利用国外服务器nginx反向代理实现apple的IPv6审核

利用国外服务器nginx反向代理实现apple的IPV6审核

目前Sandy了解下来,Linode和vultr都支持IPV6
国内服务器的Nginx配置不变,国外Nginx规则如下:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
upstream backup_server_24 {
        server 国内IP:443;
}

server {  
    listen 80;
    listen   [::]:80;
    server_name blog.e9china.net;##国内绑定的域名##
    return 301 https://blog.e9china.net$request_uri;
}

server
    {
        listen 443 ssl;
        listen   [::]:443 ipv6only=on ssl;
        server_name blog.e9china.net;
        index index.html index.htm index.php default.html default.htm default.php;

        ssl on;
        ##qcloud##
        ssl_certificate /etc/ssl/private/1_blog.e9china.net_cert.crt;##SSL证书##
        ssl_certificate_key /etc/ssl/private/2_blog.e9china.net.key;##SSL证书##
        ####
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/ssl/dhparam.pem 2048
        ssl_dhparam /etc/ssl/certs/dhparam.pem;##改成你自己的PEM路径##

        location / {
            proxy_pass                    https://backup_server_24;
            #proxy_ssl_certificate         /usr/local/nginx/ssl/dhparam.pem;
            #proxy_ssl_certificate_key     /usr/local/nginx/ssl/2_api_appapi_com.key;
            proxy_ssl_protocols           TLSv1 TLSv1.1 TLSv1.2;
            proxy_ssl_ciphers             "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
            #proxy_ssl_trusted_certificate /usr/local/nginx/ssl/1_api_appapi_com.ca-bundle.crt;
            proxy_set_header HOST $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_ssl_verify        off;
            proxy_ssl_verify_depth  2;
            proxy_ssl_session_reuse on;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        access_log off;
    }

域名设置里面A记录不变,AAAA记录放上你自己的ipv6的地址,就大功告成了!