Have no fear, because a brave group of Ops Programmers have solved the situation with a brand spanking new nginx_tcp_proxy_module
Written in August 2012, so if you are from the future you should do your homework.
Assumes you are using CentOS:
init.d/nginx script)yum install pcre pcre-devel openssl openssl-devel and any other necessary libs for building NGINXAgain, assumes CentOS:
cd /usr/local/wget 'http://nginx.org/download/nginx-1.2.1.tar.gz'tar -xzvf nginx-1.2.1.tar.gzcd nginx-1.2.1/patch -p1 < /path/to/nginx_tcp_proxy_module/tcp.patch./configure --add-module=/path/to/nginx_tcp_proxy_module --with-http_ssl_module (you can add more modules if you need them)makemake installOptional:
sudo /sbin/chkconfig nginx onRemember to copy over your old configuration files first if you want to re-use them.
Important: you will need to create a tcp {} directive at the highest level in your conf. Make sure it is not inside your http {} directive.
The example config below shows a single upstream websocket server, and two proxies for both SSL and Non-SSL.
tcp {
upstream websockets {
## webbit websocket server in background
server 127.0.0.1:5501;
## server 127.0.0.1:5502; ## add another server if you like!
check interval=3000 rise=2 fall=5 timeout=1000;
}
server {
server_name _;
listen 7070;
timeout 43200000;
websocket_connect_timeout 43200000;
proxy_connect_timeout 43200000;
so_keepalive on;
tcp_nodelay on;
websocket_pass websockets;
websocket_buffer 1k;
}
server {
server_name _;
listen 7080;
ssl on;
ssl_certificate /path/to/cert.pem;
ssl_certificate_key /path/to/key.key;
timeout 43200000;
websocket_connect_timeout 43200000;
proxy_connect_timeout 43200000;
so_keepalive on;
tcp_nodelay on;
websocket_pass websockets;
websocket_buffer 1k;
}
}