尝试通过 NGINX 和 uWSGI 连接到 WebSocket Flask 服务器时出现 400 响应代码

Question

我正在尝试设置一个支持常规 API 调用和 WebSocket 连接的 Flask 服务器。 所有流量都通过 NGINX 负载均衡器、NGINX 反向代理进行路由，然后认为 uWSGI 以皇帝模式运行，有 2 个 vassals - 1 个用于常规 API，第二个用于 WebSockets。 与第一个的所有连接似乎都按预期工作。 当连接到第二个时，一些连接会通过，返回 200（带有轮询和 websockets），但大多数情况下它们返回 400。

NGINX 反向代理配置：

upstream ws_server {
    server unix:/home/app_ws.sock fail_timeout=0;
}

location /socket.io {
    include uwsgi_params;
    uwsgi_read_timeout 60s;
    uwsgi_send_timeout 60s;
    uwsgi_connect_timeout 60s;
    proxy_read_timeout 60s;
    proxy_http_version 1.1;
    proxy_buffering off;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
    uwsgi_ignore_client_abort on;

    uwsgi_pass ws_server;
}

NGINX 负载均衡器配置

server {
    listen 80;
    server_name *********;

    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.1.1.0/24;

    proxy_http_version 1.1;
    proxy_set_header Connection "";
    proxy_set_header Accept-Encoding "";

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_buffering off;
    proxy_busy_buffers_size 128k;
    proxy_max_temp_file_size 2048m;
    proxy_temp_file_write_size 128k;

    proxy_buffer_size  128k;
    proxy_buffers 100  128k;

    location / {
        proxy_pass http://u2me-python-dev;
    }

uWSGI 附庸配置：

callable = app
need-app = true
chdir = /home/site/
chmod-socket = 666
cpu-affinity = 1
die-on-term = true
disable-logging = true
enable-threads = true

home = /home/.environments/site
lazy-apps = true
listen = 1024
master = true
pidfile = /home/app_ws_uwsgi
processes = 1
http-websockets = true
procname = u2me.andromeda-ws
socket =/home/app_ws.sock
threads = 1
worker-reload-mercy = 30
wsgi-file = wsgi.py

我曾尝试在 NGINX 负载均衡器中设置相同的“升级”设置，但只导致 502。

NGINX 错误日志

2019/08/01 15:33:59 [error] 484#0: *610 upstream prematurely closed connection while reading response header from upstream, client: 46.76.103.213, server: *********, request: "GET /socket.io/?EIO=3&transport=polling&t=MnDOnSk HTTP/1.1", upstream: "uwsgi://unix:/home/app_ws.sock:", host: "*********", referrer: "*********"

NGINX 访问日志

46.76.103.213 - - [01/Aug/2019:16:26:29 +0200] "POST /socket.io/?EIO=3&transport=polling&t=MnDadM4&sid=112de3f4170f4db9ad55308b2ca1778d HTTP/1.1" 400 21 "*********" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
46.76.103.213 - - [01/Aug/2019:16:26:29 +0200] "GET /socket.io/?EIO=3&transport=websocket&sid=112de3f4170f4db9ad55308b2ca1778d HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
46.76.103.213 - - [01/Aug/2019:16:26:29 +0200] "GET /socket.io/?EIO=3&transport=polling&t=MnDafi3 HTTP/1.1" 200 130 "*********" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
46.76.103.213 - - [01/Aug/2019:16:26:29 +0200] "GET /socket.io/?EIO=3&transport=polling&t=MnDaklK HTTP/1.1" 200 130 "*********" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"

Answer 1

您需要在您的 uWSGI 配置中直接启用gevent事件循环。

添加第一行：

gevent = 100

callable = app
need-app = true
chdir = /home/site/
chmod-socket = 666
cpu-affinity = 1
die-on-term = true
disable-logging = true
enable-threads = true

home = /home/.environments/site
lazy-apps = true
listen = 1024
master = true
pidfile = /home/app_ws_uwsgi
processes = 1
http-websockets = true
procname = u2me.andromeda-ws
socket =/home/app_ws.sock
threads = 1
worker-reload-mercy = 30
wsgi-file = wsgi.py

gevent=N意味着将使用 N 个异步内核（ doc ）。

但首先，您需要将它作为包安装到您的应用程序解释器中：

pip install gevent

请注意，您需要安装支持 OpenSSL 的uwsgi 。 否则， uwsgi会抛出错误。 要启用 OpenSSL：

1. 卸载uwsgi : pip uninstall uwsgi
2. 安装 OpenSSL 开发库，例如对于 Ubuntu： sudo apt-get install libssl-dev
3. 安装uwsgi ： pip install uwsgi 。

如果您已经在不同的位置安装了 OpenSSL 库，您可能会发现此讨论很有用。