Use ECS instances that run Ubuntu to configure reverse proxy for access to Alibaba Cloud OSS

Procedure

1. Create an ECS instance that runs Ubuntu. Ensure that the instance and the specified bucket are located within the same region.
   The Ubuntu 18.04 (64-bit) system is used in this example. For more information, see Create an ECS instance.
2. Log on to the ECS instance as the root user. Update the APT sources.

   root@test:~# apt-get update

3. Install NGINX.

   root@test:~# apt-get install nginx

   Note Default locations of NGINX:

    /usr/sbin/nginx       Stores the NGINX executable. 
    /etc/nginx            Stores configuration files. 
    /usr/share/nginx      Stores static files. 
    /var/log/nginx        Stores log files.

4. Open the configuration file of NGINX.

   root@test:~# vi /etc/nginx/nginx.conf

5. Add the following content to the http context of the configuration file:

   server {
           listen 80;
           server_name 47. **. **.73; 
   
           location / {
               proxy_pass http://bucketname.oss-cn-beijing-internal.aliyuncs.com; 
               proxy_set_header Host $host; 
        }  
   }

   • server_name: the IP address used to provide the reverse proxy service, which is the public IP address of the ECS instance.
   • proxy_pass: the endpoint for redirection.
     • When the ECS instance and the target bucket are located within the same region, specify the internal endpoint of the target bucket. For more information about endpoints, see OSS domain names.
     • When the ECS instance and the target bucket are located within different regions, specify the public endpoint of the target bucket.
     • For security reasons, when an OSS domain name is used to access an OSS image or web page object through a browser, the object is directly downloaded. To preview the object, use a custom domain name. Add the custom domain name for this parameter. For more information about how to bind a custom domain name, see Bind custom domain names.
   • proxy_set_header Host $host: If you add this parameter, the host value is replaced with the IP address of the ECS instance when NGINX sends a request to OSS. If the following situations exist, you must add this parameter:
     • Signature errors.
     • Your custom domain name is resolved to the public IP address of the ECS instance, and your user needs to browse image or web page objects in a bucket. You can bind a custom domain name to the bucket for which reverse proxy is configured. You do not need to configure CNAME. You can set proxy_pass to the internal or public endpoint of the bucket. For more information about how to bind a custom domain name, see Bind custom domain names.

   Notice

   • This topic uses the demo environment. For data security reasons, we recommend that you configure the https context. For more information, see Configure HTTPS for your own domain name in OSS through reverse proxy.
   • You can configure reverse proxy for only one bucket if you use this configuration method.
6. Go to the folder of the NGINX executable. Start NGINX.

   root@test:~# cd /usr/sbin/
   root@test:~# ./nginx

7. Add the object path to the public IP address of the ECS instance to access OSS resources.

References