1 Nginx代理

域名：prometheus.zhongxiangbl.cn
白名单：120.133.133.68、14.155.234.185
Nginx代理配置 /opt/soft/nginx/conf/vhost/prometheus.conf

server {
    listen 443 ssl;
    server_name prometheus.zhongxiangbl.cn;

    ssl_certificate      /opt/soft/nginx/conf/certs/all.zhongxiangbl.cn.crt; 
    ssl_certificate_key  /opt/soft/nginx/conf/certs/all.zhongxiangbl.cn.key;


    ssl_session_cache    shared:SSL:10m;
    ssl_session_timeout  60m;
    ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!eNULL:!MD5:!ADH:!RC4:!DH:!DHE:!DES:!PSK:!EXPORT;
    ssl_prefer_server_ciphers  on;
    ssl_protocols TLSv1.2 TLSv1.1;

    ssl_session_tickets  on;
    ssl_session_cache    shared:SSL:10m;
    proxy_ignore_client_abort on;

    add_header X-XSS-Protection 1;
    add_header X-Frame-Options SAMEORIGIN;
    add_header X-Content-Type-Options nosniff;
    add_header Strict-Transport-Security max-age=31536000;
    add_header Set-Cookie "HttpOnly";
    add_header Set-Cookie "Secure";
    add_header Cache-Contron no-cache,max-age=36000;

    allow 120.133.133.68;
    allow 14.155.234.185;
    deny all;

    location / {
         proxy_redirect off;
         proxy_set_header Host $host:$server_port;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "Upgrade";
         proxy_pass http://traefik-ui/;
     }
    error_log  logs/prometheus_error.log notice;
}

server {
    listen 80;
    server_name prometheus.zhongxiangbl.cn;
    allow 120.133.133.68;
    allow 14.155.234.185;
    deny all;
    return 301 https://$host$request_uri;
 }

2 traefik代理

traefik ingressroute规则配置
命名空间：kubesphere-monitoring-system
域名：prometheus.zhongxiangbl.cn
service名称：prometheus-k8s
service端口：9090

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  annotations:
    kubernetes.io/ingress.class: traefik
  creationTimestamp: null
  name: prometheus-k8s
  namespace: kubesphere-monitoring-system
spec:
  entryPoints: []
  routes:
  - kind: Rule
    match: Host(`prometheus.zhongxiangbl.cn`) && PathPrefix(`/`)
    middlewares: []
    priority: 0
    services:
    - name: prometheus-k8s
      port: 9090