配置

nginx.conf

@@ -2,6 +2,8 @@
 upstream gateway_load_balance {
     server 139.224.150.79:9010;  # 管理节点服务器上的网关实例
     server 139.224.149.150:9011;  # 工作节点服务器上的网关实例
+    ip_hash;  # ✅ 新增：会话粘滞，避免同一用户请求分发到不同网关实例
+    keepalive 32;  # ✅ 新增：保持长连接，提升代理性能
 }
 
 server {
@@ -11,59 +13,56 @@ server {
     root /usr/share/nginx/html;
     index index.html;
 
+    # ✅ 核心新增：拦截包含undefined的异常路径，避免无效请求穿透
+    if ($request_uri ~* 'undefined') {
+        rewrite ^(.*)/undefined+(.*)$ $2 permanent;  # 清理路径中的undefined片段
+        rewrite ^/undefined.*$ / permanent;  # 兜底重定向到根路径
+    }
+
     # 静态资源处理 - 必须放在最前面
     location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot|map)$ {
-        # ✅ 关键：添加 try_files 指令
         try_files $uri =404;
 
-        # 确保静态资源有正确的过期时间和缓存头
+        # 静态资源缓存优化
         expires 1y;
         add_header Cache-Control "public, immutable";
 
-        # 为静态资源添加CORS头
+        # ✅ 精简：移除重复的OPTIONS处理（统一在server级处理更高效）
         add_header 'Access-Control-Allow-Origin' '*' always;
         add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
         add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization' always;
-
-        # 处理OPTIONS请求（CORS预检）
-        if ($request_method = 'OPTIONS') {
-            add_header 'Access-Control-Allow-Origin' '*';
-            add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS';
-            add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
-            add_header 'Access-Control-Max-Age' 1728000;
-            add_header 'Content-Length' 0;
-            add_header 'Content-Type' 'text/plain; charset=UTF-8';
-            return 204;
-        }
     }
 
     # 代理API请求到网关服务
     location /api/ {
-        # 负载均衡到两个网关服务实例
         proxy_pass http://gateway_load_balance/;
+        rewrite ^/api/(.*)$ /$1 break;  # ✅ 新增：确保/api前缀被正确移除，避免路径错误
 
         # 代理设置
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Authorization $http_authorization;  # ✅ 新增：传递认证头
 
         # 超时设置
         proxy_connect_timeout 30s;
         proxy_read_timeout 30s;
         proxy_send_timeout 30s;
 
-        # 缓冲区设置
+        # 缓冲区设置（优化）
         proxy_buffering on;
-        proxy_buffer_size 4k;
-        proxy_buffers 8 4k;
+        proxy_buffer_size 16k;  # ✅ 调整：提升缓冲区大小，适配API响应
+        proxy_buffers 8 16k;
 
-        # CORS 头
+        # CORS头（精简）
         add_header 'Access-Control-Allow-Origin' '*' always;
         add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
         add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization' always;
+    }
 
-        # 处理OPTIONS请求（CORS预检）
+    # ✅ 新增：统一处理所有OPTIONS预检请求（避免重复配置）
+    location / {
         if ($request_method = 'OPTIONS') {
             add_header 'Access-Control-Allow-Origin' '*';
             add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS';
@@ -86,9 +85,13 @@ server {
     location / {
         try_files $uri $uri/ /index.html; # 处理Vue路由history模式
 
-        # 为页面添加CORS头
+        # CORS头
         add_header 'Access-Control-Allow-Origin' '*' always;
         add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
         add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization' always;
     }
+
+    # ✅ 新增：日志配置（便于排查undefined路径等问题）
+    access_log /var/log/nginx/csf-front-access.log main;
+    error_log /var/log/nginx/csf-front-error.log warn;
 }
\ No newline at end of file