需要映射网站到外网，如何实现后端不暴露？使用Nginx实现前端映射到公网IP后端内网不映射公网

一、场景系统移动端需要映射到公网但是后端地址不能映射出去qbpm.xxxx.cn 系统解析内网IPqmbpm.xxxx.cn 移动端解析公网IP二、思路移动端前端公网端口放出80 443端口移动端后端映射到内网后端地址qbpm.xxxx.cn:8443三、解决方法vim nginx.confserver { listen 80; listen 443 ssl; server_name qbpm.xxxx.cn; ssl_certificate /etc/nginx/cert/server.crt; ssl_certificate_key /etc/nginx/cert/server.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { root /etc/nginx/flowhtml; try_files $uri $uri/ /index.html; index index.html index.htm; } location ^~/prod-api/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://qbpm.xxxx.cn:8443/; } } server { listen 80; listen 443 ssl; server_name qmbpm.xxxx.cn; ssl_certificate /etc/nginx/cert/server.crt; ssl_certificate_key /etc/nginx/cert/server.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { root /etc/nginx/mflowhtml; try_files $uri $uri/ /index.html; index index.html index.htm; } location ^~/prod-api/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://qbpm.xxxx.cn:8443/; } }