http {
    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
                }
   upstream rt-web {
        server 192.168.0.123:443;
    }
   upstream rt-turn {
        server 192.168.0.124:443;
    }

    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
        server {
                listen     443 ssl;
                server_name  web.***.cn;
                ssl_certificate  /usr/local/nginx/ssl/***.crt;
                ssl_certificate_key /usr/local/nginx/ssl/***key;
                ssl_protocols    TLSv1 TLSv1.1 TLSv1.2;
        location / {
                proxy_pass http://192.168.0.95:80;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
        server {
                listen     443 ssl;
                server_name  rt-web.***.cn;
                ssl_certificate  /usr/local/nginx/ssl/***.crt;
                ssl_certificate_key /usr/local/nginx/ssl/***.key;
                ssl_protocols    TLSv1 TLSv1.1 TLSv1.2;
        location / {
                proxy_pass https://rt-web;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $connection_upgrade;
                proxy_set_header Host $host;
        }
    }
        server {
                listen     443 ssl;
                server_name  rt-turn.***.cn;
                ssl_certificate  /usr/local/nginx/ssl/***.crt;
                ssl_certificate_key /usr/local/nginx/ssl/***.key;
                ssl_protocols    TLSv1 TLSv1.1 TLSv1.2;
        location / {
                proxy_pass http://rt-turn;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $connection_upgrade;
                proxy_set_header Host $host;

        }
    }
}