在Amazon Beanstalk上配置安全Web套接字

Question

我已经在Amazon Beanstalk上部署了两个Node.js应用程序：一个是使用React开发的前端，并使用serve运行，另一个是带有Web套接字处理程序的MQTT代理 。 负载均衡器为nginx 1.12.1，具有以下配置（写在后端项目的.ebextension文件夹中）：

  map $http_upgrade $connection_upgrade {
      default upgrade;
      '' close;
  }

  upstream websocket {
      server 127.0.0.1:5000;
  }

  server {
    listen 8080;

    if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2})") {
        set $year $1;
        set $month $2;
        set $day $3;
        set $hour $4;
    }
    access_log /var/log/nginx/healthd/application.log.$year-$month-$day-$hour healthd;
    access_log  /var/log/nginx/access.log  main;
    large_client_header_buffers 8 32k;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;
        proxy_pass  "http://127.0.0.1:3003";

        proxy_redirect off;

        # Socket.IO Support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_pass_request_headers      on;
    }

    location /subscriptions {
        proxy_pass http://websocket;
        proxy_http_version 1.1;
        proxy_set_header Host $http_host;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    gzip on;
    gzip_comp_level 4;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
  }

前端应该能够使用wss://mqtt_url/subscriptions ，但是无论使用wss://mqtt_url/subscriptions配置， WebSocket is closed before the connection is established ，我总是会WebSocket is closed before the connection is established 。 此配置似乎可以解决不安全的Web套接字消耗问题。 等待连接的服务器只是一个简单的HTTP服务器，如下所示：

const server = createServer();

server.listen(5000, '0.0.0.0', () =>
  new SubscriptionServer({
        execute,
        subscribe,
        schema,
        onConnect: async (connectionParams) => {

        },
  }, {
        server,
        path: '/subscriptions',
  }));

Beanstalk负载平衡的配置如下：

• 端口：端口80上的TCP
• 端口：80
• 安全端口：端口443上的SSL安全
• 端口：443
• 运行状况：端口80上的TCP ping
• 跨区域负载均衡已启用
• 启用连接耗用200秒超时

搜寻信息，我仅能看到选择TCP / SSL作为协议是很好的，但是除此之外，还不清楚如何在此处配置WSS。 任何建议将不胜感激！ 谢谢。

Answer 1

尝试将其添加到您的订阅位置块

proxy_read_timeout 86400;