<div id="readability-page-1" class="page"><div>
 
 <header>
 
 
 
 업데이트: <time datetime="2023-08-27T00:00:00+09:00">August 27, 2023</time>
 
 </header>
 

 <section itemprop="text">
 
 
 
 <h2 id="nginx를-활용한-포트포워딩-리버스-프록시">nginx를 활용한 포트포워딩, 리버스 프록시</h2>

관련 내용 복습하기

<ul>
 <li><a href="https://losskatsu.github.io/it-infra/flask-nginx-uwsgi-concept/">flask, nginx, uwsgi (1)개념</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/flask-nginx-uwsgi/">flask, nginx, uwsgi (2)연동 실습</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/aws-apache/">AWS에 아파치 서버 설치하기</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/apache-error-log/">아파치 서버 에러 로그 확인</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/kerberos/">커버로스 인증 개념</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/webserver/">아파치, 톰캣, nginx 차이</a></li>
 <li><a href="https://losskatsu.github.io/it-infra/ssl-auth/">SSL, CRS 인증 관련 정리(대칭키, 공개키, 개인키)</a></li>
</ul>

<h2 id="1-nginx-설치">1. nginx 설치</h2>

<div><pre><code>ubuntu@k8s-master:~$ sudo apt update

Hit:1 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy InRelease
Get:2 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy-updates InRelease [119 kB]
Get:3 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy-backports InRelease [109 kB]
Hit:4 https://download.docker.com/linux/ubuntu jammy InRelease
...(중략)
Fetched 2214 kB in 1s (1682 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
60 packages can be upgraded. Run 'apt list --upgradable' to see them.
</code></pre></div>

<div><pre><code>ubuntu@k8s-master:~$ sudo apt install nginx

Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
...(생략)
</code></pre></div>

<div><pre><code>ubuntu@k8s-master:~$ sudo systemctl status nginx

● nginx.service - A high performance web server and a reverse proxy server
 Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
 Active: active (running) since Sat 2023-08-26 03:05:01 UTC; 1min 24s ago
 Docs: man:nginx(8)
 Process: 20184 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
 Process: 20186 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
 Main PID: 20280 (nginx)
 Tasks: 3 (limit: 4667)
</code></pre></div>

<h2 id="2-포트포워딩">2. 포트포워딩</h2>

이번 절에서는 포트포워딩을 해보겠습니다.

<div><pre><code>ubuntu@k8s-master:~$ sudo –i
root@k8s-master:~# cd /etc/nginx/sites-enabled/
root@k8s-master:/etc/nginx/sites-enabled# ls
default
</code></pre></div>

포트포워딩을 하기 위해서는 <code>/etc/nginx/sites-enabled/</code> 경로에 있는 <code>default</code> 파일을 수정해야합니다. 
이를 위해 <code>/etc/nginx/sites-enabled/</code> 경로로 이동해서 <code>default</code> 파일을 확인합니다.

<div><pre><code>server {
 listen 80 default_server;
 listen [::]:80 default_server;

 # SSL configuration
 #
 # listen 443 ssl default_server;
 # listen [::]:443 ssl default_server;
 #
 # Note: You should disable gzip for SSL traffic.
 # See: https://bugs.debian.org/773332
 #
 # Read up on ssl_ciphers to ensure a secure configuration.
 # See: https://bugs.debian.org/765782
 #
 # Self signed certs generated by the ssl-cert package
 # Don't use them in a production server!
 #
 # include snippets/snakeoil.conf;

 root /var/www/html;

 # Add index.php to the list if you are using PHP
 index index.html index.htm index.nginx-debian.html;

 server_name _;

 location / {
 # First attempt to serve request as file, then
 # as directory, then fall back to displaying a 404.
 try_files $uri $uri/ =404;
 }
</code></pre></div>

파일을 확인하면 위와 같은데 주석을 뺴고 간단하게 보면 다음과 같습니다.

<div><pre><code>server {
 listen 80 default_server;
 listen [::]:80 default_server;

 root /var/www/html;

 server_name _;

 location / {
 # First attempt to serve request as file, then
 # as directory, then fall back to displaying a 404.
 try_files $uri $uri/ =404;
 }
</code></pre></div>

포트포워딩을 해보겠습니다. 80번포트로 들어오는 트래픽을 <code>http://172.31.46.220:80</code>로 포트포워딩해보겠습니다. 
이를 위해 위 코드에서 <code>try_files $uri $uri/ =404;</code> 부분을 주석 처리하고, <code>proxy_pass http://172.31.46.220:80;</code> 구문을 추가하면 다음과 같습니다.

<div><pre><code>server {
 listen 80 default_server;
 listen [::]:80 default_server;

 # SSL configuration
 #
 # listen 443 ssl default_server;
 # listen [::]:443 ssl default_server;
 #
 # Note: You should disable gzip for SSL traffic.
 # See: https://bugs.debian.org/773332
 #
 # Read up on ssl_ciphers to ensure a secure configuration.
 # See: https://bugs.debian.org/765782
 #
 # Self signed certs generated by the ssl-cert package
 # Don't use them in a production server!
 #
 # include snippets/snakeoil.conf;

 root /var/www/html;

 # Add index.php to the list if you are using PHP
 index index.html index.htm index.nginx-debian.html;

 server_name _;

 location / {
 # First attempt to serve request as file, then
 # as directory, then fall back to displaying a 404.
 #try_files $uri $uri/ =404;
 proxy_pass http://172.31.46.220:80;
 }
...(중략)
</code></pre></div>


 
 
 
 
 
 <ins data-ad-layout="in-article" data-ad-format="fluid" data-ad-client="ca-pub-8239319668711744" data-ad-slot="6302909428"></ins>
 
 
 </section>

 

 


 
 

 </div></div>

로스카츠의 AI 머신러닝

nginx를 활용한 포트포워딩, 리버스 프록시
관련 내용 복습하기
flask, nginx, uwsgi (1)개념
flask, nginx, uwsgi (2)연동 실습
AWS에 아파치 서버 설치하기
아파치 서버 에러 로그 확인
커버로스 인증 개념
아파치, 톰캣, nginx 차이
SSL, CRS 인증 관련 정리(대칭키, 공개키, 개인키)
1. nginx 설치
ubuntu@k8s-master:~$ sudo apt update
Hit:1 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy InRelease
Get:2 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy-updates InRelease [119 kB]
Get:3 http://ap-northeast-2.ec2.archive.ubuntu.com/ubuntu jammy-backports InRelease [109 kB]
Hit:4 https://download.docker.com/linux/ubuntu jammy InRelease
...(중략)
Fetched 2214 kB in 1s (1682 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
60 packages can be upgraded. Run 'apt list --upgradable' to see them.
ubuntu@k8s-master:~$ sudo apt install nginx
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
...(생략)
ubuntu@k8s-master:~$ sudo systemctl status nginx
● nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
     Active: active (running) since Sat 2023-08-26 03:05:01 UTC; 1min 24s ago
       Docs: man:nginx(8)
    Process: 20184 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
    Process: 20186 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
   Main PID: 20280 (nginx)
      Tasks: 3 (limit: 4667)
2. 포트포워딩
이번 절에서는 포트포워딩을 해보겠습니다.
ubuntu@k8s-master:~$ sudo –i
root@k8s-master:~# cd /etc/nginx/sites-enabled/
root@k8s-master:/etc/nginx/sites-enabled# ls
default
포트포워딩을 하기 위해서는 /etc/nginx/sites-enabled/ 경로에 있는 default 파일을 수정해야합니다. 
이를 위해 /etc/nginx/sites-enabled/ 경로로 이동해서 default 파일을 확인합니다.
server {
        listen 80 default_server;
        listen [::]:80 default_server;
        # SSL configuration
        #
        # listen 443 ssl default_server;
        # listen [::]:443 ssl default_server;
        #
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;
        root /var/www/html;
        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;
        server_name _;
        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
        }
파일을 확인하면 위와 같은데 주석을 뺴고 간단하게 보면 다음과 같습니다.
server {
        listen 80 default_server;
        listen [::]:80 default_server;
        root /var/www/html;
        server_name _;
        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
        }
포트포워딩을 해보겠습니다. 80번포트로 들어오는 트래픽을 http://172.31.46.220:80로 포트포워딩해보겠습니다. 
이를 위해 위 코드에서 try_files $uri $uri/ =404; 부분을 주석 처리하고, proxy_pass http://172.31.46.220:80; 구문을 추가하면 다음과 같습니다.
server {
        listen 80 default_server;
        listen [::]:80 default_server;
        # SSL configuration
        #
        # listen 443 ssl default_server;
        # listen [::]:443 ssl default_server;
        #
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;
        root /var/www/html;
        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;
        server_name _;
        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                #try_files $uri $uri/ =404;
                proxy_pass http://172.31.46.220:80;
        }
...(중략)

[Infra] nginx를 활용한 포트포워딩, 리버스 프록시

댓글