BEST NGINX REVERSE PROXY CONF

[geforce]

best nginx reverse proxy conf for a vps , zaps fast and leaks no main ip when runninng epg download , channnel download, solid script tunned by myself

user www-data;
worker_processes auto; ###change to cores on server
pid /run/nginx.pid;

events {
        worker_connections 1024; ### adjust if needed
}

http {
        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 10;
        keepalive_requests 100000;
        types_hash_max_size 2048;
        server_tokens off;
        server_names_hash_bucket_size 128;
        server_name_in_redirect off;
        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        limit_req_zone $binary_remote_addr zone=one:10m rate=3r/m;
        gzip on;
        gzip_disable "msie6";
        gzip_proxied any;
        gzip_comp_level 2;
        gzip_http_version 1.1;
        gzip_min_length 1100;
        gzip_buffers 16 8k;
        log_format main "888821_188888 $remote_addr+++$msec+++$request+++$status+++$host - $http_user_agent+++$time_local";
        client_header_timeout 12;

server {
        listen ###PORTS###;;
        listen ###PORTS###;;
        listen ###PORTS###;;
        listen ###PORTS###;
        server_name ###VPS IP###;





        access_log syslog:server=127.0.0.1,facility=local6,severity=info main;
        root /var/www/html;
        # Add index.php to the list if you are using PHP
        index index.html index.htm default.html default.htm;


location / {
      proxy_pass http://main ip:port;
      proxy_redirect off;
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Original-Scheme $scheme;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_pass_request_headers on;
      proxy_max_temp_file_size 0;
      client_max_body_size 10m;
      client_body_buffer_size 128k;
      client_body_timeout 12;
      keepalive_timeout 15;
      send_timeout 10;
      proxy_connect_timeout 90;
      proxy_send_timeout 90;
      proxy_read_timeout 90;
      proxy_buffer_size 4k;
      proxy_buffers 4 32k;
      proxy_busy_buffers_size 64k;
      proxy_temp_file_write_size 64k;
        }
        }
        }

 

[kaka_05]

for what help this config proxy , i need to know more about it ?

 

[jeff]

I just can't reproduce the channel through the proxy, he downloaded the line, but it doesn't reproduce in ts. Does anyone know why?

 

[redhat]

I just can't reproduce the channel through the proxy, he downloaded the line, but it doesn't reproduce in ts. Does anyone know why?

I am sure @geforce will help you

 

[redhat]

Can't download the Channel list with this config:

user www-data;
worker_processes auto; ###change to cores on server
pid /run/nginx.pid;

events {
worker_connections 1024; ### adjust if needed
}

http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 10;
keepalive_requests 100000;
types_hash_max_size 2048;
server_tokens off;
server_names_hash_bucket_size 128;
server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
limit_req_zone $binary_remote_addr zone=one:10m rate=3r/m;
gzip on;
gzip_disable "msie6";
gzip_proxied any;
gzip_comp_level 2;
gzip_http_version 1.1;
gzip_min_length 1100;
gzip_buffers 16 8k;
log_format main "888821_188888 $remote_addr+++$msec+++$request+++$status+++$host - $http_user_agent+++$time_local";
client_header_timeout 12;

server {
listen 25500;
listen 55555;
listen 25463;
listen 25462;
server_name xxx.xxx.xxx.xxx;


access_log syslog:server=127.0.0.1,facility=local6,severity=info main;
root /var/www/html;
# Add index.php to the list if you are using PHP
index index.html index.htm default.html default.htm;


location / {
proxy_pass http://xxx.xxx.xxx.xxx:25500;
proxy_redirect off;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Original-Scheme $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass_request_headers on;
proxy_max_temp_file_size 0;
client_max_body_size 10m;
client_body_buffer_size 128k;
client_body_timeout 12;
keepalive_timeout 15;
send_timeout 10;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
}
}

The Real IP's has been changed wit xxx

 

[Delta19]

And how to use any more info wil be great

 

[jathe]

any configuration for https proxy? it does not work with https links or lines

 

[chris]

if you Cloudflare dont need this also cloudflare is much better than this

 

[alex1010]

if you Cloudflare dont need this also cloudflare is much better than this

Yeah but CF don't allow streaming content, then your dns will be banned

 

[dishjuarez]

some kind of personal configuration to configure in this file?

 

[geforce]

Can't download the Channel list with this config:

user www-data;
worker_processes auto; ###change to cores on server
pid /run/nginx.pid;

events {
worker_connections 1024; ### adjust if needed
}

http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 10;
keepalive_requests 100000;
types_hash_max_size 2048;
server_tokens off;
server_names_hash_bucket_size 128;
server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
limit_req_zone $binary_remote_addr zone=one:10m rate=3r/m;
gzip on;
gzip_disable "msie6";
gzip_proxied any;
gzip_comp_level 2;
gzip_http_version 1.1;
gzip_min_length 1100;
gzip_buffers 16 8k;
log_format main "888821_188888 $remote_addr+++$msec+++$request+++$status+++$host - $http_user_agent+++$time_local";
client_header_timeout 12;

server {
listen 25500;
listen 55555;
listen 25463;
listen 25462;
server_name xxx.xxx.xxx.xxx;


access_log syslog:server=127.0.0.1,facility=local6,severity=info main;
root /var/www/html;
# Add index.php to the list if you are using PHP
index index.html index.htm default.html default.htm;


location / {
proxy_pass http://xxx.xxx.xxx.xxx:25500;
proxy_redirect off;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Original-Scheme $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass_request_headers on;
proxy_max_temp_file_size 0;
client_max_body_size 10m;
client_body_buffer_size 128k;
client_body_timeout 12;
keepalive_timeout 15;
send_timeout 10;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
}
}

I just can't reproduce the channel through the proxy, he downloaded the line, but it doesn't reproduce in ts. Does anyone know why?

Sorry for the delayed response, on your main server add this to the nginx.conf

set_real_ip_from PROXYIP/32;
real_ip_header X-Forwarded-For;
real_ip_recursive on;


under where it starts
server {

Also add the listen ports the proxy server is using so eg listen 8080, listen 3200, ect ect
The Real IP's has been changed wit xxx

View attachment 1151

Sorry for the delayed response, on your main server add this to the nginx.conf

set_real_ip_from PROXYIP/32;
real_ip_header X-Forwarded-For;
real_ip_recursive on;


under where it starts
server {

Also add the listen ports the proxy server is using so eg listen 8080, listen 3200, ect ect

 

[SN7]

thanks bro
for share

 

[workline17]

Hi,
First all thanks!!!!
anyone wondering if the Vps is ome for it? i mean almost all the vps has a 1gbs will be enough for the amount of request? i am talking for main lb side.
thanks ?

 

[extacy]

You' re great. Thanks

 

[Tebow99]

best nginx reverse proxy conf for a vps , zaps fast and leaks no main ip when runninng epg download , channnel download, solid script tunned by myself

user www-data;
worker_processes auto; ###change to cores on server
pid /run/nginx.pid;

events {
        worker_connections 1024; ### adjust if needed
}

http {
        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 10;
        keepalive_requests 100000;
        types_hash_max_size 2048;
        server_tokens off;
        server_names_hash_bucket_size 128;
        server_name_in_redirect off;
        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        limit_req_zone $binary_remote_addr zone=one:10m rate=3r/m;
        gzip on;
        gzip_disable "msie6";
        gzip_proxied any;
        gzip_comp_level 2;
        gzip_http_version 1.1;
        gzip_min_length 1100;
        gzip_buffers 16 8k;
        log_format main "888821_188888 $remote_addr+++$msec+++$request+++$status+++$host - $http_user_agent+++$time_local";
        client_header_timeout 12;

server {
        listen ###PORTS###;;
        listen ###PORTS###;;
        listen ###PORTS###;;
        listen ###PORTS###;
        server_name ###VPS IP###;





        access_log syslog:server=127.0.0.1,facility=local6,severity=info main;
        root /var/www/html;
        # Add index.php to the list if you are using PHP
        index index.html index.htm default.html default.htm;


location / {
      proxy_pass http://main ip:port;
      proxy_redirect off;
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Original-Scheme $scheme;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_pass_request_headers on;
      proxy_max_temp_file_size 0;
      client_max_body_size 10m;
      client_body_buffer_size 128k;
      client_body_timeout 12;
      keepalive_timeout 15;
      send_timeout 10;
      proxy_connect_timeout 90;
      proxy_send_timeout 90;
      proxy_read_timeout 90;
      proxy_buffer_size 4k;
      proxy_buffers 4 32k;
      proxy_busy_buffers_size 64k;
      proxy_temp_file_write_size 64k;
        }
        }
        }

sendfile off, tcp_nopush off, tcp_nodelay on, proxy_buffering off and you're missing an entire SSL block. If you're running http, someone somewhere is sniffing away.