nginx限速
第一步，先创建限制的规则，我这里直接在nginx默认的配置文件目录下配置，如果想自定义，需要在主配置文件添加include xx/xxx/xxx/*.conf配置
[root@node5 nginx]# cat conf.d/limit_zone.conf geo $white_ip { default 1; include whiteip.conf; } map $white_ip $limited { 1 $binary_remote_addr; 0 ""; } limit_req_status 418; limit_conn_status 418; limit_conn_zone $limited zone=addr:10m; limit_req_zone $limited zone=one:5m rate=5r/s; limit_req_zone $limited zone=two:5m rate=10r/s; limit_req_zone $limited zone=three:5m rate=20r/s; limit_req_zone $limited zone=four:5m rate=30r/s; limit_req_zone $limited zone=five:5m rate=50r/s; limit_req_zone $limited zone=ten:10m rate=100r/m; limit_req_log_level error; limit_conn_log_level error;
第二步，创建测试的html测试配置文件，这里的limit_req可以配置在server里也可以配置在location里，配置在server里的话作用于全局，配置在location里，只作用于某一个uri
[root@node5 nginx]# cat conf.d/test_limit.conf server{ listen 80; server_name _; access_log /var/log/nginx/logs/test_limit.log main; error_log /var/log/nginx/logs/test_limit.log error; limit_req zone=two burst=5 nodelay; limit_req zone=ten burst=5 nodelay; #limit_rate 10M; location / { root /html; autoindex on; autoindex_exact_size off; autoindex_localtime on; } }
第三步，在nginx.conf主配置文件的同目录下，创建白名单，可以不受我们所配置的限制
[root@node5 nginx]# cat whiteip.conf 10.0.0.0/8 0; 60.205.246.14 0; 59.110.62.117 0; 59.110.49.218 0; 127.0.0.1 0;
第四步，重启
nginx -s reload
测试1：ab命令来测试，可以看到我们用127.0.0.1这个ip访问是没有问题的
[root@node5 nginx]# ab -c 100 -n 300 'http://127.0.0.1/' This is ApacheBench, Version 2.3 <$Revision: 1430300 $> Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/ Licensed to The Apache Software Foundation, http://www.apache.org/ Benchmarking 127.0.0.1 (be patient) Completed 100 requests Completed 200 requests Completed 300 requests Finished 300 requests Server Software: nginx/1.20.1 Server Hostname: 127.0.0.1 Server Port: 80 Document Path: / Document Length: 236 bytes Concurrency Level: 100 Time taken for tests: 0.019 seconds Complete requests: 300 Failed requests: 0 Write errors: 0 Total transferred: 107400 bytes HTML transferred: 70800 bytes Requests per second: 15714.21 [#/sec] (mean) Time per request: 6.364 [ms] (mean) Time per request: 0.064 [ms] (mean, across all concurrent requests) Transfer rate: 5493.84 [Kbytes/sec] received Connection Times (ms) min mean[+/-sd] median max Connect: 0 1 0.5 1 2 Processing: 2 4 0.4 4 5 Waiting: 0 3 0.3 3 4 Total: 2 6 0.3 6 6 Percentage of the requests served within a certain time (ms) 50% 6 66% 6 75% 6 80% 6 90% 6 95% 6 98% 6 99% 6 100% 6 (longest request)
测试2：我们把白名单的参数从0改为1，之后nginx -s reload 在测试，可以看到并发如果过高就有失败的了，在去看日志
[root@node5 nginx]# cat whiteip.conf 10.0.0.0/8 0; 60.205.246.14 0; 59.110.62.117 0; 59.110.49.218 0; 127.0.0.1 1;
[root@node5 nginx]# ab -c 100 -n 300 'http://127.0.0.1/' This is ApacheBench, Version 2.3 <$Revision: 1430300 $> Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/ Licensed to The Apache Software Foundation, http://www.apache.org/ Benchmarking 127.0.0.1 (be patient) Completed 100 requests Completed 200 requests Completed 300 requests Finished 300 requests Server Software: nginx/1.20.1 Server Hostname: 127.0.0.1 Server Port: 80 Document Path: / Document Length: 236 bytes Concurrency Level: 100 Time taken for tests: 0.018 seconds Complete requests: 300 Failed requests: 294 (Connect: 0, Receive: 0, Length: 294, Exceptions: 0) Write errors: 0 Non-2xx responses: 294 Total transferred: 35664 bytes HTML transferred: 1416 bytes Requests per second: 17066.79 [#/sec] (mean) Time per request: 5.859 [ms] (mean) Time per request: 0.059 [ms] (mean, across all concurrent requests) Transfer rate: 1981.35 [Kbytes/sec] received Connection Times (ms) min mean[+/-sd] median max Connect: 0 1 0.6 1 3 Processing: 3 4 0.4 4 5 Waiting: 0 3 0.3 3 3 Total: 3 5 0.5 5 6 Percentage of the requests served within a certain time (ms) 50% 5 66% 5 75% 5 80% 5 90% 6 95% 6 98% 6 99% 6 100% 6 (longest request)
日志内容，418位设置的状态码
