Tomcat、NGINX、Vaadin、Spring Boot 和长轮询推送

Question

我正在尝试使用 Vaadin（Java、Spring Boot）、NGINX 和 Tomcat 正确配置 LONG POLLING 推送。

有时 Push 停止工作，我怀疑这可能是我设置中的一些错误配置的原因。

您能否验证我的配置是否存在问题（尤其是超时、缓冲区等）：

Vaadin/Spring Boot/Tomcat 配置：

server.servlet.session.persistent=false
server.servlet.session.timeout=30m
server.servlet.session.tracking-modes=cookie
server.servlet.session.cookie.http-only=true
server.servlet.session.cookie.secure=true
server.servlet.session.cookie.max-age=365d

server.tomcat.accesslog.enabled=true
server.tomcat.accesslog.pattern=common

vaadin.whitelisted-packages=com.vaadin,org.vaadin,com.examle
vaadin.heartbeatInterval=30
vaadin.pushLongPollingSuspendTimeout=25000
vaadin.maxMessageSuspendTimeout=5000
vaadin.closeIdleSessions=false

vaadin.eagerServerLoad=false

NGINX 配置：

server {
    
    sendfile                   on;
    tcp_nodelay                on;
    tcp_nopush                 on;
  
    etag                       off;
    if_modified_since          off;
  
    proxy_buffering            off;

    proxy_buffer_size          128k;
    proxy_buffers              4 256k;
    proxy_busy_buffers_size    256k;

    proxy_cache                off;
    proxy_cache_convert_head   off;
    proxy_max_temp_file_size   0;
    client_max_body_size       0;
  
    proxy_http_version         1.1;
    proxy_pass_request_headers on;
    proxy_pass_request_body    on;
  
    proxy_read_timeout         300;
    proxy_connect_timeout      300;
    proxy_send_timeout         300;
    reset_timedout_connection  on;
  
    proxy_redirect             off;
    resolver                   77.88.8.8 77.88.8.1 8.8.8.8 8.8.4.4 valid=1d;
  
    gzip on;
    gzip_disable "msie6";

    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_min_length 256;
    gzip_types
    application/atom+xml
    application/geo+json
    application/javascript
    application/x-javascript
    application/json
    application/ld+json
    application/manifest+json
    application/rdf+xml
    application/rss+xml
    application/xhtml+xml
    application/xml
    font/eot
    font/otf
    font/ttf
    image/svg+xml
    text/css
    text/javascript
    text/plain
    text/xml;



    location / {


        add_header X-Frame-Options "SAMEORIGIN";
        add_header X-Frame-Options "ALLOW-FROM blog.example.com";
        add_header Access-Control-Allow-Origin example.com;
        add_header Access-Control-Allow-Origin blog.example.com;
        add_header Content-Security-Policy "frame-ancestors example.com blog.example.com";


        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_read_timeout     300;
        proxy_connect_timeout  300;
        proxy_send_timeout     300;

        include /etc/nginx/snippets/cors.conf;
        proxy_pass http://127.0.0.1:8080;
            proxy_redirect http://127.0.0.1:8080 /;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-Real-IP $remote_addr; 
    }


}

我还向 Linux 添加了以下

sysctl

属性：

sysctl -w net.ipv4.tcp_retries2=5
sysctl -w net.ipv4.tcp_keepalive_time=300
sysctl -w net.ipv4.tcp_keepalive_intvl=1
sysctl -w net.ipv4.tcp_keepalive_probes=5