一、背景

cdn.jsdelivr.net 被墙了，遂利用nginx反向代理搭建一个镜像站

二、实现

nginx主要配置如下：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
http {

    # 缓存路径请根据需要更改
    proxy_cache_path /usr/local/nginx/jsdelivr levels=1:2 use_temp_path=off keys_zone=jsdelivr:300m inactive=30d max_size=30g;
  
    server {
        listen 443 ssl;
        listen [::]:443 ssl;
        ssl_certificate 私钥路径;
        ssl_certificate_key 公钥路径;
        ssl_session_timeout 1d;
        ssl_session_cache shared:MozSSL:10m;
        ssl_session_tickets off;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
        ssl_prefer_server_ciphers on;
        
        server_name jsd.notming.com;

        location / {
            proxy_pass https://cdn.jsdelivr.net;
            proxy_set_header Host $proxy_host;
            proxy_set_header Accept-Encoding '';
            proxy_ssl_server_name on;
            proxy_ssl_name $proxy_host;
            proxy_redirect / /;
            # Proxy Cache
            proxy_cache jsdelivr;
            proxy_cache_lock on;
            proxy_cache_lock_timeout 15s;
            proxy_cache_use_stale updating;
            proxy_cache_background_update on;
            proxy_cache_key $host$request_uri;
            proxy_cache_valid 200 301 302 30d;
            proxy_cache_valid 500 501 502 503 15s;
            proxy_cache_valid any 5m;
            # Replace Domain
            sub_filter_once off;
            sub_filter_types application/javascript application/json text/xml text/css;
            sub_filter '$proxy_host' '$host';
        }
    }

}