为什么nginx https上行不起作用而proxy_pass proxy_pass起作用？

Question

1.conf

server {
  listen 7070;
  server_name localhost;
  location / {
    proxy_redirect off;
    proxy_pass https://baidu;
  }
}

upstream baidu {
   server www.baidu.com;
}

2.conf

server {
  listen 7070;
  server_name localhost;
  location / {
    proxy_redirect off;
    proxy_pass https://www.baidu.com;
  }
}

为什么2.conf可以工作，但1.conf不能代理传递给https://baidu.com？

它会得到502 Bad Gateway错误

Answer 1

如果您正在使用SSL，则必须在您的上游指令中向服务器添加端口443：https://docs.nginx.com/nginx/admin-guide/security-controls/securing-http-traffic-upstream/

server {
  listen 7070;
  server_name localhost;
  
  location / {
    proxy_redirect off;
    proxy_pass https://baidu;
  }
}

upstream baidu {
  server www.baidu.com:443;
}