Nginx 搭建与部署 -04 --模板

nginx 常用模板
目录索引模块
###  ngx_http_autoindex_module

ngx_http_autoindex_module模块处理以斜杠字符('/')结尾的请求,并生成目录列表。

当ngx_http_index_module模块找不到索引文件时,通常会将请求传递给ngx_http_autoindex_module模块。

1.语法 
Syntax:	autoindex on | off;
Default:	
autoindex off;
Context:	http, server, location
2.配置

[root@web01 ~]# vim /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8; #若此处加入utf8,则需要修改nginx源配置文件的指向,移动放到末尾(因为是先解码,再扫描)

    location / {
        root /mm/autoindex;
        autoindex on;
    }
}

访问网站正常,加down跳转目录页面
[root@web01 ~]# vim /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;

    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
    }
}

#创建站点目录
[root@web01 ~]# mkdir -p /mm/autoindex/mm/down
[root@web01 7]# echo "测试autoindex模块" > /mm/autoindex/index.html

#访问
http://www.autoindex.com/		      主页的网站
http://www.autoindex.com/mm/down/	  下载文件的目录

4、常用优化参数

#显示文件字节大小,默认是显示字节大小,配置为off之后,显示具体大小 M/G/K
Syntax:	autoindex_exact_size on | off;
Default:	autoindex_exact_size on;
Context:	http, server, location

#显示文件的修改的具体时间,默认显示的时间与真实时间相差8小时,所以配置 on
Syntax:	autoindex_localtime on | off;
Default:	autoindex_localtime off;
Context:	http, server, location



##### 5、完整配置
[root@web01 down]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
	#auth_basic "linux12 MM";
	#auth_basic_user_file /etc/nginx/auth_basic;
    }
}

## 重启nginx   systemctl restart nginx

Nginx访问控制模块
#ngx_http_access_module

#允许访问的语法
Syntax:	allow address | all;
Default:	—
Context:	http, server, location, limit_except

#拒绝访问的语法
Syntax:	deny address | all;
Default:	—
Context:	http, server, location, limit_except


#如果配置允许,则也要配置拒绝;配置拒绝可以单独配置

## 2、配置访问控制示例

1>拒绝指定的IP,其他全部允许
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    #server_name localhost;
    server_name www.autoindex.com;
    charset utf8;
    location / {
        root /mm/autoindex;
	#index index.html;
	autoindex on;
    }

    location /down {
    root /mm/autoindex;
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
    deny 10.10.0.100;
    allow all;
    }
}

### 重启nginx  systemctl  restart  nginx

2>只允许指定IP能访问, 其它全部拒绝
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    #server_name localhost;
    server_name www.autoindex.com;
    charset utf8;
    location / {
        root /mm/autoindex;
	#index index.html;
	autoindex on;
    }

    location /down {
    root /mm/autoindex;
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
    deny all;
    allow 10.10.0.100;  --->  #向下让上读取,把all放在最后,切记,切记!
    }
}

### 重启nginx  systemctl  restart  nginx

3>只允许10.0.0.100 访问,拒绝该网段其他IP
[[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    #server_name localhost;
    server_name www.autoindex.com;
    charset utf8;
    location / {
        root /mm/autoindex;
	index index.html;
    }

    location /down {
    root /mm/autoindex;
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
    allow 10.10.0.100;
    deny 10.10.0.100/24; 
    }
}

### 重启nginx  systemctl  restart  nginx
Nginx访问认证模块
# ngx_http_auth_basic_module

#开启的登录认证,没有用
Syntax:	auth_basic string | off;
Default:	auth_basic off;
Context:	http, server, location, limit_except

#指定登录用的用户名密码文件
Syntax:	auth_basic_user_file file;
Default:	—
Context:	http, server, location, limit_except

1、创建密码文件

#创建密码文件需要用到 htpasswd
[root@web01 ~]# htpasswd -c /etc/nginx/auth_basic xxx
New password:  #123
Re-type new password: 
Adding password for user xxx
# htpasswd -m /etc/nginx/auth_basic mm #设置多个用户连接
#添加一个登录用户/
[root@web01 ~]# htpasswd  /etc/nginx/auth_basic sd --去掉c
New password: 
Re-type new password: 
Adding password for user sd

#密码文件内容
[root@web01 autoindex]# cat /etc/nginx/auth_basic 
lnd:$apr1$F3muI82n$GnNVXdEB6GGlIEapGEM3x1

3、配置访问登录
[[root@web01 autoindex]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
	auth_basic "欢迎访问";
	auth_basic_user_file /etc/nginx/auth_basic;
    }
}
### 重启nginx  systemctl  restart  nginx
Nginx状态监控模块
# ngx_http_stub_status_module

ngx_http_stub_status_module模块提供对nginx基本状态信息的访问。
默认情况下不构建此模块,应使用--with-http_stub_status_module配置参数启用它

Syntax:	stub_status;
Default:	—
Context:	server, location

1、配置
[root@web01 autoindex]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
	auth_basic "欢迎访问";
	auth_basic_user_file /etc/nginx/auth_basic;
    }
    location = /basic_status {
        stub_status;  
    }
} 

### 重启nginx  systemctl  restart  nginx
2、访问

#访问 http://www.autoindex.com/basic_status

#nginx七种状态
Active connections: 2 
server accepts handled requests
          2       2      3 
Reading: 0 Writing: 1 Waiting: 1 

Active connections		#活跃的连接数
accepts					#TCP连接总数
handled					#成功的TCP连接数
requests				#成功的请求数
Reading					#读取的请求头
Writing					#响应头部
Waiting					#等待的请求数,开启了keepalive

# 注意, 一次TCP的连接,可以发起多次http的请求, 如下参数可配置进行验证
keepalive_timeout  0;   # 类似于关闭长连接
过滤nginx的请求连接数

curl http://www.autoindex.com/basic_status

nginx模块回顾

# 1.目录索引模块
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
    }
}


# 2.访问限制模块
#允许10.0.0.100访问,拒绝所有
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        allow 10.0.0.100; #允许10.0.0.100访问,拒绝所有
        deny all;          #拒绝所有
    } 
}

# 3.访问控制模块
1.配置密码文件
[root@web01 ~]# htpasswd -c /etc/nginx/auth_basic lhd
New password: 123
Re-type new password: 123
Adding password for user lhd

2.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
	auth_basic "欢迎访问"; # 随便写
	auth_basic_user_file /etc/nginx/auth_basic;## 用户名密码
    }
}
# 4.nginx状态模块
1.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    location / {
        root /mm/autoindex;
        index index.html;
    }
    location = /basic_status {
        stub_status;
    }
}

2.页面
Active connections: 2 
server accepts handled requests
 5 5 12 
Reading: 0 Writing: 1 Waiting: 1 

3.监控网站的PV
[root@web01 ~]#curl -s http://www.autoindex.com/basic_status | awk 'NR==3 {print $3}'| awk 'NR==3 {print $3}'
12
连接限制模板
# ngx_http_limit_conn_module

1.语法
#设置限制的空间
Syntax:	limit_conn_zone key zone=name:size;
Default:	—
Context:	http

limit_conn_zone 	#设置空间的模块
key 				#空间存储的内容
zone				#指定空间
=name				#名字
:size;				#大小

#调用限制的空间
Syntax:	limit_conn zone number;
Default:	—
Context:	http, server, location

limit_conn			#调用空间的模块
zone 				#空间的名字
number;				#指定可以同时连接的次数

2.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf 
limit_conn_zone $remote_addr zone=conn_zone:20m;
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    access_log /var/log/nginx/www.autoindex.com.log main;
    limit_conn conn_zone 2;
    
    location / {
        root /mm/autoindex;
        index index.html;
    }

    location /down {
        root /mm/autoindex;
        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
	auth_basic "欢迎访问";
	auth_basic_user_file /etc/nginx/auth_basic;
    }
    location = /basic_status {
        stub_status;
    }
}
请求限制模块
# 1.语法
#设置空间的语法
Syntax:	limit_req_zone key zone=name:size rate=rate [sync];
Default:	—
Context:	http

limit_req_zone			#设置空间的模块
key						#空间存储的内容
zone					#指定空间
=name					#名字
:size 					#大小
rate=rate [sync];		#读写速率

#调用的语法
Syntax:	limit_req zone=name [burst=number] [nodelay | delay=number];
Default:	—
Context:	http, server, location

limit_req 				#调用控件模块
zone=name 				#指定空间=空间的名字
[burst=number]			#允许多请求几次
[nodelay | delay=number]; #延时

2、配置
[root@web01 ~]#cat/etc/nginx/conf.d/www.autoindex.com.conf 

limit_conn_zone $remote_addr zone=conn_zone:20m;
limit_req_zone $remote_addr zone=req_zone:20m rate=100r/s;
server {
    listen 80;
    server_name www.autoindex.com;
    charset utf8;
    limit_conn conn_zone 100;
    limit_req zone=req_zone;
    #limit_req zone=req_zone burst=8 nodelay;

    location / {
        root /mm/autoindex;
        index index.html;
    }
}

3、测试
[root@web01 ~]# ab -n 1000 -c 20 http://www.autoindex.com/index.html
nginx的location配置
使用Nginx Location可以控制访问网站的路径,但一个server可以有多个location配置, 多个location的优先级该如何区分:
1.语法
Syntax:	location [ = | ~ | ~* | ^~ ] uri { ... }
		location @name { ... }
Default:	—
Context:	server, location

2.location匹配符

匹配符  	匹配规则	                 优先级
=	      精确匹配	                    1
^~	      以某个字符串开头     	          2
~	      区分大小写的正则匹配	        3
~*	      不区分大小写的正则匹配	       3
/	      通用匹配,任何请求都会匹配到	 4

3.优先级验证  -- #了解
[root@web01 ~]# vim /etc/nginx/conf.d/mm2021.conf ###优先级验证
server {
    listen 80;
    server_name linux12.test.com;
    location / {
        default_type text/html; #文档字符
        return 200 "location /";
    }
 
    location =/ {
        default_type text/html;
        return 200 "location =/";
    }
 
    location ~ / {
        default_type text/html;
        return 200 "location ~/";
    }
 
    # location ^~ / {
    #   default_type text/html;
    #   return 200 "location ^~";
    # }
}

4.Locaiton应用场景
# 通用匹配,任何请求都会匹配到
location / {
    ...
}
 
# 严格区分大小写,匹配以.php结尾的都走这个location    
location ~ \.php$ {
    ...
}
 
# 严格区分大小写,匹配以.jsp结尾的都走这个location 
location ~ \.jsp$ {
    ...
}
 
# 不区分大小写匹配,只要用户访问.jpg,gif,png,js,css 都走这条location
location ~* .*\.(jpg|gif|png|js|css)$ {
    ...
}
http://linux.test.com/1.PHP
http://linux.test.com/1.JPG
http://linux.test.com/1.jsp
http://linux.test.com/1.Gif
http://linux.test.com/1.PnG
http://linux.test.com/1.JsP
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

FikL-09-19

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值