#### **nginx+tomcat**
nginx配置:
```bash
proxy_set_header Host $host;
proxy_set_header Cookie $http_cookie;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://127.0.0.1:8181;
```
tomcat配置:
```xml
<Valve className="org.apache.catalina.valves.RemoteIpValve"
remoteIpHeader="X-Forwarded-For"
protocolHeader="X-Forwarded-Proto"
internalProxies="172\.16.\d{1,3}\.\d{1,3}" #注意坑:如果使用tomcat7，并且内网ip是172网段需要加上internalProxies, 官网解释：http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/RemoteIpValve.html
protocolHeaderHttpsValue="https"/>
```
internalProxies参考:http://blog.inford.net/doc/171
#### **阿里云SLB+nginx+tomcat**
阿里云SLB配置:
nginx配置:
```bash
proxy_set_header Host $host;
proxy_set_header Cookie $http_cookie;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto; #http_x_forwarded_proto参数为SLB传过来的参数
proxy_pass http://127.0.0.1:8181;
```
tomcat配置:
```xml
<Valve className="org.apache.catalina.valves.RemoteIpValve"
remoteIpHeader="X-Forwarded-For"
protocolHeader="X-Forwarded-Proto"
protocolHeaderHttpsValue="https"/>
```
#### 上面的配置，一般的访问没有问题，当页面发生302重定向会请求http的问题，出现 requested an insecure XMLHttpRequest
nginx配置(nginx+tomcat)
```bash
proxy_redirect http:// $scheme://; #302重定向请求的http协议转发到$scheme
```
nginx配置(阿里云SLB+nginx+tomcat)
```bash
proxy_redirect http:// $http_x_forwarded_proto://; #302重定向请求的http协议转发到$http_x_forwarded_proto
```
