Updated on 2024-08-08 GMT+08:00

Solution Overview

Scenarios

This solution deploys an Nginx reverse proxy on a cloud server, so that resources stored in an Object Storage Service (OBS) bucket can be accessed from a fixed IP address. With a reverse proxy configured, only the proxy server's IP address is exposed. The actual OBS domain name is hidden to enhance data security.

Solution Architecture

The following figure shows the architecture of this solution.
Figure 1 Solution architecture

This solution will:

  • Create a Flexus X Instance (FlexusX) for setting up an Nginx reverse proxy.
  • Apply for an EIP and bind it to the newly created FlexusX instance. With the EIP bound, you can download the Nginx installation package on the FlexusX instance and provide access to external systems.
  • Create a security group and configure access rules to secure the Nginx reverse proxy.

Advantages

  • High security and reliability

    Only the proxy server's IP address is exposed. The actual OBS domain name is hidden to enhance data security.

  • Open source and custom development

    This solution is open-source and free for commercial use. You can also make custom development based on source code.

  • Easy deployment

    You can set up an Nginx reverse proxy with a few clicks.

Constraints

  • Before deploying this solution, ensure that you have created a Huawei ID with access to the target region and enabled Huawei Cloud services. and sufficient balance for purchasing the resources listed in Resource Planning and Costs.
  • If you select the yearly/monthly billing mode, ensure that your account has sufficient balance. If you do not have sufficient balance, you can go to the Billing Center to manually pay for the order.
  • You have obtained the region and name of the OBS bucket you want to configure a proxy for.