Sign inSign up

bingsin/nginx_quic

By bingsin

•Updated about 6 years ago

nginx_1.18.0_quic

Image
1

244

bingsin/nginx_quic repository overview

⁠这是基于nginx-1.18.0构建的nginx_quic版本

⁠还在测试中。

通过修改ymuski/nginx-quic的镜像构建而成

精简了nginx.conf

新增conf目录。/etc/nginx/conf

在conf目录下，请准备一个nginx的配置文件*.conf。挂载到/etc/nginx/conf

其目的是，将vhost配置从nginx.conf中独立出来。新建一个conf文件夹专门存放vhost配置信息。免得一直去修改nginx.conf文件

⁠启用镜像
docker run -idt \
-p 80:80 -p 443:443/tcp -p 443:443/udp \
-v /nginx_conf:/etc/nginx/conf \
--name nginx_quic \
bingsin/nginx_quic:latest
⁠nginx配置文件写法如下
server { 
listen 443 quic reuseport;   

listen 443 ssl http2;

server_name  localhost;

ssl_certificate  /path/to/your.crt;

ssl_certificate_key  /path/to/your.key;

ssl_protocols TLSv1.2 TLSv1.3;

ssl_ciphers [TLS13+AESGCM+AES128|TLS13+CHACHA20]:TLS13+AESGCM+AES256:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA;

ssl_prefer_server_ciphers on;

ssl_early_data on;

ssl_ecdh_curve X25519:P-256:P-384;

ssl_session_cache shared:SSL:10m;

ssl_session_timeout 10m;

add_header alt-svc 'h3-27=":443"; ma=86400, h3-25=":443"; ma=86400, h3-24=":443"; ma=86400, h3-23=":443"; ma=86400';

}

注意！nginx配置文件一定要正确！

请到这个网址检测https://http3check.net⁠

Tag summary

Content type

Image

Digest

Size

37.8 MB

Last updated

over 6 years ago

docker pull bingsin/nginx_quic