https://docs.njet.org.cn/docs/v4.0.1/reference/stream/index.html 欢迎阅读 NJET stream配置功能文档。 Hugo zh Tue, 14 Oct 2025 17:38:48 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/range/index.html Tue, 19 Aug 2025 08:58:36 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/range/index.html https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_map/index.html Thu, 14 Aug 2025 16:22:30 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_map/index.html 欢迎阅读 NJet stream map功能 文档。 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/sts/index.html Thu, 14 Aug 2025 16:28:11 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/sts/index.html https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_ssl/index.html Tue, 14 Oct 2025 17:38:48 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_ssl/index.html 1.功能说明 本模块支持stream块的server，通过API接口动态添加，删除各类型的SSL证书，包括ECC，RSA，国密或者其他类型。 2.依赖模块 动态SSL功能依赖模块: njet.conf: load_module modules/njt_http_kv_module.so; load_module modules/njt_stream_dyn_ssl_module.so; njet_ctrl.conf: load_module modules/njt_http_sendmsg_module.so; load_module modules/njt_stream_ssl_api_module.so 3.配置示例 3.1 数据面配置 njet.conf配置文件 注意配置文件中需要修改so路径，log路径，替换ssl证书 load_module modules/njt_http_kv_module.so; load_module modules/njt_stream_dyn_ssl_module.so; helper broker modules/njt_helper_broker_module.so conf/mqtt.conf; helper ctrl modules/njt_helper_ctrl_module.so conf/ctrl.conf; worker_processes 1; events { worker_connections 1024; } cluster_name helper; node_name node1; http { access_log logs/access.log combined; dyn_kv_conf conf/iot-work.conf; upstream demo { zone demo 128k; server 192.168.40.141:8080; keepalive 10240; } server { listen 443 ssl; ECC 证书（可选） ssl_certificate certs/server.crt; ssl_certificate_key certs/server.key; location / { return 200 "njet ntls test OK, ssl_protocol is $ssl_protocol (NTLSv1.1 表示国密，其他表示国际)"; } } } stream { server { listen 22224 ssl; server_name dev.test.com; ssl_certificate certs/ca/ECC/ecc-root_cert.pem; ssl_certificate_key certs/ca/ECC/ecc-root_private_key.pem; return "22224 ssl ok"; } } 3.2 控制面配置说明 njet_ctrl.conf https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_proxy_pass/index.html Tue, 14 Oct 2025 14:16:09 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_proxy_pass/index.html 1. 功能说明 stream动态proxy_pass功能，可以通过动态API接口，更新stream中server块配置的proxy_pass指令的值。 该功能主要为了满足以下场景： server 通过proxy_pass 指令，配置了静态的upstream 名。但在业务需要时，能动态切换upstream 名，而不需要重新重启服务的情况。例如：从测试环境，向正式环境切换时。 相比proxy_pass 变量方式，有更好的性能。 2. 依赖模块 stream动态proxy_pass功能依赖模块： load_module modules/njt_stream_dyn_proxy_pass_module.so; 3.配置说明 3.1 指令说明 Syntax: proxy_pass URL; Default: — Context: stream server URL = schema + name + args name： ip，域名，upstream 名字， 变量，套接字 args： （参数，变量） upstream 名 proxy_pass backend1 upstream ip proxy_pass 127.0.0.1:80 upstream 域名 proxy_pass www.baidu.com:80 upstream 套接字 proxy_pass unix:/tmp/socket upstream 变量 proxy_pass $up_var 3.2 配置说明 njet.conf helper broker modules/njt_helper_broker_module.so conf/mqtt.conf; helper ctrl modules/njt_helper_ctrl_module.so conf/ctrl.conf; load_module modules/njt_stream_dyn_server_module.so; #配置stream动态VS 模块 load_module modules/njt_stream_dyn_proxy_pass_module.so; #配置stream动态proxy_pass 模块 user root root; cluster_name helper; node_name node-u01; error_log logs/error.log info; pid logs/njet.pid; events { worker_connections 1024; } http { dyn_kv_conf conf/iot-work.conf; include mime.types; default_type application/octet-stream; access_log logs/access.log; vhost_traffic_status_zone; vhost_traffic_status_filter_by_set_key $request_uri "$realip_remote_addr to $server_name"; variables_hash_max_size 2048; sendfile on; keepalive_timeout 65; upstream backend1 { zone backend1_zone 128k; server 127.0.0.1:5800; } server { listen 5555; server_name test-server; location / { alias html; } } server { listen 443 ssl; server_name dev.test.com; ssl_reject_handshake off; ssl_ntls off; ssl_certificate certs/rsa.dev.test.com.crt.pem; ssl_certificate_key certs/rsa.dev.test.com.key.pem; ssl_ciphers RSA+AES128:RSA+AES256:RSA+3DES:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:EECDH+AES256:EECDH+3DES:!MD5; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_prefer_server_ciphers on; location / { charset utf-8; default_type text/html; return 200 "dev.test.com 443 test ok"; } } } stream { map $njtmesh_port $mesh_server_name { 17082 server-17082; 18082 server-18082; 19082 server-19082; default "123"; } upstream backend_s1 { zone backend_s1 1m; server 127.0.0.1:5555; } upstream backend_s2 { zone backend_s2 1m; server 192.168.40.150:5678; } server { listen 22222 mesh; proxy_pass backend_s1; } server { listen 22223 udp mesh; return "22223 udp ok"; } } 4. 调用样例 4.1 API说明 查询接口： https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_vs/index.html Wed, 24 Sep 2025 11:27:56 +0800 https://docs.njet.org.cn/docs/v4.0.1/reference/stream/stream_vs/index.html 1. 功能说明 stream动态VS功能，支持对stream的server进行动态添加、删除，可以对支持在server中添加的指令进行便捷的配置。 支持添加tcp server和udp server两种类型。 2. 依赖模块 动态VS功能依赖模块： njet.conf load_module modules/njt_stream_dyn_server_module.so; njet_ctrl.conf load_module modules/njt_stream_dyn_server_api_module.so; 3. 配置说明 njet.conf （数据面配置） helper broker modules/njt_helper_broker_module.so conf/mqtt.conf; helper ctrl modules/njt_helper_ctrl_module.so conf/ctrl.conf; load_module modules/njt_stream_dyn_server_module.so; #配置stream动态VS 模块 user root root; cluster_name helper; node_name node-u01; error_log logs/error.log info; pid logs/njet.pid; events { worker_connections 1024; } http { dyn_kv_conf conf/iot-work.conf; include mime.types; default_type application/octet-stream; access_log logs/access.log; vhost_traffic_status_zone; vhost_traffic_status_filter_by_set_key $request_uri "$realip_remote_addr to $server_name"; variables_hash_max_size 2048; sendfile on; keepalive_timeout 65; upstream backend1 { zone backend1_zone 128k; server 127.0.0.1:5800; } server { listen 5555; server_name test-server; location / { alias html; } } server { listen 443 ssl; server_name dev.test.com; ssl_reject_handshake off; ssl_ntls off; ssl_certificate certs/rsa.dev.test.com.crt.pem; ssl_certificate_key certs/rsa.dev.test.com.key.pem; ssl_ciphers RSA+AES128:RSA+AES256:RSA+3DES:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:EECDH+AES256:EECDH+3DES:!MD5; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_prefer_server_ciphers on; location / { charset utf-8; default_type text/html; return 200 "dev.test.com 443 test ok"; } } } stream { map $njtmesh_port $mesh_server_name { 17082 server-17082; 18082 server-18082; 19082 server-19082; default "123"; } upstream backend_s1 { zone backend_s1 1m; server 127.0.0.1:5555; } server { listen 22222 mesh; proxy_pass backend_s1; } server { listen 22223 udp mesh; return "22223 udp ok"; } server { listen 22224 ssl mesh; ssl_certificate certs/ca/ECC/ecc-root_cert.pem; ssl_certificate_key certs/ca/ECC/ecc-root_private_key.pem; return "22224 ssl ok"; } } njet_ctrl.conf （控制面配置）