第 1 章 Nginx-低调大师

第 1 章 Nginx

2017-12-31 733

1.1. Installing

1.1.1. Netkiller OSCM 一键安装（CentOS 7）

1.1.2. Installing by apt-get under the debain/ubuntu

1.1.3. CentOS

1.1.3.1. spawn-fcgi script
1.1.3.2. php-fpm
1.1.3.3. fastcgi backend

1.1.4. installing by source

1.1.5. CentOS 7

1.1.6. Mac

1.1.6.1. php-fpm

1.1.7. rotate log

1.1.7.1. log shell
1.1.7.2. /etc/logrotate.d/nginx

1.2. Nginx 命令

1.2.1. -V show version and configure options then exit
1.2.2. -t : test configuration and exit
1.2.3. test configuration, dump it and exit

1.3. nginx 配置文件

1.3.1. http 配置

1.3.2. events

1.3.3. gzip

1.3.3.1. CDN支持

1.3.4. server_tokens

1.3.5. ssi

1.3.6. server

1.3.6.1. listen

1.3.6.2. 单域名虚拟主机

1.3.6.3. ssl 虚拟主机

1.3.6.4. server_name 配置

1.3.6.5. root 通过$host智能匹配目录

1.3.6.6. location

1.3.6.7. expires

1.3.6.7.1. 通过 add_header / more_set_headers 设置缓存
1.3.6.7.2. $request_uri
1.3.6.7.3. $request_filename

1.3.6.8. access

1.3.6.9. autoindex

1.3.6.10. try_files

1.3.6.11. add_header

1.3.6.11.1. Cache
1.3.6.11.2. Access-Control-Allow

1.3.7. HTTP2 配置 SSL证书

1.3.7.1. 自颁发证书

1.3.7.2. spdy

1.3.7.3. HTTP2

1.3.7.4. 用户访问 HTTP时强制跳转到 HTTPS

1.3.7.5. SSL 双向认证

1.3.7.5.1. 生成证书

1.3.7.5.1.1. CA
1.3.7.5.1.2. 服务器端
1.3.7.5.1.3. 客户端
1.3.7.5.1.4. 浏览器证书
1.3.7.5.1.5. SOAP 证书
1.3.7.5.1.6. 过程演示

1.3.7.5.2. Nginx 配置

1.3.7.5.3. 测试双向认证

1.3.8. rewrite

1.3.8.1. http get 参数处理
1.3.8.2. 正则取非

1.3.9. upstream 负载均衡

1.3.9.1. weight 权重配置
1.3.9.2. backup 实现热备

1.3.10. fastcgi

1.3.10.1. spawn-fcgi

1.3.10.2. php-fpm

1.3.10.2.1. php5-fpm

1.3.10.2.2. 编译 php-fpm

1.3.10.2.2.1. php-fpm 状态

1.3.10.2.3. fastcgi_pass

1.3.11. return

1.3.12. Nginx 变量

1.3.12.1. $host

1.3.12.2. http_user_agent

1.3.12.2.1. 禁止非浏览器访问
1.3.12.2.2. http_user_agent 没有设置不允许访问

1.3.12.3. http_referer

1.3.12.3.1. valid_referers/invalid_referer

1.3.12.4. request_filename

1.3.12.5. request_uri

1.3.12.6. remote_addr

1.3.12.7. http_cookie

1.3.12.8. request_method

1.3.12.9. limit_except

1.3.12.10. invalid_referer

1.3.12.11. $request_body - HTTP POST 数据

1.3.12.11.1. 用户日志
1.3.12.11.2. $request_body 用于缓存

1.3.12.12. 自定义变量

1.3.12.13. if 条件判断

1.4. Proxy

1.4.1. proxy_cache

1.4.2. rewrite + proxy_pass

1.4.3. request_filename + proxy_pass

1.4.4. $request_uri 与 proxy_pass 联合使用

1.4.5. try_files 与 proxy_pass 共用

1.4.6. Proxy 与 SSI

1.4.7. Host

1.4.8. expires

1.4.9. X-Forwarded-For

1.4.10. X-Sendfile

1.4.11. proxy_http_version

1.4.12. proxy_set_header

1.4.13. timeout 超时时间

1.4.14. example

1.4.14.1. upstream 实例
1.4.14.2. Tomcat 实例
1.4.14.3. Nginx -> Nginx -> Tomcat
1.4.14.4. Proxy 处理 Cookie
1.4.14.5. Proxy 添加 CORS 头
1.4.14.6. 通过 Proxy 汉化 restful 接口

1.5. Nginx module

1.5.1. stub_status
1.5.2. sub_filter 页面中查找和替换
1.5.3. auth_basic
1.5.4. valid_referers
1.5.5. ngx_http_flv_module
1.5.6. ngx_http_mp4_module
1.5.7. limit_zone
1.5.8. image_filter
1.5.9. ngx_stream_proxy_module
1.5.10. limit_except
1.5.11. geoip_country_code

1.6. Example

1.6.1. Nginx + Tomcat
1.6.2. 拦截index.html
1.6.3. Session 的 Cookie 域处理

1.7. FAQ

1.7.1. 405 Not Allowed?
1.7.2. 502 Bad Gateway?
1.7.3. 413 Request Entity Too Large
1.7.4. 502 Bad Gateway?
1.7.5. 499 Client Closed Request
1.7.6. proxy_pass
1.7.7. proxy_pass SESSION 丢失问题
1.7.8. [alert] 55785#0: *11449 socket() failed (24: Too many open files) while connecting to upstream
1.7.9. server_name 与 SSI 注意事项
1.7.10. location 跨 document_root 引用，引用 document_root 之外的资源
1.7.11. nginx: [warn] duplicate MIME type "text/html" in /etc/nginx/nginx.conf

1.1. Installing

1.1.1. Netkiller OSCM 一键安装（CentOS 7）

# curl -s https://raw.githubusercontent.com/oscm/shell/master/web/nginx/stable/nginx.sh | bash

1.1.2. Installing by apt-get under the debain/ubuntu

			
$ sudo apt-get install nginx

			
sudo /etc/init.d/nginx start

1.1.3. CentOS

http://nginx.org/packages/centos/$releasever/$basearch/

$releasever 是版本号

$basearch 处理器架构

http://nginx.org/packages/centos/6/x86_64/

			
cat > /etc/yum.repos.d/nginx.repo <<EOF
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/6/x86_64/
gpgcheck=0
enabled=1
EOF

i386

			
cat > /etc/yum.repos.d/nginx.repo <<EOF
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/5/i386/
gpgcheck=0
enabled=1
EOF

yum search nginx
============================================= Matched: nginx =============================================
nginx.x86_64 : high performance web server

yum install -y nginx
chkconfig nginx on
service nginx start

1.1.3.1. spawn-fcgi script

yum -y install spawn-fcgi

/etc/sysconfig/spawn-fcgi

移除SOCKET与OPTIONS注释, apache改为nginx

# cat /etc/sysconfig/spawn-fcgi
# You must set some working options before the "spawn-fcgi" service will work.
# If SOCKET points to a file, then this file is cleaned up by the init script.
#
# See spawn-fcgi(1) for all possible options.
#
# Example :
SOCKET=/var/run/php-fcgi.sock
OPTIONS="-u apache -g apache -s $SOCKET -S -M 0600 -C 32 -F 1 -P /var/run/spawn-fcgi.pid -- /usr/bin/php-cgi"

				
chkconfig spawn-fcgi on

starting spawn-fcgi

/etc/init.d/spawn-fcgi start

check port

# netstat -nl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN
tcp        0      0 :::22                       :::*                        LISTEN
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     25282  /var/run/php-fcgi.sock
unix  2      [ ACC ]     STREAM     LISTENING     8227   @/com/ubuntu/upstart

Unix domain socket

location ~ \.php$ { fastcgi_pass unix:/var/run/php-fcgi.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /var/www/nginx-default$fastcgi_script_name; include fastcgi_params; }

TCP/IP

/usr/bin/spawn-fcgi -a 127.0.0.1 -p 9000 -u nginx -g nginx -d /www -C 32 -F 1 -P /var/run/spawn-fcgi.pid -f /usr/bin/php-cgi

				
        location ~ \.php$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  /var/www/nginx-default$fastcgi_script_name;
            include        fastcgi_params;
        }

# netstat -tulpn | grep :9000
tcp        0      0 127.0.0.1:9000              0.0.0.0:*                   LISTEN      26877/php-cgi

chkconfig nginx on

check config

nginx -t

1.1.3.2. php-fpm

rpm -Uvh http://download.fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-5.noarch.rpm
yum install nginx -y

chkconfig nginx on

check config

nginx -t

yum -y install mysql mysql-server
yum -y install php php-cgi php-mysql php-mbstring php-gd php-fastcgi
yum -y install perl-DBI perl-DBD-MySQL

其他 php-fpm YUM源

rpm --import http://rpms.famillecollet.com/RPM-GPG-KEY-remi
rpm -ivh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

# rpm -Uvh http://centos.alt.ru/repository/centos/6/i386/centalt-release-6-1.noarch.rpm
# yum update

1.1.3.3. fastcgi backend

				
upstream backend  {
  server   localhost:1234;
}

fastcgi_pass   backend;

1.1.4. installing by source

			
cd /usr/local/src/
wget http://www.nginx.org/download/nginx-1.0.6.tar.gz

./configure --prefix=/usr/local/server/nginx \
--with-openssl=/usr/include \
--with-pcre=/usr/include/pcre/ \
--with-http_stub_status_module \
--without-http_memcached_module \
--without-http_fastcgi_module \
--without-http_rewrite_module \
--without-http_map_module \
--without-http_geo_module \
--without-http_autoindex_module

rpm 所使用的编译参数

nginx -V
nginx: nginx version: nginx/1.0.6
nginx: built by gcc 4.4.4 20100726 (Red Hat 4.4.4-13) (GCC)
nginx: TLS SNI support enabled
nginx: configure arguments: --prefix=/etc/nginx/ --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwcgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6

# nginx -V
nginx version: nginx/1.2.3
built by gcc 4.4.4 20100726 (Red Hat 4.4.4-13) (GCC)
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx/ --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6 --with-cc-opt='-O2 -g'

1.1.5. CentOS 7

			
#!/bin/bash
rpm -ivh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
yum install -y nginx

cp /etc/nginx/nginx.conf{,.original}

vim /etc/nginx/nginx.conf <<VIM > /dev/null 2>&1
:%s/worker_processes  1;/worker_processes  8;/
:%s/worker_connections  1024;/worker_connections  4096;/
:%s/#gzip/server_tokens off;\r    gzip/
:%s/#gzip/gzip/
:wq
VIM

sed -i '4iworker_rlimit_nofile 65530;' /etc/nginx/nginx.conf

systemctl enable nginx
systemctl start nginx

测试配置文件是否正确

# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

1.1.6. Mac

安装

neo@MacBook-Pro ~ % brew install nginx

启动

neo@MacBook-Pro ~ % brew services start nginx
==> Successfully started `nginx` (label: homebrew.mxcl.nginx)

重启

neo@MacBook-Pro /usr/local/etc/nginx % brew services restart nginx
Stopping `nginx`... (might take a while)
==> Successfully stopped `nginx` (label: homebrew.mxcl.nginx)
==> Successfully started `nginx` (label: homebrew.mxcl.nginx)

配置文件在 /usr/local/etc/nginx 下，默认使用 8080端口

nginx.conf 文件如下

			
#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       8080;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
    include servers/*;
}

1.1.6.1. php-fpm

mac下自带的软件

neo@MacBook-Pro ~ % php -v
PHP 5.6.30 (cli) (built: Feb  7 2017 16:18:37) 
Copyright (c) 1997-2016 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2016 Zend Technologies

启动php-fpm方法如下

cd /private/etc
sudo cp php-fpm.conf.default php-fpm.conf

修改error_log项, 改为error_log = /usr/local/var/log/php-fpm.log

启动 php-fpm

php-fpm

1.1.7. rotate log

1.1.7.1. log shell

一些特别的情况下需要切割日志，请参考下面的例子

				
# cat /srv/bin/rotatelog.sh

#!/bin/bash
# run this script at 0:00

#Nginx Log Path
log_dir="/var/log/nginx"
date_dir=`date +%Y/%m/%d/%H`

mkdir -p ${log_dir}/${date_dir} > /dev/null 2>&1
mv ${log_dir}/access.log ${log_dir}/${date_dir}/access.log
mv ${log_dir}/error.log ${log_dir}/${date_dir}/error.log

kill -USR1 `cat /var/run/nginx.pid`

gzip ${log_dir}/${date_dir}/access.log &
gzip ${log_dir}/${date_dir}/error.log &

1.1.7.2. /etc/logrotate.d/nginx

如果是非源码安装，一般情况nginx都会自带日志切割处理配置文件。

				
# cat /etc/logrotate.d/nginx
/var/log/nginx/*.log {
        daily
        missingok
        rotate 52
        compress
        delaycompress
        notifempty
        create 640 root adm
        sharedscripts
        postrotate
                [ -f /var/run/nginx.pid ] && kill -USR1 `cat /var/run/nginx.pid`
        endscript
}

原文出处：Netkiller 系列手札
本文作者：陈景峯
转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。

微信关注我们

原文链接：https://yq.aliyun.com/articles/327931

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

3.7. Miscellaneous

3.7.1.--update $ sqlmap --update 3.7.2.--save $ sqlmap -u "http://172.16.0.44/test/testdb.php?id=12" --referer="http://www.google.com" --save sqlmap.ini 原文出处：Netkiller 系列手札本文作者：陈景峯转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。

2017-12-31

673

1.3. nginx 配置文件

worker_processes = CPU 数量 user www; worker_processes 1; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; 1.3.1.http 配置自定义缓冲区相关设置 client_body_buffer_size 1K; client_header_buffer_size 1k; client_max_body_size 1k; large_client_header_buffers 2 1k; 超时相关设置 client_body_timeout 10; client_header_timeout 10; keepalive_timeout 65; send_timeout 10; 1.3.2.events events { worker_connections 4096; } 1.3.3.gzip gzip on; gzip_min_length 1000; gzip_buffers 4 8k; gzip_types text/plain text/css ...

2017-12-31

795

发表评论

资源下载

更多资源

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长，特征是大鼻子、头戴帽子、身穿背带裤，还留着胡子。与他的双胞胎兄弟路易基一起，长年担任任天堂的招牌角色。

Spring

Spring框架（Spring Framework）是由Rod Johnson于2002年提出的开源Java企业级应用框架，旨在通过使用JavaBean替代传统EJB实现方式降低企业级编程开发的复杂性。该框架基于简单性、可测试性和松耦合性设计理念，提供核心容器、应用上下文、数据访问集成等模块，支持整合Hibernate、Struts等第三方框架，其适用范围不仅限于服务器端开发，绝大多数Java应用均可从中受益。

Rocky Linux

Rocky Linux（中文名：洛基）是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版，作为CentOS稳定版停止维护后与RHEL（Red Hat Enterprise Linux）完全兼容的开源替代方案，由社区拥有并管理，支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性，采用模块化包装和SELinux安全架构，默认包含GNOME桌面环境及XFS文件系统，支持十年生命周期更新。

Sublime Text

Sublime Text具有漂亮的用户界面和强大的功能，例如代码缩略图，Python的插件，代码段等。还可自定义键绑定，菜单和工具栏。Sublime Text 的主要功能包括：拼写检查，书签，完整的 Python API ， Goto 功能，即时项目切换，多选择，多窗口等等。Sublime Text 是一个跨平台的编辑器，同时支持Windows、Linux、Mac OS X等操作系统。

第 1 章 Nginx

1.1. Installing

1.1.1. Netkiller OSCM 一键安装（CentOS 7）

1.1.2. Installing by apt-get under the debain/ubuntu

1.1.3. CentOS

1.1.3.1. spawn-fcgi script

1.1.3.2. php-fpm

1.1.3.3. fastcgi backend

1.1.4. installing by source

1.1.5. CentOS 7

1.1.6. Mac

1.1.6.1. php-fpm

1.1.7. rotate log

1.1.7.1. log shell

1.1.7.2. /etc/logrotate.d/nginx

3.7. Miscellaneous

1.3. nginx 配置文件

相关文章

发表评论

资源下载

Mario

Spring

Rocky Linux

Sublime Text

欢迎您来访！

第 1 章 Nginx

1.1. Installing

1.1.1. Netkiller OSCM 一键安装 （CentOS 7）

1.1.2. Installing by apt-get under the debain/ubuntu

1.1.3. CentOS

1.1.3.1. spawn-fcgi script

1.1.3.2. php-fpm

1.1.3.3. fastcgi backend

1.1.4. installing by source

1.1.5. CentOS 7

1.1.6. Mac

1.1.6.1. php-fpm

1.1.7. rotate log

1.1.7.1. log shell

1.1.7.2. /etc/logrotate.d/nginx

3.7. Miscellaneous

1.3. nginx 配置文件

相关文章

发表评论

资源下载

Mario

Spring

Rocky Linux

Sublime Text

欢迎您来访！

1.1.1. Netkiller OSCM 一键安装（CentOS 7）