龙卷风nginx websockets握手400错误

Question

问题是与websocket连接，由nginx从tornado/tornado-sockjs代理sockjs客户端在浏览器中。没有nginx（在本地主机上）的东西正常工作。在浏览器

错误消息，当加载页面时（sockjs连接初始化）：

WebSocket connection to 'ws://my-domain.com/ws/844/blvz89pq/websocket' failed: Error during WebSocket handshake: Unexpected response code: 400 

定制的相关部分nginx的配置：$ connection_upgrade的

location /ws/ { 
    proxy_pass   http://127.0.0.1:8888; 

    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection $connection_upgrade; 

    proxy_redirect  off; 
    proxy_set_header Host    $host; 
    proxy_set_header X-Real-IP  $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
} 

值从nginx.conf：

map $http_upgrade $connection_upgrade { 
     default upgrade; 
     ''  close; 
    } 

看起来像tornado-sockjs返回400的情况下，如果Upgrade标题未设置为'websocket'（code）。事实上，在第46行的if之前打印标题给我们提供了标题Connection=close的值和根本不存在的Upgrade。

价值dict(self.request.headers)

{ 
    "Accept-Language": "en-US,en;q=0.8,ru;q=0.6", 
    "Accept-Encoding": "gzip, deflate, sdch", 
    "Sec-Websocket-Key": "*******", 
    "Connection": "close", 
    "X-Real-Ip": "172.17.0.1", 
    "Origin": "http://my-domain.com", 
    "Sec-Websocket-Extensions": "permessage-deflate; client_max_window_bits", 
    "X-Forwarded-For": "172.17.0.1", 
    "Sec-Websocket-Version": "13", 
    "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36", 
    "Host": "my-domain.com", 
    "X-Forwarded-Proto": "http", 
    "Cookie": "_ym_uid=1456149826627418608; sessionid=0pn2knqey7raw7w4dst9d7vqvtvsmook; csrftoken=0o1lqSW4XCZvvlvYtN4S7Stt53AyKWf6; __utmx=147844469.bAGHuGeARZy_vppa6db8lg$115132382-10:5.mu9KcCiZSDepsLZ385hDXA$117448007-11:0; __utmxx=147844469.bAGHuGeARZy_vppa6db8lg$115132382-10:1456307221:15552000.mu9KcCiZSDepsLZ385hDXA$117458007-11:1457421562:15552000; _ym_isad=0; _ga=GA1.2.2002408319.1456149825; JSESSIONID=dummy", 
    "Pragma": "no-cache", 
    "Cache-Control": "no-cache" 

} 

但是，从浏览器检查头显示，这两个连接和升级头有价值观，这应该是有效的龙卷风。从浏览器

页眉：

Accept-Encoding:gzip, deflate, sdch 
Accept-Language:en-US,en;q=0.8,ru;q=0.6 
Cache-Control:no-cache 
Connection:Upgrade 
Cookie:_ym_uid=1456149826627418608; sessionid=0pn2knqey7raw7w4dst9d7vqvtvsmook; __utmx=147844469.bAGHuGeARZy_vppa6db8lg$115132382-10:5.mu9KcCiZSDepsLZ385hDXA$117448007-11:0; __utmxx=147844469.bAGHuGeARZy_vppa6db8lg$115132382-10:1456307221:15552000.mu9KcCiZSDepsLZ385hDXA$117448007-11:1457421562:15552000; _ym_isad=0; _ga=GA1.2.2002408319.1456149825; csrftoken=0o1lqSW4XCZvvlvYtN4S7Stt53AyKWf6; JSESSIONID=dummy 
Host:my-domain.com 
Origin:http://my-domain.com 
Pragma:no-cache 
Sec-WebSocket-Extensions:permessage-deflate; client_max_window_bits 
Sec-WebSocket-Key:/zRJijtAtPjjLNJK49SIDQ== 
Sec-WebSocket-Version:13 
Upgrade:websocket 
User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 

我可以建议是如何/当龙卷风解析头。

UPD：软件 版本中使用：

1. sockjs-tornado==1.0.2 
2. tornado==4.3 
3. tornado-redis==2.4.18 

Answer 1

+1到Riliamanswer，但我需要补充我的5美分，因为这个问题最近回来了。 所以要解决这个问题，如果你有首席 nginx在nginx的docker容器前，你需要修改你的首席的 nginx配置。

/etc/nginx/nginx.conf

... 
map $http_upgrade $connection_upgrade { 
    default upgrade; 
    ''  close; 
} 
... 

/etc/nginx/conf.d/virtual-site.conf

8001 - 端口从搬运工容器暴露

location/{ 
    proxy_pass   http://127.0.0.1:8001; 

    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection $connection_upgrade; 

    proxy_redirect  off; 
    proxy_set_header Host    $host; 
    proxy_set_header X-Real-IP  $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
} 

Answer 2

所以这个问题是通过泊坞窗容器的一个更Nginx的运行之外的代理请求。