Go Web服务与Nginx反向代理：构建高性能与高可用应用的最佳实践

客户端 (Client)
      |
      V
Nginx (反向代理, SSL/TLS终止, 静态文件服务, 负载均衡, 压缩)
      | (HTTP)
      V
Go 应用实例 1 (处理业务逻辑)
Go 应用实例 2 (处理业务逻辑)
...

package main

import (
    "fmt"
    "log"
    "net/http"
    "time"
)

func helloHandler(w http.ResponseWriter, r *http.Request) {
    w.Header().Set("Content-Type", "application/json")
    fmt.Fprintf(w, `{"message": "Hello from Go!", "timestamp": "%s"}`, time.Now().Format(time.RFC3339))
}

func main() {
    http.HandleFunc("/api/hello", helloHandler)
    log.Println("Go server listening on :8080")
    // 监听本地端口，Nginx将代理到此端口
    log.Fatal(http.ListenAndServe(":8080", nil))
}

http {
    upstream go_backend {
        server 127.0.0.1:8080; # Go应用监听的地址和端口
        # server 127.0.0.1:8081; # 如果有多个Go实例，可以添加
        # server 127.0.0.1:8082;
    }

    server {
        listen 80;
        server_name your_domain.com;
        return 301 https://$host$request_uri; # 强制HTTPS重定向
    }

    server {
        listen 443 ssl http2; # 启用HTTPS和HTTP/2
        server_name your_domain.com;

        ssl_certificate /etc/nginx/ssl/your_domain.com.crt; # 您的SSL证书路径
        ssl_certificate_key /etc/nginx/ssl/your_domain.com.key; # 您的SSL私钥路径
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        ssl_protocols TLSv1.2 TLSv1.3; # 推荐的TLS协议
        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
        ssl_prefer_server_ciphers on;

        # 启用Gzip压缩
        gzip on;
        gzip_types application/json text/html text/css application/javascript application/x-javascript text/xml application/xml application/xml+rss text/plain image/svg+xml;
        gzip_proxied any; # 对所有代理请求都进行压缩
        gzip_min_length 1000;
        gzip_comp_level 5;

        # 静态文件服务示例
        location /static/ {
            root /var/www/your_app; # 静态文件存放路径，例如 /var/www/your_app/static/
            expires 30d; # 缓存30天
            add_header Cache-Control "public";
        }

        # 将所有其他请求代理到Go后端
        location / {
            proxy_pass http://go_backend;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_read_timeout 90; # 代理