pass http://127.0.0.1:8181; # swoole 或 workerman 提供的 Websocket 監(jiān)聽地址:端口
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header X-Real-IP $remote_addr; # 透傳真實客戶端ip, $_SERVER['HTTP_X_REAL_IP']
    }