diff --git a/deploy/nginx/yzx_oa_sfu.conf b/deploy/nginx/yzx_oa_sfu.conf
index cdc0e1f..4e17648 100644
--- a/deploy/nginx/yzx_oa_sfu.conf
+++ b/deploy/nginx/yzx_oa_sfu.conf
@@ -1,30 +1,34 @@
 # Put this inside the existing HTTPS server block for oa.qbjjyyun.net.
 # The trailing slash keeps the query string: ?roomId=xxx&peerId=xxx
 
-location /ws_webrtc_sfu_api/ {
+location ^~ /ws_webrtc_sfu_api/ {
     proxy_pass http://127.0.0.1:4443/;
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
+    proxy_set_header Sec-WebSocket-Protocol $http_sec_websocket_protocol;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;
     proxy_read_timeout 86400;
     proxy_send_timeout 86400;
+    proxy_buffering off;
 }
 
-location /ws_webrtc_sfu_api_test/ {
+location ^~ /ws_webrtc_sfu_api_test/ {
     proxy_pass http://127.0.0.1:4443/;
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
+    proxy_set_header Sec-WebSocket-Protocol $http_sec_websocket_protocol;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;
     proxy_read_timeout 86400;
     proxy_send_timeout 86400;
+    proxy_buffering off;
 }
 
 location /sfu-healthz {
diff --git a/deploy/nginx/yzx_oa_sfu.multi-env.conf b/deploy/nginx/yzx_oa_sfu.multi-env.conf
index 6e36b4b..c92fe83 100644
--- a/deploy/nginx/yzx_oa_sfu.multi-env.conf
+++ b/deploy/nginx/yzx_oa_sfu.multi-env.conf
@@ -13,17 +13,19 @@
 # nanping: oa.npzx.org.cn
 # server_name oa.npzx.org.cn;
 
-location /ws_webrtc_sfu_api/ {
+location ^~ /ws_webrtc_sfu_api/ {
     proxy_pass http://127.0.0.1:4443/;
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
+    proxy_set_header Sec-WebSocket-Protocol $http_sec_websocket_protocol;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;
     proxy_read_timeout 86400;
     proxy_send_timeout 86400;
+    proxy_buffering off;
 }
 
 location /sfu-healthz {
@@ -31,15 +33,17 @@ location /sfu-healthz {
 }
 
 # live/test only. Enable inside oa.live.educlouddata.com if this environment still uses _test.
-# location /ws_webrtc_sfu_api_test/ {
+# location ^~ /ws_webrtc_sfu_api_test/ {
 #     proxy_pass http://127.0.0.1:4443/;
 #     proxy_http_version 1.1;
 #     proxy_set_header Upgrade $http_upgrade;
 #     proxy_set_header Connection "upgrade";
+#     proxy_set_header Sec-WebSocket-Protocol $http_sec_websocket_protocol;
 #     proxy_set_header Host $host;
 #     proxy_set_header X-Real-IP $remote_addr;
 #     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 #     proxy_set_header X-Forwarded-Proto $scheme;
 #     proxy_read_timeout 86400;
 #     proxy_send_timeout 86400;
+#     proxy_buffering off;
 # }