如何在Nginx反向代理后面设置MongoDB [英] How to setup MongoDB behind Nginx Reverse Proxy

问题描述

大家好，我正在尝试将Nginx设置为用于访问MongoDB数据库的反向代理.默认情况下，Mongo监听27017端口.我想做的是通过nginx重定向一个主机名，例如mongodb.mysite.com，并将其传递给mongodb服务器.这样，就可以从外部网络关闭我已知的27017端口，并像我给的示例一样从隐藏的url访问我的数据库.

Hi guys I am trying to setup Nginx as a reverse proxy for accessing a MongoDB Database. By default Mongo listens to 27017 port. What I want to do, is redirect a hostname for example mongodb.mysite.com through nginx and pass it to mongodb server. In that way from the outside network I will have my known 27017 port closed, and access my db from a hidden url like the example I gave.

所以我正在尝试使用此配置来设置Nginx:

So I am trying to setup Nginx with this configuration :

server {
        listen 80;
        server_name mongo.mysite.com;
        gzip off;       

        location / {
            proxy_pass http://127.0.0.1:27017;
            proxy_redirect off;
            proxy_buffering off;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
        }
    }

因此，在遇到此问题后，我尝试使用命令mongo mongo.mysite.com:80从cmd连接mongo shell，然后返回以下错误:

So after having this I try to connect with mongo shell from my cmd with the command mongo mongo.mysite.com:80 and I get back the following error:

2015-08-06T13:44:32.670+0300 I NETWORK  recv(): message len 1347703880 is invalid. Min 16 Max: 48000000
2015-08-06T13:44:32.670+0300 I NETWORK  DBClientCursor::init call() failed
2015-08-06T13:44:32.674+0300 E QUERY    Error: DBClientBase::findN: transport error: mongo.therminate.com:80 ns: admin.$cmd query: { whatsmyuri: 1 }
    at connect (src/mongo/shell/mongo.js:181:14)
    at (connect):1:6 at src/mongo/shell/mongo.js:181
exception: connect failed

同样在Nginx访问日志中，我得到了:

Also in the Nginx access log I get this:

94.66.184.128 - - [06/Aug/2015:10:44:32 +0000] "<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\x01\x00\x00\x00\x15\x00\x00\x00\x10whatsmyuri\x00\x01\x00\x00\x00\x00" 400 172 "-" "-"

有人知道吗，这是怎么回事?谢谢！

Has anyone got an idea, what is going wrong here? Thanks!

推荐答案

我把这个问题留在了后面，但是在完成一些工作之后，我不得不再次面对这个问题，这次解决方案浮现在我的脑海！

I left this behind, but after some work done, I had to face this problem again and the solution popped in my mind this time!

NGINX本质上是一个HTTP服务器，因此通过以上述方式设置重定向和代理，它将所有通信都包装在HTTP协议中.因此发生的错误是，当Mongo期待原始TCP流量时，它正在获取HTTP流量.

NGINX is basically an HTTP server, so by setting redirects and proxies the above way, it wraps all communication in HTTP protocol. So the error that is happening, is that while Mongo is expecting Raw TCP traffic, it is getting HTTP traffic.

因此，解决方案是使用NGINX的新stream module来处理原始TCP流量，并将上游服务器设置为指向mongodb实例.

So the solution to this is to use NGINX's new stream module that is used for handling raw TCP traffic and setup your upstream server to point to mongodb instance.

更多信息: NGINX流模块

这篇关于如何在Nginx反向代理后面设置MongoDB的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！