Harbor同时支持 IP 以及 域名进行外网访问

发表于 阅读次数： 本文字数： 2.5k 阅读时长 ≈ 4 分钟

需求

部署了私有化的 Harbor，需要 Harbor 同时支持 内网IP(HTTP)、外网IP(HTTP)、域名(HTTPS)进行访问。

配置

  • 1、在 harbor.yaml 中配置 external_url
    1
    external_url: http://62.132.105.159:5080

将 5080 端口映射到 外网，即可使用 http://62.132.105.159:5080 访问 Harbor。

  • 2、使用域名访问

配置 nginx 代理，配置如下

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
user  root;
worker_processes auto;

events {
    worker_connections 1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    sendfile        on;
    keepalive_timeout 65;

    gzip on;
    gzip_static on;

    proxy_buffer_size          128k;
    proxy_buffers              32 128k;
    proxy_busy_buffers_size    128k;

    fastcgi_buffers 8 128k;
    send_timeout 60;

    server_tokens off;

    # =========================
    # Harbor HTTPS Reverse Proxy
    # =========================
    server {
    listen 443 ssl http2;
    server_name xx.xxx.com;

    ssl_certificate      /home/cert/xx.xxx.pem;
    ssl_certificate_key  /home/cert/xx.xxx.key;

    client_max_body_size 0;

    # 建议给 registry 单独一段，避免某些客户端拉大层超时/缓冲问题
    location /v2/ {
        proxy_pass http://172.16.36.52:8894;

        # ✅关键：一定要用 $http_host，才能把 :5088 带进去
        proxy_set_header Host              $http_host;
        proxy_set_header X-Forwarded-Host  $http_host;

        # ✅关键：告诉 Harbor 外部访问端口是 5088（不是 443）
        proxy_set_header X-Forwarded-Port  5088;
        proxy_set_header X-Forwarded-Proto https;

        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;

        proxy_http_version 1.1;
        proxy_read_timeout 900;
        proxy_send_timeout 900;

        # 拉镜像层时建议关掉请求缓冲
        proxy_request_buffering off;
    }

    location /service/ {
        proxy_pass http://172.16.36.52:8894;

        proxy_set_header Host              $http_host;
        proxy_set_header X-Forwarded-Host  $http_host;
        proxy_set_header X-Forwarded-Port  5088;
        proxy_set_header X-Forwarded-Proto https;

        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;

        proxy_http_version 1.1;
        proxy_read_timeout 900;
        proxy_send_timeout 900;
    }

    location / {
        proxy_pass http://172.16.36.52:8894;

        proxy_set_header Host              $http_host;
        proxy_set_header X-Forwarded-Host  $http_host;
        proxy_set_header X-Forwarded-Port  5088;
        proxy_set_header X-Forwarded-Proto https;

        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;

        proxy_http_version 1.1;
        proxy_read_timeout 900;
        proxy_send_timeout 900;
    }
}

}

部署 Nginx 服务后，即可使用 域名访问、拉取 Harbor 数据。