Nginx配置Https访问，tomcat无法正确获取schema的问题

最新推荐文章于 2025-06-28 09:11:31 发布

若鱼1919

最新推荐文章于 2025-06-28 09:11:31 发布

阅读量7k

点赞数

CC 4.0 BY-SA版权

分类专栏： java 文章标签： https nginx tomcat

本文链接：https://blog.youkuaiyun.com/goldenfish1919/article/details/78815192

java 专栏收录该内容

159 篇文章

订阅专栏

本文介绍如何使用Nginx配置HTTPS访问并作为Tomcat的反向代理，解决redirect后的schema变为HTTP的问题及request.getSchema()始终返回HTTP的问题。通过配置Nginx的proxy_set_header及Tomcat的RemoteIpValve组件实现正确的协议转发。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Nginx配置Https访问，反向代理tomcat，发现两个问题：

（1）redirect之后的schema全变成了http。

（2）request.getSchema()全部返回http。

对于（1）解决办法：参考：http://blog.youkuaiyun.com/mr_smile2014/article/details/51701878

server {  
    listen 80 default_server;  
  
    location / {  
        proxy_pass http://127.0.0.1:8080;  
        proxy_redirect http:// $scheme://;  
    }  
}

对于（2）的解决办法：参考：http://feitianbenyue.iteye.com/blog/2056357

nginx上配置：

proxy_set_header       Host $host;  
proxy_set_header  X-Real-IP  $remote_addr;  
proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;  
proxy_set_header X-Forwarded-Proto  $scheme;

tomcat上配置：

<Engine >
	<Valve className="org.apache.catalina.valves.RemoteIpValve"  
	remoteIpHeader="X-Forwarded-For"  
	protocolHeader="X-Forwarded-Proto"  
	protocolHeaderHttpsValue="https"/> 
</Engine >

重启，over！

关于 RemoteIpValve,有兴趣的同学可以阅读下：http://tomcat.apache.org/tomcat-6.0-doc/api/org/apache/catalina/valves/RemoteIpValve.html
Tomcat port of mod_remoteip, this valve replaces the apparent client remote IP address and hostname for the request with the IP address list presented by a proxy or a load balancer via a request headers (e.g. "X-Forwarded-For").
Another feature of this valve is to replace the apparent scheme (http/https) and server port with the scheme presented by a proxy or a load balancer via a request header (e.g. "X-Forwarded-Proto").