WSO2 AM 4.1.0配置Nginx反向代理遇404错误求助

问题核心分析 #

当前Nginx配置存在两个关键问题，直接引发404错误：

• /devportal/路由的proxy_pass末尾缺少斜杠，导致路径拼接错误。访问name1.com/devportal/xxx时，请求会被转发到wso2dev.com:9443/devportalxxx（无斜杠分隔），而WSO2端不存在该路径，因此返回404。
• 未配置carbon和publisher的反向代理规则，这两个页面无法通过Nginx访问。

修正后的Nginx配置 #

server {
    server_name name1.com default_server;

    root /usr/share/nginx/name1;
    index index.html index.htm;

    location /abc/ {
        proxy_set_header Host $host;
        proxy_pass https://wso2dev.com:8243/abc/;
    }

    # Devportal 反向代理配置
    location /devportal/ {
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_read_timeout 5m;
        proxy_send_timeout 5m;
        proxy_pass https://wso2dev.com:9443/devportal/;  # 补充末尾斜杠
    }

    # Publisher 反向代理配置
    location /publisher/ {
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_read_timeout 5m;
        proxy_send_timeout 5m;
        proxy_pass https://wso2dev.com:9443/publisher/;
    }

    # Carbon 控制台反向代理配置
    location /carbon/ {
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_read_timeout 5m;
        proxy_send_timeout 5m;
        proxy_pass https://wso2dev.com:9443/carbon/;
    }

    location / {
        try_files $uri $uri/ /index.html;
    }

    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root /usr/share/nginx/name1;
    }
}

WSO2端必要配置（deployment.toml） #

除Nginx配置外，需修改WSO2的deployment.toml文件，让WSO2识别反向代理请求：

[server]
hostname = "name1.com"
proxy_port = 443  # Nginx用HTTPS填443，HTTP填80
base_path = "/"

[transport.https.properties]
proxyPort = 443
X-Forwarded-Proto = "https"
X-Forwarded-Host = "name1.com"

同时确保WSO2信任Nginx的IP地址，添加：

[security]
trusted_proxies = ["<Nginx服务器IP>"]

验证步骤 #

1. 重启Nginx服务：sudo systemctl restart nginx
2. 重启WSO2 API Manager服务
3. 访问https://name1.com/devportal/、https://name1.com/publisher/、https://name1.com/carbon/，确认页面正常加载

内容的提问来源于stack exchange，提问作者Chinnu