能否配置NGINX为浏览器代理？实现FireFox流量转发至HTTP/HTTPS代理

Hey there! Let's tackle your two questions about using NGINX as a proxy for Firefox:

Absolutely yes. NGINX can be set up as an HTTP/HTTPS forward proxy that you can directly enter into Firefox's proxy configuration panel. Here’s how to configure it:

Basic HTTP Proxy Configuration #

Add this to your NGINX config file to handle standard HTTP traffic:

server {
    listen 8080; # This is the port you'll input in Firefox's proxy settings
    resolver 8.8.8.8; # Use a reliable DNS resolver (e.g., Google's public DNS)

    location / {
        proxy_pass http://$host$request_uri;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

Adding HTTPS Support #

To route encrypted HTTPS traffic through NGINX, you need to handle the CONNECT method (used to establish secure tunnels between Firefox and target servers):

server {
    listen 8080;
    resolver 8.8.8.8;

    # Handle regular HTTP requests
    location / {
        proxy_pass http://$host$request_uri;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # Handle HTTPS CONNECT requests
    location ~ ^CONNECT {
        proxy_pass $scheme://$host;
        proxy_connect_timeout 10s;
        proxy_send_timeout 10s;
        proxy_read_timeout 10s;
        proxy_set_header Host $host;
    }
}

After updating the config, reload NGINX with sudo nginx -s reload, then enter your NGINX server's IP and port (8080 in this example) into Firefox's proxy settings.

Definitely. NGINX is fully capable of serving as a forward proxy for both HTTP and HTTPS browser traffic—exactly what you need to route all of Firefox’s traffic through it.

A few key notes to keep in mind:

• For HTTPS traffic, NGINX acts as a pass-through tunnel by default (it doesn’t decrypt the traffic), so your browser’s encrypted connections remain secure.
• Ensure your NGINX server is reachable from your machine running Firefox, and that any firewalls allow incoming traffic on the proxy port you configured.
• If you want to restrict access to the proxy, you can add HTTP basic authentication with the auth_basic and auth_basic_user_file directives in the server block.

内容的提问来源于stack exchange，提问作者Dmitriano