nginx反代难题-套CF IP限制
侧边栏壁纸
  • 累计撰写 64,062 篇文章
  • 累计收到 0 条评论

nginx反代难题-套CF IP限制

James
2024-07-28 / 0 评论 / 3 阅读 / 正在检测是否收录...

一个小学的网站,练习反代发现始终无法成功。

网站地址如下

fna.northerneducationtrust.org


-----------------------------------------------------
**网友回复**:

正好没事做,帮你修好了,亲测有效,记得要用UK的IP,再不行的话你换个别的UK商家的IP试试,也可能是访问量大以后触发了对面CF设置的WAF

  location/{
    proxy_passhttps://fna.northerneducationtrust.org;
    proxy_redirectoff;
    proxy_set_headerHostfna.northerneducationtrust.org;
    proxy_set_headerAccept-Encoding;
  
    client_max_body_size  10m;
    client_body_buffer_size  512k;

    proxy_connect_timeout  5;
    proxy_read_timeout    60;
    proxy_send_timeout    5;
    proxy_buffer_size      16k;
    proxy_buffers        464k;
    proxy_busy_buffers_size128k;

    proxy_hide_headerAlt-Svc;
    proxy_hide_headerCf-Cache-Status;
    proxy_hide_headerReport-To;
    proxy_hide_headerNel;
    proxy_hide_headerCf-Ray;
    proxy_hide_headerVary;
    proxy_hide_headerX-protocol;
    proxy_hide_headerStrict-Transport-Security;
    proxy_hide_headerX-Frame-Options;
    proxy_hide_headerX-Content-Type-Options;
    proxy_hide_headerX-XSS-Protection;

    proxy_ssl_server_nameon;

    sub_filterfna.northerneducationtrust.org你的域名;
    sub_filter_onceoff;
    sub_filter_typestext/javascriptapplication/jsonapplication/ld+jsonapplication/xml;
  }




网友回复:

location/{

  proxy_passhttp://fna.northerneducationtrust.org;

  proxy_set_headerHost$host;

  proxy_set_headerX-Real-IP$remote_addr;

  proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;

  proxy_set_headerX-Forwarded-Proto$scheme;

  proxy_set_headerX-Forwarded-Host$host;

  proxy_set_headerX-Forwarded-Port$server_port;

}


网友回复:

你不发

ssl_name$Host;

吗?


网友回复:

引用:Crownsecular发表于2024-7-2617:43

location/{

  proxy_passhttp://fna.northerneducationtrust.org;

  proxy_set_headerHost...<BR><BR><BR> **网友回复**:



你加x-forwardx-real不正告诉对面你用反代访问




网友回复:

引用:xfspace发表于2024-7-2622:35

你加x-forwardx-real不正告诉对面你用反代访问


网友回复:

nginx报错如下:

2024/07/2614:59:16[error]43597#43597:*22connect()to[2606:xxxx:3034::ac43:be1e]:443failed(101:Networkisunreachable)whileconnectingtoupstream,client:172.167.88.51,server:www.mydomain.com,request:"GET/HTTP/2.0",upstream:"https://[2606:xxxx:3034::ac43:be1e]:443/",host:"www.mydomain.com"

2024/07/2614:59:17[error]43597#43597:*22connect()to[2606:xxxx:3031::6815:2189]:443failed(101:Networkisunreachable)whileconnectingtoupstream,client:172.167.88.51,server:www.mydomain.com,request:"GET/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8a9540b07f3a3634HTTP/2.0",upstream:"https://[2606:xxxx:3031::6815:2189]:443/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8a9540b07f3a3634",host:"www.mydomain.com",referrer:"https://www.mydomain.com/?__cf_chl_rt_tk=CN_qBOKFGQHcehplHm5VTXmY7VFB8N9Hcn34eu3pt40-1722005957-0.0.1.1-4330"



网友回复:

proxy_set_headerHostfna.northerneducationtrust.org


网友回复:

引用:swan发表于2024-7-2711:36

proxy_set_headerHostfna.northerneducationtrust.org


网友回复:

把我测试过的一些代码发出来.remark部分是我测试过不行的

proxy_passhttps://fna.northerneducationtrust.org;

proxy_passhttp://fna.northerneducationtrust.org;

proxy_set_headerHostfna.northerneducationtrust.org;

proxy_ssl_name$host;

proxy_ssl_namefna.northerneducationtrust.org;

proxy_ssl_server_nameon;

proxy_set_headerX-Real-IP$remote_addr;

proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;

proxy_set_headerX-Forwarded-Proto$scheme;#ERR_TOO_MANY_REDIRECTS

proxy_set_headerAccept-Encoding"";
sub_filterfna.northerneducationtrust.orgmydomain.com;

proxy_redirecthttps://fna.northerneducationtrust.orghttps://mydomain.com;

proxy_redirectoff;

sub_filterabc 123 ;

sub_filter_onceoff;




网友回复:

正好没事做,帮你修好了,亲测有效,记得要用UK的IP,再不行的话你换个别的UK商家的IP试试,也可能是访问量大以后触发了对面CF设置的WAF

  location/{
    proxy_passhttps://fna.northerneducationtrust.org;
    proxy_redirectoff;
    proxy_set_headerHostfna.northerneducationtrust.org;
    proxy_set_headerAccept-Encoding;
  
    client_max_body_size  10m;
    client_body_buffer_size  512k;

    proxy_connect_timeout  5;
    proxy_read_timeout    60;
    proxy_send_timeout    5;
    proxy_buffer_size      16k;
    proxy_buffers        464k;
    proxy_busy_buffers_size128k;

    proxy_hide_headerAlt-Svc;
    proxy_hide_headerCf-Cache-Status;
    proxy_hide_headerReport-To;
    proxy_hide_headerNel;
    proxy_hide_headerCf-Ray;
    proxy_hide_headerVary;
    proxy_hide_headerX-protocol;
    proxy_hide_headerStrict-Transport-Security;
    proxy_hide_headerX-Frame-Options;
    proxy_hide_headerX-Content-Type-Options;
    proxy_hide_headerX-XSS-Protection;

    proxy_ssl_server_nameon;

    sub_filterfna.northerneducationtrust.org你的域名;
    sub_filter_onceoff;
    sub_filter_typestext/javascriptapplication/jsonapplication/ld+jsonapplication/xml;
  }




网友回复:

引用:Showfom发表于2024-7-2717:14

正好没事做,帮你修好了,亲测有效,记得要用UK的IP,再不行的话你换个别的UK商家的IP试试,也可能...


网友回复:

引用:llyang发表于2024-7-2621:10

直接报告:ERR_TOO_MANY_REDIRECTS

添加proxy_redirectoff;也一样


网友回复:

引用:Showfom发表于2024-7-2717:14

正好没事做,帮你修好了,亲测有效,记得要用UK的IP,再不行的话你换个别的UK商家的IP试试,也可能...

0