Nginx将上游报头传递给远程请求

Question

这个问题类似于这个问题，但是在aws s3资源上做x-accel-redirect。前者试图将上游报头设置为本地请求。这很好。但是现在我已经将我的内容移动到amazon s3，我想实现同样的限制下载到s3对象。

这是我的nginx配置

proxy_pass_header X-Accel-Redirect;
passenger_pass_header X-Accel-Redirect;
location ~* ^/download_zip/(.*) {
    internal;
    resolver 8.8.8.8 valid=300s;

    proxy_buffering off;
    proxy_set_header Content-Length ""; 
    proxy_set_header Cookie ""; 
    proxy_hide_header x-amz-request-id;
    proxy_hide_header x-amz-meta-uid;
    proxy_hide_header x-amz-id-2;
    proxy_hide_header x-amz-meta-mode;
    proxy_hide_header x-amz-meta-mtime;
    proxy_hide_header x-amz-meta-gid;
    proxy_hide_header x-amz-version-id;
    proxy_hide_header accept-ranges;
    # Do not touch local disks when proxying
    # content to clients
    proxy_method GET;
    proxy_pass_request_body off;
    proxy_max_temp_file_size 0;
    proxy_pass_header Content-MD5;
    add_header Content-MD5 $upstream_http_content_md5; 
   #  proxy_set_header Content-MD5 "123123123123123";

     proxy_pass https://a_b_c_assets.s3-east.amazonaws.com/$1$is_args$args; 

     }

和rails部分是

headers['X-Accel-Redirect'] = '/download_zip/uploads/' + params[:story_id] +'/' +    params[:story_id] + '.zip?' + secure_part
headers['X-Accel-Expires'] = 'max'
headers['Content-MD5'] = checksum

一切工作正常，除了Content-MD5不传递给代理请求。

任何帮助都非常感谢。

这里又是一个类似的问题

Answer 1

proxy_pass_header X-Accel-Redirect;
passenger_pass_header X-Accel-Redirect;
# this is intermediate location that stores header
# to variable and rewrites to another location
location ^~ /download_zip/ {
    internal;
    set $Content_MD5 $upstream_http_content_md5;
    rewrite ^/(.+) /amazon_$1;
}
location ^~ /amazon_download_zip/ {
    internal;
    resolver 8.8.8.8 valid=300s;
    proxy_buffering off;
    proxy_set_header Content-Length ""; 
    proxy_set_header Cookie ""; 
    proxy_hide_header x-amz-request-id;
    proxy_hide_header x-amz-meta-uid;
    proxy_hide_header x-amz-id-2;
    proxy_hide_header x-amz-meta-mode;
    proxy_hide_header x-amz-meta-mtime;
    proxy_hide_header x-amz-meta-gid;
    proxy_hide_header x-amz-version-id;
    proxy_hide_header accept-ranges;
    # Do not touch local disks when proxying
    # content to clients
    proxy_method GET;
    proxy_pass_request_body off;
    proxy_max_temp_file_size 0;
    proxy_pass_header Content-MD5;
    add_header Content-MD5 $Content_MD5; 
    proxy_pass https://a_b_c_assets.s3-east.amazonaws.com/;
}