# =============================================
# upstream模塊基礎(chǔ)配置
# =============================================

# 定義后端服務(wù)器組
upstream backend_servers {
    # 服務(wù)器地址和端口
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 負(fù)載均衡方法
    # 默認(rèn)為輪詢（round-robin）
    # least_conn;     # 最少連接
    # ip_hash;        # IP哈希
    # hash $request_uri; # 一致性哈希
}

server {
    listen 80;
    server_name lb.example.com;
    
    location / {
        # 代理到后端服務(wù)器組
        proxy_pass http://backend_servers;
        
        # 設(shè)置代理頭信息
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# =============================================
# upstream服務(wù)器參數(shù)詳解
# =============================================

upstream backend_servers {
    # 基本服務(wù)器配置
    server 192.168.1.10:8080 weight=5 max_fails=3 fail_timeout=30s backup;
    server 192.168.1.11:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 weight=2 max_fails=3 fail_timeout=30s down;
    
    # 服務(wù)器參數(shù)說明：
    # weight: 權(quán)重，數(shù)值越大分配到的請(qǐng)求越多
    # max_fails: 最大失敗次數(shù)，超過則標(biāo)記為不可用
    # fail_timeout: 失敗超時(shí)時(shí)間，單位秒
    # backup: 備份服務(wù)器，主服務(wù)器都不可用時(shí)啟用
    # down: 標(biāo)記服務(wù)器永久不可用
    # max_conns: 最大連接數(shù)限制
    # resolve: 動(dòng)態(tài)解析域名
    # service: 服務(wù)發(fā)現(xiàn)配置
    # slow_start: 慢啟動(dòng)時(shí)間
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持配置
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
    
    # 會(huì)話保持配置
    sticky cookie srv_id expires=1h domain=.example.com path=/;
    
    # 健康檢查配置
    health_check interval=10s fails=3 passes=2 uri=/health port=8080;
}

# =============================================
# 簡(jiǎn)單輪詢負(fù)載均衡配置
# =============================================

# 定義后端服務(wù)器組（輪詢方式）
upstream backend_round_robin {
    # 輪詢方式（默認(rèn)）
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 連接保持配置
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name round-robin.example.com;
    
    access_log /var/log/nginx/round-robin.example.com.access.log main;
    error_log /var/log/nginx/round-robin.example.com.error.log warn;
    
    location / {
        # 代理到后端服務(wù)器組
        proxy_pass http://backend_round_robin;
        
        # 設(shè)置代理頭信息
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        # 連接設(shè)置
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        # 超時(shí)設(shè)置
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 緩沖區(qū)設(shè)置
        proxy_buffering on;
        proxy_buffer_size 4k;
        proxy_buffers 8 4k;
        proxy_busy_buffers_size 8k;
        
        # 添加負(fù)載均衡信息到響應(yīng)頭
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Response-Time $upstream_response_time;
    }
    
    # =============================================
    # 健康檢查端點(diǎn)
    # =============================================
    
    location /health {
        access_log off;
        return 200 "healthy\n";
        add_header Content-Type text/plain;
    }
}

# =============================================
# 帶權(quán)重輪詢負(fù)載均衡配置
# =============================================

# 定義后端服務(wù)器組（加權(quán)輪詢）
upstream backend_weighted {
    # 權(quán)重分配，數(shù)值越大分配到的請(qǐng)求越多
    server 192.168.1.10:8080 weight=5;    # 50%的請(qǐng)求
    server 192.168.1.11:8080 weight=3;    # 30%的請(qǐng)求
    server 192.168.1.12:8080 weight=2;    # 20%的請(qǐng)求
    
    # 健康檢查設(shè)置
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name weighted.example.com;
    
    access_log /var/log/nginx/weighted.example.com.access.log main;
    error_log /var/log/nginx/weighted.example.com.error.log warn;
    
    location / {
        proxy_pass http://backend_weighted;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        proxy_buffering on;
        proxy_buffer_size 4k;
        proxy_buffers 8 4k;
        proxy_busy_buffers_size 8k;
        
        # 添加權(quán)重信息到響應(yīng)頭
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Weight "5:3:2";
        add_header X-Upstream-Response-Time $upstream_response_time;
    }
    
    # =============================================
    # 負(fù)載均衡統(tǒng)計(jì)
    # =============================================
    
    location /lb_stats {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示負(fù)載均衡統(tǒng)計(jì)信息
        add_header Content-Type "application/json";
        return 200 '{
            "algorithm": "weighted_round_robin",
            "servers": [
                {"addr": "192.168.1.10:8080", "weight": 5, "status": "up"},
                {"addr": "192.168.1.11:8080", "weight": 3, "status": "up"},
                {"addr": "192.168.1.12:8080", "weight": 2, "status": "up"}
            ]
        }';
    }
}

# =============================================
# 輪詢策略配置
# =============================================

# 定義后端服務(wù)器組（輪詢）
upstream backend_round_robin {
    # 輪詢方式（默認(rèn)）
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name rr.example.com;
    
    location / {
        proxy_pass http://backend_round_robin;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加輪詢信息
        add_header X-LB-Algorithm "round_robin";
        add_header X-Upstream-Addr $upstream_addr;
    }
}

# =============================================
# 加權(quán)輪詢策略配置
# =============================================

# 定義后端服務(wù)器組（加權(quán)輪詢）
upstream backend_weighted {
    # 權(quán)重分配
    server 192.168.1.10:8080 weight=5;    # 高性能服務(wù)器
    server 192.168.1.11:8080 weight=3;    # 中等性能服務(wù)器
    server 192.168.1.12:8080 weight=2;    # 低性能服務(wù)器
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name wrr.example.com;
    
    location / {
        proxy_pass http://backend_weighted;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加權(quán)重信息
        add_header X-LB-Algorithm "weighted_round_robin";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Weight "5:3:2";
    }
}

# =============================================
# IP哈希策略配置
# =============================================

# 定義后端服務(wù)器組（IP哈希）
upstream backend_ip_hash {
    # IP哈希方式，確保同一客戶端請(qǐng)求始終轉(zhuǎn)發(fā)到同一服務(wù)器
    ip_hash;
    
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name iphash.example.com;
    
    location / {
        proxy_pass http://backend_ip_hash;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加哈希信息
        add_header X-LB-Algorithm "ip_hash";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Client-IP $remote_addr;
    }
}

# =============================================
# 最少連接策略配置
# =============================================

# 定義后端服務(wù)器組（最少連接）
upstream backend_least_conn {
    # 最少連接方式，將請(qǐng)求轉(zhuǎn)發(fā)到連接數(shù)最少的服務(wù)器
    least_conn;
    
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name leastconn.example.com;
    
    location / {
        proxy_pass http://backend_least_conn;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加連接數(shù)信息
        add_header X-LB-Algorithm "least_conn";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Connections $upstream_connections;
    }
}

# =============================================
# 一致性哈希策略配置
# =============================================

# 定義后端服務(wù)器組（一致性哈希）
upstream backend_consistent_hash {
    # 一致性哈希方式
    hash $request_uri consistent;
    
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name consistent.example.com;
    
    location / {
        proxy_pass http://backend_consistent_hash;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加哈希信息
        add_header X-LB-Algorithm "consistent_hash";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Hash-Key $request_uri;
    }
}

# =============================================
# 被動(dòng)健康檢查配置
# =============================================

upstream backend_health_check {
    # 后端服務(wù)器配置
    server 192.168.1.10:8080 weight=5 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 weight=2 max_fails=3 fail_timeout=30s backup;
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name health.example.com;
    
    location / {
        proxy_pass http://backend_health_check;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加健康檢查信息
        add_header X-Upstream-Status $upstream_status;
        add_header X-Upstream-Response-Time $upstream_response_time;
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 健康檢查端點(diǎn)
    # =============================================
    
    location /health {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 返回健康狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "status": "healthy",
            "upstream": "backend_health_check",
            "servers": [
                {"addr": "192.168.1.10:8080", "status": "up"},
                {"addr": "192.168.1.11:8080", "status": "up"},
                {"addr": "192.168.1.12:8080", "status": "backup"}
            ]
        }';
    }
}

# =============================================
# 主動(dòng)健康檢查配置（需要nginx_plus）
# =============================================

upstream backend_active_health {
    zone backend_active_health 64k;
    
    server 192.168.1.10:8080 slow_start=30s;
    server 192.168.1.11:8080 slow_start=30s;
    server 192.168.1.12:8080 slow_start=30s backup;
    
    # 主動(dòng)健康檢查
    health_check interval=10s fails=3 passes=2 uri=/health port=8080;
    
    # 負(fù)載均衡
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name active-health.example.com;
    
    location / {
        proxy_pass http://backend_active_health;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加健康狀態(tài)信息
        add_header X-Upstream-Status $upstream_status;
        add_header X-Upstream-Response-Time $upstream_response_time;
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 健康狀態(tài)監(jiān)控
    # =============================================
    
    location /upstream_status {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示上游服務(wù)器狀態(tài)
        upstream_status;
        
        add_header Content-Type "text/plain";
    }
}

# =============================================
# Cookie會(huì)話保持配置
# =============================================

upstream backend_sticky {
    # Cookie會(huì)話保持
    sticky cookie srv_id expires=1h domain=.example.com path=/ httponly secure;
    
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name sticky.example.com;
    
    location / {
        proxy_pass http://backend_sticky;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加會(huì)話保持信息
        add_header X-LB-Session-Sticky "cookie";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 會(huì)話管理
    # =============================================
    
    location /session {
        # 顯示會(huì)話信息
        add_header Content-Type "application/json";
        return 200 '{
            "session_id": "$cookie_srv_id",
            "upstream_addr": "$upstream_addr",
            "session_sticky": "enabled"
        }';
    }
}

# =============================================
# 路由會(huì)話保持配置
# =============================================

upstream backend_route {
    # 路由會(huì)話保持
    sticky route $route_cookie $route_uri;
    
    server 192.168.1.10:8080 route=a;
    server 192.168.1.11:8080 route=b;
    server 192.168.1.12:8080 route=c;
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name route.example.com;
    
    location / {
        proxy_pass http://backend_route;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加路由信息
        add_header X-LB-Session-Sticky "route";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Route $route_cookie;
    }
}

# =============================================
# 基于DNS的動(dòng)態(tài)負(fù)載均衡配置
# =============================================

upstream backend_dynamic {
    # 啟用DNS解析
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 5s;
    
    # 動(dòng)態(tài)服務(wù)器配置
    server web1.example.com:8080 resolve;
    server web2.example.com:8080 resolve;
    server web3.example.com:8080 resolve;
    
    # 健康檢查
    server web1.example.com:8080 max_fails=3 fail_timeout=30s;
    server web2.example.com:8080 max_fails=3 fail_timeout=30s;
    server web3.example.com:8080 max_fails=3 fail_timeout=30s;
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name dynamic.example.com;
    
    location / {
        proxy_pass http://backend_dynamic;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加動(dòng)態(tài)信息
        add_header X-LB-Dynamic "dns_based";
        add_header X-Upstream-Addr $upstream_addr;
    }
}

# =============================================
# 基于服務(wù)發(fā)現(xiàn)的動(dòng)態(tài)負(fù)載均衡配置
# =============================================

upstream backend_service_discovery {
    # 服務(wù)發(fā)現(xiàn)配置
    zone backend_service_discovery 64k;
    
    # 動(dòng)態(tài)服務(wù)器配置
    server backend-service-1.example.com:8080 service=backend resolve;
    server backend-service-2.example.com:8080 service=backend resolve;
    server backend-service-3.example.com:8080 service=backend resolve;
    
    # 健康檢查
    health_check interval=10s fails=3 passes=2 uri=/health port=8080;
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name service-discovery.example.com;
    
    location / {
        proxy_pass http://backend_service_discovery;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加服務(wù)發(fā)現(xiàn)信息
        add_header X-LB-Service-Discovery "enabled";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 服務(wù)發(fā)現(xiàn)狀態(tài)
    # =============================================
    
    location /service_status {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示服務(wù)發(fā)現(xiàn)狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "service_discovery": "enabled",
            "upstream": "backend_service_discovery",
            "services": [
                {"name": "backend-service-1", "status": "up"},
                {"name": "backend-service-2", "status": "up"},
                {"name": "backend-service-3", "status": "up"}
            ]
        }';
    }
}

# =============================================
# 基于權(quán)重的灰度發(fā)布配置
# =============================================

upstream backend_canary {
    # 灰度發(fā)布配置
    # 舊版本：80%流量
    # 新版本：20%流量
    server 192.168.1.10:8080 weight=8;    # 舊版本
    server 192.168.1.20:8080 weight=2;    # 新版本
    
    # 健康檢查
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.20:8080 max_fails=3 fail_timeout=30s;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name canary.example.com;
    
    location / {
        proxy_pass http://backend_canary;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加灰度發(fā)布信息
        add_header X-Canary-Deployment "enabled";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Version-Weight "8:2";
    }
    
    # =============================================
    # 版本信息
    # =============================================
    
    location /version {
        # 顯示版本信息
        add_header Content-Type "application/json";
        return 200 '{
            "canary_deployment": "enabled",
            "old_version": {"weight": 8, "addr": "192.168.1.10:8080"},
            "new_version": {"weight": 2, "addr": "192.168.1.20:8080"}
        }';
    }
}

# =============================================
# 基于用戶特征的灰度發(fā)布配置
# =============================================

# 定義用戶特征映射
map $cookie_user_id $user_group {
    default "old";
    "~^user[0-9]{1,3}$" "new";  # 用戶ID為user001-user999的用戶分配到新版本
}

# 定義后端服務(wù)器組
upstream backend_user_canary {
    server 192.168.1.10:8080;    # 舊版本
    server 192.168.1.20:8080;    # 新版本
}

server {
    listen 80;
    server_name user-canary.example.com;
    
    location / {
        # 根據(jù)用戶組選擇后端
        if ($user_group = "new") {
            proxy_pass http://192.168.1.20:8080;
        }
        
        if ($user_group = "old") {
            proxy_pass http://192.168.1.10:8080;
        }
        
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 添加用戶灰度信息
        add_header X-Canary-User-Based "enabled";
        add_header X-User-Group $user_group;
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 用戶組信息
    # =============================================
    
    location /user_group {
        # 顯示用戶組信息
        add_header Content-Type "application/json";
        return 200 '{
            "user_canary": "enabled",
            "user_id": "$cookie_user_id",
            "user_group": "$user_group",
            "upstream_addr": "$upstream_addr"
        }';
    }
}

# =============================================
# 負(fù)載均衡監(jiān)控配置
# =============================================

http {
    # =============================================
    # 監(jiān)控日志格式
    # =============================================
    
    # 負(fù)載均衡監(jiān)控日志格式
    log_format lb_monitor '$remote_addr - $remote_user [$time_local] "$request" '
                        '$status $body_bytes_sent "$http_referer" '
                        '"$http_user_agent" "$http_x_forwarded_for" '
                        'upstream_addr="$upstream_addr" '
                        'upstream_status="$upstream_status" '
                        'upstream_response_time="$upstream_response_time" '
                        'upstream_connect_time="$upstream_connect_time" '
                        'upstream_header_time="$upstream_header_time"';
    
    # =============================================
    # 監(jiān)控服務(wù)器配置
    # =============================================
    
    server {
        listen 80;
        server_name monitor.example.com;
        
        # 負(fù)載均衡狀態(tài)頁(yè)面
        location /lb_status {
            # 限制訪問
            allow 127.0.0.1;
            allow 192.168.1.0/24;
            deny all;
            
            # 顯示負(fù)載均衡狀態(tài)
            stub_status on;
            
            add_header Content-Type "text/plain";
        }
        
        # 上游服務(wù)器狀態(tài)
        location /upstream_status {
            # 限制訪問
            allow 127.0.0.1;
            allow 192.168.1.0/24;
            deny all;
            
            # 顯示上游服務(wù)器狀態(tài)
            upstream_status;
            
            add_header Content-Type "text/plain";
        }
        
        # 實(shí)時(shí)監(jiān)控?cái)?shù)據(jù)
        location /real_time_stats {
            # 限制訪問
            allow 127.0.0.1;
            allow 192.168.1.0/24;
            deny all;
            
            # 實(shí)時(shí)統(tǒng)計(jì)信息
            add_header Content-Type "application/json";
            return 200 '{
                "timestamp": "$time_iso8601",
                "connections": {
                    "active": $connections_active,
                    "reading": $connections_reading,
                    "writing": $connections_writing,
                    "waiting": $connections_waiting
                },
                "requests": {
                    "total": $request_counter,
                    "current": $connections_active
                }
            }';
        }
        
        # 歷史統(tǒng)計(jì)數(shù)據(jù)
        location /historical_stats {
            # 限制訪問
            allow 127.0.0.1;
            allow 192.168.1.0/24;
            deny all;
            
            # 顯示歷史統(tǒng)計(jì)信息
            add_header Content-Type "application/json";
            return 200 '{
                "historical_data": "available_in_log_files",
                "log_file": "/var/log/nginx/lb_monitor.log",
                "retention_days": 30
            }';
        }
    }
}

# =============================================
# 負(fù)載均衡監(jiān)控腳本
# 創(chuàng)建 /usr/local/nginx/scripts/lb_monitor.sh
# =============================================

#!/bin/bash

# Nginx負(fù)載均衡監(jiān)控腳本
# 用法：./lb_monitor.sh

# 配置參數(shù)
NGINX_STATUS_URL="http://localhost/lb_status"
UPSTREAM_STATUS_URL="http://localhost/upstream_status"
LOG_FILE="/var/log/nginx/lb_monitor.log"
ALERT_EMAIL="admin@example.com"
ALERT_THRESHOLD=1000

# 獲取Nginx狀態(tài)
get_nginx_status() {
    curl -s $NGINX_STATUS_URL
}

# 獲取上游服務(wù)器狀態(tài)
get_upstream_status() {
    curl -s $UPSTREAM_STATUS_URL
}

# 解析Nginx狀態(tài)
parse_nginx_status() {
    local status=$(get_nginx_status)
    local active_connections=$(echo "$status" | grep "Active connections" | awk '{print $3}')
    local accepts=$(echo "$status" | awk 'NR==3 {print $1}')
    local handled=$(echo "$status" | awk 'NR==3 {print $2}')
    local requests=$(echo "$status" | awk 'NR==3 {print $3}')
    local reading=$(echo "$status" | awk 'NR==4 {print $2}')
    local writing=$(echo "$status" | awk 'NR==4 {print $4}')
    local waiting=$(echo "$status" | awk 'NR==4 {print $6}')
    
    echo "Active connections: $active_connections"
    echo "Accepts: $accepts"
    echo "Handled: $handled"
    echo "Requests: $requests"
    echo "Reading: $reading"
    echo "Writing: $writing"
    echo "Waiting: $waiting"
    
    # 檢查是否超過閾值
    if [ "$active_connections" -gt "$ALERT_THRESHOLD" ]; then
        echo "WARNING: Active connections exceed threshold: $active_connections > $ALERT_THRESHOLD"
        send_alert "High active connections detected: $active_connections"
    fi
}

# 解析上游服務(wù)器狀態(tài)
parse_upstream_status() {
    local status=$(get_upstream_status)
    echo "Upstream Server Status:"
    echo "$status"
    
    # 檢查是否有服務(wù)器宕機(jī)
    if echo "$status" | grep -q "down"; then
        echo "WARNING: Some upstream servers are down"
        send_alert "Upstream server down detected"
    fi
}

# 發(fā)送告警
send_alert() {
    local message=$1
    echo "[$(date)] ALERT: $message" >> $LOG_FILE
    echo "$message" | mail -s "Nginx Load Balancer Alert" $ALERT_EMAIL
}

# 記錄監(jiān)控?cái)?shù)據(jù)
log_monitor_data() {
    local timestamp=$(date "+%Y-%m-%d %H:%M:%S")
    local status=$(get_nginx_status)
    local active_connections=$(echo "$status" | grep "Active connections" | awk '{print $3}')
    local upstream_status=$(get_upstream_status)
    
    echo "$timestamp, $active_connections, $upstream_status" >> $LOG_FILE
}

# 主函數(shù)
main() {
    echo "=== Nginx Load Balancer Monitor ==="
    echo "Timestamp: $(date)"
    echo ""
    
    echo "Nginx Status:"
    parse_nginx_status
    echo ""
    
    echo "Upstream Status:"
    parse_upstream_status
    echo ""
    
    echo "Logging monitor data..."
    log_monitor_data
    
    echo "Monitoring completed."
}

# 執(zhí)行主函數(shù)
main

# =============================================
# 故障轉(zhuǎn)移配置
# =============================================

upstream backend_failover {
    # 主服務(wù)器
    server 192.168.1.10:8080 weight=5 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 weight=3 max_fails=3 fail_timeout=30s;
    
    # 備份服務(wù)器
    server 192.168.1.20:8080 backup;
    server 192.168.1.21:8080 backup;
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name failover.example.com;
    
    location / {
        proxy_pass http://backend_failover;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 故障轉(zhuǎn)移配置
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 3;
        proxy_next_upstream_timeout 10s;
        
        # 添加故障轉(zhuǎn)移信息
        add_header X-Failover "enabled";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Status $upstream_status;
    }
    
    # =============================================
    # 故障狀態(tài)頁(yè)面
    # =============================================
    
    location /failover_status {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示故障轉(zhuǎn)移狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "failover": "enabled",
            "primary_servers": [
                {"addr": "192.168.1.10:8080", "status": "up"},
                {"addr": "192.168.1.11:8080", "status": "up"}
            ],
            "backup_servers": [
                {"addr": "192.168.1.20:8080", "status": "standby"},
                {"addr": "192.168.1.21:8080", "status": "standby"}
            ]
        }';
    }
}

# =============================================
# 熔斷器配置
# =============================================

# 定義熔斷器狀態(tài)變量
map $upstream_addr $circuit_breaker_status {
    default "closed";
    192.168.1.10:8080 "closed";
    192.168.1.11:8080 "closed";
    192.168.1.12:8080 "closed";
}

upstream backend_circuit_breaker {
    server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 max_fails=3 fail_timeout=30s;
    
    # 負(fù)載均衡方法
    least_conn;
    
    # 連接保持
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name circuit-breaker.example.com;
    
    location / {
        # 熔斷器檢查
        if ($circuit_breaker_status = "open") {
            return 503 "Service Unavailable - Circuit Breaker Open";
        }
        
        proxy_pass http://backend_circuit_breaker;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 5s;
        proxy_send_timeout 5s;
        proxy_read_timeout 5s;
        
        # 熔斷器配置
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 2;
        proxy_next_upstream_timeout 5s;
        
        # 添加熔斷器信息
        add_header X-Circuit-Breaker $circuit_breaker_status;
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Upstream-Status $upstream_status;
    }
    
    # =============================================
    # 熔斷器狀態(tài)管理
    # =============================================
    
    location /circuit_breaker {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 熔斷器控制
        if ($args ~* "action=open") {
            return 200 'Circuit breaker opened manually';
        }
        
        if ($args ~* "action=close") {
            return 200 'Circuit breaker closed manually';
        }
        
        # 顯示熔斷器狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "circuit_breaker": "enabled",
            "status": "$circuit_breaker_status",
            "upstream_addr": "$upstream_addr",
            "upstream_status": "$upstream_status"
        }';
    }
}

# =============================================
# 電商網(wǎng)站負(fù)載均衡配置
# =============================================

# 用戶服務(wù)負(fù)載均衡
upstream user_service {
    least_conn;
    server 192.168.1.10:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 weight=2 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 商品服務(wù)負(fù)載均衡
upstream product_service {
    ip_hash;
    server 192.168.1.20:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.21:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.22:8080 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 訂單服務(wù)負(fù)載均衡
upstream order_service {
    least_conn;
    server 192.168.1.30:8080 weight=4 max_fails=3 fail_timeout=30s;
    server 192.168.1.31:8080 weight=4 max_fails=3 fail_timeout=30s;
    server 192.168.1.32:8080 weight=2 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 支付服務(wù)負(fù)載均衡
upstream payment_service {
    least_conn;
    server 192.168.1.40:8080 weight=5 max_fails=2 fail_timeout=15s;
    server 192.168.1.41:8080 weight=5 max_fails=2 fail_timeout=15s;
    server 192.168.1.42:8080 backup;
    
    keepalive 16;
    keepalive_timeout 30s;
    keepalive_requests 500;
}

server {
    listen 80;
    server_name ecommerce.example.com;
    
    access_log /var/log/nginx/ecommerce.example.com.access.log main;
    error_log /var/log/nginx/ecommerce.example.com.error.log warn;
    
    # =============================================
    # 靜態(tài)資源
    # =============================================
    
    location ~* \.(jpg|jpeg|png|gif|ico|css|js|woff|woff2|ttf|eot|svg)$ {
        root /usr/local/nginx/html/ecommerce;
        expires 7d;
        add_header Cache-Control "public, no-transform";
        access_log off;
    }
    
    # =============================================
    # 用戶服務(wù)
    # =============================================
    
    location /api/user/ {
        proxy_pass http://user_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # 用戶服務(wù)會(huì)話保持
        proxy_cookie_path / /;
        proxy_cookie_domain off;
        
        # 添加服務(wù)標(biāo)識(shí)
        add_header X-Service "user_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 商品服務(wù)
    # =============================================
    
    location /api/product/ {
        proxy_pass http://product_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # 商品服務(wù)緩存
        proxy_cache product_cache;
        proxy_cache_valid 200 302 10m;
        proxy_cache_valid 404 1m;
        proxy_cache_key $scheme$request_method$host$request_uri;
        
        # 添加服務(wù)標(biāo)識(shí)
        add_header X-Service "product_service";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Cache-Status $upstream_cache_status;
    }
    
    # =============================================
    # 訂單服務(wù)
    # =============================================
    
    location /api/order/ {
        proxy_pass http://order_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 訂單服務(wù)重試機(jī)制
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 3;
        
        # 添加服務(wù)標(biāo)識(shí)
        add_header X-Service "order_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 支付服務(wù)
    # =============================================
    
    location /api/payment/ {
        proxy_pass http://payment_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # 支付服務(wù)嚴(yán)格超時(shí)
        proxy_next_upstream error timeout;
        proxy_next_upstream_tries 2;
        
        # 添加服務(wù)標(biāo)識(shí)
        add_header X-Service "payment_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 健康檢查
    # =============================================
    
    location /health {
        access_log off;
        return 200 "healthy\n";
        add_header Content-Type text/plain;
    }
    
    # =============================================
    # 服務(wù)狀態(tài)
    # =============================================
    
    location /service_status {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示服務(wù)狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "services": {
                "user_service": {"status": "active", "algorithm": "least_conn"},
                "product_service": {"status": "active", "algorithm": "ip_hash"},
                "order_service": {"status": "active", "algorithm": "least_conn"},
                "payment_service": {"status": "active", "algorithm": "least_conn"}
            }
        }';
    }
}

# =============================================
# 微服務(wù)架構(gòu)負(fù)載均衡配置
# =============================================

# API網(wǎng)關(guān)負(fù)載均衡
upstream api_gateway {
    least_conn;
    server 192.168.1.10:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.11:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.12:8080 weight=2 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 認(rèn)證服務(wù)負(fù)載均衡
upstream auth_service {
    least_conn;
    server 192.168.1.20:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.21:8080 max_fails=3 fail_timeout=30s;
    
    keepalive 16;
    keepalive_timeout 30s;
    keepalive_requests 500;
}

# 用戶服務(wù)負(fù)載均衡
upstream user_service {
    ip_hash;
    server 192.168.1.30:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.31:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.32:8080 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 業(yè)務(wù)服務(wù)負(fù)載均衡
upstream business_service {
    least_conn;
    server 192.168.1.40:8080 weight=2 max_fails=3 fail_timeout=30s;
    server 192.168.1.41:8080 weight=2 max_fails=3 fail_timeout=30s;
    server 192.168.1.42:8080 weight=1 max_fails=3 fail_timeout=30s;
    server 192.168.1.43:8080 weight=1 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

# 消息服務(wù)負(fù)載均衡
upstream message_service {
    least_conn;
    server 192.168.1.50:8080 max_fails=3 fail_timeout=30s;
    server 192.168.1.51:8080 max_fails=3 fail_timeout=30s;
    
    keepalive 16;
    keepalive_timeout 30s;
    keepalive_requests 500;
}

# 文件服務(wù)負(fù)載均衡
upstream file_service {
    least_conn;
    server 192.168.1.60:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.61:8080 weight=3 max_fails=3 fail_timeout=30s;
    server 192.168.1.62:8080 weight=2 max_fails=3 fail_timeout=30s backup;
    
    keepalive 32;
    keepalive_timeout 30s;
    keepalive_requests 1000;
}

server {
    listen 80;
    server_name microservice.example.com;
    
    access_log /var/log/nginx/microservice.example.com.access.log main;
    error_log /var/log/nginx/microservice.example.com.error.log warn;
    
    # =============================================
    # API網(wǎng)關(guān)
    # =============================================
    
    location / {
        proxy_pass http://api_gateway;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # API網(wǎng)關(guān)重試機(jī)制
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 3;
        
        # 添加網(wǎng)關(guān)標(biāo)識(shí)
        add_header X-Gateway "nginx";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 內(nèi)部服務(wù)路由
    # =============================================
    
    # 認(rèn)證服務(wù)
    location /internal/auth/ {
        proxy_pass http://auth_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # 認(rèn)證服務(wù)緩存
        proxy_cache auth_cache;
        proxy_cache_valid 200 302 5m;
        proxy_cache_valid 404 1m;
        proxy_cache_key $scheme$request_method$host$request_uri;
        
        add_header X-Service "auth_service";
        add_header X-Upstream-Addr $upstream_addr;
        add_header X-Cache-Status $upstream_cache_status;
    }
    
    # 用戶服務(wù)
    location /internal/user/ {
        proxy_pass http://user_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        add_header X-Service "user_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # 業(yè)務(wù)服務(wù)
    location /internal/business/ {
        proxy_pass http://business_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        # 業(yè)務(wù)服務(wù)重試機(jī)制
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 3;
        
        add_header X-Service "business_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # 消息服務(wù)
    location /internal/message/ {
        proxy_pass http://message_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 30s;
        
        add_header X-Service "message_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # 文件服務(wù)
    location /internal/file/ {
        proxy_pass http://file_service;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 文件服務(wù)大文件支持
        client_max_body_size 100m;
        proxy_max_temp_file_size 1024m;
        
        add_header X-Service "file_service";
        add_header X-Upstream-Addr $upstream_addr;
    }
    
    # =============================================
    # 服務(wù)發(fā)現(xiàn)和健康檢查
    # =============================================
    
    location /service_discovery {
        # 限制訪問
        allow 127.0.0.1;
        allow 192.168.1.0/24;
        deny all;
        
        # 顯示服務(wù)發(fā)現(xiàn)狀態(tài)
        add_header Content-Type "application/json";
        return 200 '{
            "microservices": {
                "api_gateway": {"status": "active", "servers": 3},
                "auth_service": {"status": "active", "servers": 2},
                "user_service": {"status": "active", "servers": 3},
                "business_service": {"status": "active", "servers": 4},
                "message_service": {"status": "active", "servers": 2},
                "file_service": {"status": "active", "servers": 3}
            }
        }';
    }
    
    # =============================================
    # 健康檢查
    # =============================================
    
    location /health {
        access_log off;
        return 200 "healthy\n";
        add_header Content-Type text/plain;
    }
}