在连接到上游客户端时不加载上游流

Question

我在我的本地网络上用两个docker apache实例设置了一个负载均衡器。我确认的两个节点都已启动，可以在单独的端口8081和8082上查看，但是当在apache中尝试使用上游时，我得到了502坏网关错误。

我已经尝试将/etc/nginx目录的权限更改为nginx用户。我已经尝试重新启动apache实例和nginx服务。当我将server_name更改为localhost而不是服务器主机的ip地址时，我可以从本地网络上的另一台机器在web浏览器上看到默认的nginx服务器页面。如果我把它改回IP地址，我会得到坏的网关错误。

我已将Default.conf与站点进行了符号链接-可用

    [root@www nginx]# vi sites-enabled/default.conf
    upstream containerapp {
        server 192.168.0.42:8081;
        server 192.168.0.42:8082;
     } 

      server {
        listen *:80;

        server_name localhost;
        index index.html index.htm index.php;

        access_log /var/log/nginx/localweb.log;
        error_log /var/log/nginx/localerr.log;

        location /{
                proxy_pass http://containerapp;
        }
     }

    [root@www nginx]# cat /var/log/nginx/localerr.log
    referrer: "http://192.168.0.42/"
    2019/01/04 20:15:54 [error] 16310#0: *1 no live upstreams while 
    connecting 
    to upstream, client: 192.168.0.18, server: 192.168.0.42, request: 
    "GET / HTTP/1.1", upstream: "http://containerapp/", 
    host:"192.168.0.42"
    2019/01/04 20:15:54 [error] 16310#0: *1 no live upstreams while 
    connecting 
    to upstream, client: 192.168.0.18, server: 192.168.0.42, request: 
    "GET 
    /favicon.ico HTTP/1.1", upstream: "http://containerapp/favicon.ico", 
    host: 
    "192.168.0.42", referrer: "http://192.168.0.42/"

这就是我的nginx.conf的样子

 nginx.conf
        user nginx;
        worker_processes auto;
        error_log /var/log/nginx/error.log;
        pid /run/nginx.pid;

    # Load dynamic modules. See /usr/share/nginx/README.dynamic.
    include /usr/share/nginx/modules/*.conf;

    events {
        worker_connections 1024;
    }

    http {
        log_format  main  '$remote_addr - $remote_user [$time_local] 
   "$request" '    
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';

        access_log  /var/log/nginx/access.log  main;

        sendfile            on;
        tcp_nopush          on;
        tcp_nodelay         on;
        keepalive_timeout   65;
        types_hash_max_size 2048;
        include             /etc/nginx/mime.types;
        default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d 
    directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    #include /etc/nginx/conf.d/*.conf;
    server {
       listen       80 default_server;
       listen       [::]:80 default_server;
       server_name  _;
       root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        #include /etc/nginx/default.d/*.conf;

       location / {
       }

       error_page 404 /404.html;
          location = /40x.html {
       }

       error_page 500 502 503 504 /50x.html;
           location = /50x.html {
       }
    }

    include /etc/nginx/sites-enabled/*;
    }

我可以点击http://192.168.0.42，它将轮询到http://192.168.0.42:8081或http://192.168.0.42:8082节点

Answer 1

我发现解决这个问题的方法是selinux相关的。这里还有一个我用这个命令找到的帖子

setsebool-p httpd_can_network_connect1

链接到原始问题，以防将来有人在连接上游时遇到此问题（13：权限被拒绝）:[nginx]