当通过Heroku服务器访问Nginx反向代理超时请求,但从我的机器罚款

我有一个反向代理运行在EC2实例设置上,我打算使用它连接到客户端的临时环境,以便我们可以在应用程序与其网站上线之前检查它们之间的兼容性。

客户将我们的办公室和我们的Heroku盒子列入白名单。

如果我通过办公networking访问反向代理,那么Nginx的日志中就会显示请求,并且浏览器按照预期的方式通过反向代理加载该站点。 我也为我们的Heroku服务器设置了例外,但是请求每次都超时。

奇怪的是,在Nginx日志中没有任何东西出现 – 没有超时或其他失败的请求。

Heroku服务器具有以下静态IP:195.219.8.206,195.219.8.212

有人知道为什么会发生这种情况吗?

这是我的Nginxconfiguration:

server { listen 80; server_name company-staging-proxy.redant.cloud; proxy_redirect http://www.uat2prd.company.com http://company-staging-proxy.redant.cloud; proxy_redirect https://www.uat2prd.company.com https://company-staging-proxy.redant.cloud; location / { add_header Set-Cookie Experiment=FH; resolver 127.0.0.1; proxy_pass http://www.uat2prd.company.com; proxy_set_header Accept-Encoding ""; # sub_filter_types *; sub_filter 'www.uat2prd.company.com' 'company-staging-proxy.redant.cloud'; sub_filter 'www.c1.uat2prd.company.com' 'company-c1-staging-proxy.redant.cloud'; sub_filter 'www.c2.uat2prd.company.com' 'company-c2-staging-proxy.redant.cloud'; sub_filter_once off; proxy_set_header Set-Cookie Experiment=FH; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 443; server_name company-staging-proxy.redant.cloud; proxy_redirect https://www.uat2prd.company.com https://company-staging-proxy.redant.cloud; proxy_redirect http://www.uat2prd.company.com http://company-staging-proxy.redant.cloud; ssl_certificate /etc/nginx/domain.cert; ssl_certificate_key /etc/nginx/domain.key; ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl on; ssl_session_cache builtin:1000 shared:SSL:10m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers <-- deleted -->; ssl_prefer_server_ciphers on; location / { add_header Set-Cookie Experiment=FH; resolver 127.0.0.1; proxy_pass https://www.uat2prd.company.com; proxy_set_header Accept-Encoding ""; # proxy_ssl_session_reuse off; # sub_filter_types *; sub_filter 'www.uat2prd.company.com' 'company-staging-proxy.redant.cloud'; sub_filter 'www.c1.uat2prd.company.com' 'company-c1-staging-proxy.redant.cloud'; sub_filter 'www.c2.uat2prd.company.com' 'company-c2-staging-proxy.redant.cloud'; sub_filter_once off; proxy_set_header Set-Cookie Experiment=FH; proxy_set_header Host www.uat2prd.company.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 80; server_name company-c1-staging-proxy.redant.cloud; location / { proxy_pass http://195.219.8.206/; proxy_set_header Host www.c1.uat2prd.company.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 80; server_name company-c2-staging-proxy.redant.cloud; location / { proxy_pass http://195.219.8.206/; proxy_set_header Host www.c2.uat2prd.company.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 80; server_name hac-staging-proxy.redant.cloud; proxy_redirect http://www.uat2prd.companysubsidiary.com http://hac-staging-proxy.redant.cloud; proxy_redirect https://www.uat2prd.companysubsidiary.com https://hac-staging-proxy.redant.cloud; location / { add_header Set-Cookie Experiment=FH; resolver 127.0.0.1; proxy_pass http://www.uat2prd.companysubsidiary.com; proxy_set_header Accept-Encoding ""; # sub_filter_types *; sub_filter 'www.uat2prd.companysubsidiary.com' 'hac-staging-proxy.redant.cloud'; sub_filter 'www.c1.uat2prd.companysubsidiary.com' 'hac-c1-staging-proxy.redant.cloud'; sub_filter 'www.c2.uat2prd.companysubsidiary.com' 'hac-c2-staging-proxy.redant.cloud'; sub_filter_once off; proxy_set_header Set-Cookie Experiment=FH; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 443; server_name company-staging-proxy.redant.cloud; proxy_redirect https://www.uat2prd.companysubsidiary.com https://hac-staging-proxy.redant.cloud; proxy_redirect http://www.uat2prd.companysubsidiary.com http://hac-staging-proxy.redant.cloud; ssl_certificate /etc/nginx/domain.cert; ssl_certificate_key /etc/nginx/domain.key; ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl on; ssl_session_cache builtin:1000 shared:SSL:10m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:ECDHE-RSA-AES128-GCM-SHA256:AES256+EECDH:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"; ssl_prefer_server_ciphers on; location / { add_header Set-Cookie Experiment=FH; resolver 127.0.0.1; proxy_pass https://www.uat2prd.companysubsidiary.com; proxy_set_header Accept-Encoding ""; # proxy_ssl_session_reuse off; # sub_filter_types *; sub_filter 'www.uat2prd.companysubsidiary.com' 'company-staging-proxy.redant.cloud'; sub_filter 'www.c1.uat2prd.companysubsidiary.com' 'hac-c1-staging-proxy.redant.cloud'; sub_filter 'www.c2.uat2prd.companysubsidiary.com' 'hac-c2-staging-proxy.redant.cloud'; sub_filter_once off; proxy_set_header Set-Cookie Experiment=FH; proxy_set_header Host www.uat2prd.companysubsidiary.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 80; server_name hac-c1-staging-proxy.redant.cloud; location / { proxy_pass http://195.219.8.212/; proxy_set_header Host www.c1.uat2prd.companysubsidiary.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } server { listen 80; server_name hac-c2-staging-proxy.redant.cloud; location / { proxy_pass http://195.219.8.212/; proxy_set_header Host www.c2.uat2prd.companysubsidiary.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; } } 

而且我在etc / hosts文件中添加了以下几行:

 195.219.8.206 www.uat2prd.company.com www.c1.uat2prd.company.com www.c2.uat2prd.company.com 195.219.8.212 www.uat2prd.companysubsidiary.com www.c1.uat2prd.companysubsidiary.com www.c2.uat2prd.companysubsidiary.com 

任何帮助将不胜感激!