nginx 常用模板
目录索引模块
### ngx_http_autoindex_module
ngx_http_autoindex_module模块处理以斜杠字符（'/'）结尾的请求，并生成目录列表。
当ngx_http_index_module模块找不到索引文件时，通常会将请求传递给ngx_http_autoindex_module模块。
1.语法
Syntax: autoindex on | off;
Default:
autoindex off;
Context: http, server, location
2.配置
[root@web01 ~]# vim /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8; #若此处加入utf8，则需要修改nginx源配置文件的指向，移动放到末尾（因为是先解码，再扫描）
location / {
root /mm/autoindex;
autoindex on;
}
}
访问网站正常，加down跳转目录页面
[root@web01 ~]# vim /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
}
}
#创建站点目录
[root@web01 ~]# mkdir -p /mm/autoindex/mm/down
[root@web01 7]# echo "测试autoindex模块" > /mm/autoindex/index.html
#访问
http://www.autoindex.com/ 主页的网站
http://www.autoindex.com/mm/down/ 下载文件的目录
4、常用优化参数
#显示文件字节大小，默认是显示字节大小，配置为off之后，显示具体大小 M/G/K
Syntax: autoindex_exact_size on | off;
Default: autoindex_exact_size on;
Context: http, server, location
#显示文件的修改的具体时间，默认显示的时间与真实时间相差8小时，所以配置 on
Syntax: autoindex_localtime on | off;
Default: autoindex_localtime off;
Context: http, server, location
##### 5、完整配置
[root@web01 down]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
#auth_basic "linux12 MM";
#auth_basic_user_file /etc/nginx/auth_basic;
}
}
## 重启nginx systemctl restart nginx
Nginx访问控制模块
#ngx_http_access_module
#允许访问的语法
Syntax: allow address | all;
Default: —
Context: http, server, location, limit_except
#拒绝访问的语法
Syntax: deny address | all;
Default: —
Context: http, server, location, limit_except
#如果配置允许，则也要配置拒绝；配置拒绝可以单独配置
## 2、配置访问控制示例
1>拒绝指定的IP,其他全部允许
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
#server_name localhost;
server_name www.autoindex.com;
charset utf8;
location / {
root /mm/autoindex;
#index index.html;
autoindex on;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
deny 10.10.0.100;
allow all;
}
}
### 重启nginx systemctl restart nginx
2>只允许指定IP能访问, 其它全部拒绝
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
#server_name localhost;
server_name www.autoindex.com;
charset utf8;
location / {
root /mm/autoindex;
#index index.html;
autoindex on;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
deny all;
allow 10.10.0.100; ---> #向下让上读取，把all放在最后，切记，切记！
}
}
### 重启nginx systemctl restart nginx
3>只允许10.0.0.100 访问，拒绝该网段其他IP
[[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
#server_name localhost;
server_name www.autoindex.com;
charset utf8;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
allow 10.10.0.100;
deny 10.10.0.100/24;
}
}
### 重启nginx systemctl restart nginx
Nginx访问认证模块
# ngx_http_auth_basic_module
#开启的登录认证，没有用
Syntax: auth_basic string | off;
Default: auth_basic off;
Context: http, server, location, limit_except
#指定登录用的用户名密码文件
Syntax: auth_basic_user_file file;
Default: —
Context: http, server, location, limit_except
1、创建密码文件
#创建密码文件需要用到 htpasswd
[root@web01 ~]# htpasswd -c /etc/nginx/auth_basic xxx
New password: #123
Re-type new password:
Adding password for user xxx
#添加一个登录用户/
[root@web01 ~]# htpasswd /etc/nginx/auth_basic sd --去掉c
New password:
Re-type new password:
Adding password for user sd
#密码文件内容
[root@web01 autoindex]# cat /etc/nginx/auth_basic
lnd:$apr1$F3muI82n$GnNVXdEB6GGlIEapGEM3x1
3、配置访问登录
[[root@web01 autoindex]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
auth_basic "欢迎访问";
auth_basic_user_file /etc/nginx/auth_basic;
}
}
### 重启nginx systemctl restart nginx
Nginx状态监控模块
# ngx_http_stub_status_module
ngx_http_stub_status_module模块提供对nginx基本状态信息的访问。
默认情况下不构建此模块，应使用--with-http_stub_status_module配置参数启用它
Syntax: stub_status;
Default: —
Context: server, location
1、配置
[root@web01 autoindex]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
auth_basic "欢迎访问";
auth_basic_user_file /etc/nginx/auth_basic;
}
location = /basic_status {
stub_status;
}
}
### 重启nginx systemctl restart nginx
2、访问
#访问 http://www.autoindex.com/basic_status
#nginx七种状态
Active connections: 2
server accepts handled requests
2 2 3
Reading: 0 Writing: 1 Waiting: 1
Active connections #活跃的连接数
accepts #TCP连接总数
handled #成功的TCP连接数
requests #成功的请求数
Reading #读取的请求头
Writing #响应头部
Waiting #等待的请求数，开启了keepalive
# 注意, 一次TCP的连接，可以发起多次http的请求, 如下参数可配置进行验证
keepalive_timeout 0; # 类似于关闭长连接
过滤nginx的请求连接数
curl http://www.autoindex.com/basic_status
nginx模块回顾
# 1.目录索引模块
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
}
}
# 2.访问限制模块
#允许10.0.0.100访问，拒绝所有
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
allow 10.0.0.100； #允许10.0.0.100访问，拒绝所有
deny all; #拒绝所有
}
}
# 3.访问控制模块
1.配置密码文件
[root@web01 ~]# htpasswd -c /etc/nginx/auth_basic lhd
New password: 123
Re-type new password: 123
Adding password for user lhd
2.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
auth_basic "欢迎访问"; # 随便写
auth_basic_user_file /etc/nginx/auth_basic;## 用户名密码
}
}
# 4.nginx状态模块
1.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
location / {
root /mm/autoindex;
index index.html;
}
location = /basic_status {
stub_status;
}
}
2.页面
Active connections: 2
server accepts handled requests
5 5 12
Reading: 0 Writing: 1 Waiting: 1
3.监控网站的PV
[root@web01 ~]#curl -s http://www.autoindex.com/basic_status | awk 'NR==3 {print $3}'| awk 'NR==3 {print $3}'
12
连接限制模板
# ngx_http_limit_conn_module
1.语法
#设置限制的空间
Syntax: limit_conn_zone key zone=name:size;
Default: —
Context: http
limit_conn_zone #设置空间的模块
key #空间存储的内容
zone #指定空间
=name #名字
:size; #大小
#调用限制的空间
Syntax: limit_conn zone number;
Default: —
Context: http, server, location
limit_conn #调用空间的模块
zone #空间的名字
number; #指定可以同时连接的次数
2.配置
[root@web01 mm]# cat /etc/nginx/conf.d/www.autoindex.com.conf
limit_conn_zone $remote_addr zone=conn_zone:20m;
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
access_log /var/log/nginx/www.autoindex.com.log main;
limit_conn conn_zone 2;
location / {
root /mm/autoindex;
index index.html;
}
location /down {
root /mm/autoindex;
autoindex on;
autoindex_exact_size off;
autoindex_localtime on;
auth_basic "欢迎访问";
auth_basic_user_file /etc/nginx/auth_basic;
}
location = /basic_status {
stub_status;
}
}
请求限制模块
# 1.语法
#设置空间的语法
Syntax: limit_req_zone key zone=name:size rate=rate [sync];
Default: —
Context: http
limit_req_zone #设置空间的模块
key #空间存储的内容
zone #指定空间
=name #名字
:size #大小
rate=rate [sync]; #读写速率
#调用的语法
Syntax: limit_req zone=name [burst=number] [nodelay | delay=number];
Default: —
Context: http, server, location
limit_req #调用控件模块
zone=name #指定空间=空间的名字
[burst=number] #允许多请求几次
[nodelay | delay=number]; #延时
2、配置
[root@web01 ~]#cat/etc/nginx/conf.d/www.autoindex.com.conf
limit_conn_zone $remote_addr zone=conn_zone:20m;
limit_req_zone $remote_addr zone=req_zone:20m rate=100r/s;
server {
listen 80;
server_name www.autoindex.com;
charset utf8;
limit_conn conn_zone 100;
limit_req zone=req_zone;
#limit_req zone=req_zone burst=8 nodelay;
location / {
root /mm/autoindex;
index index.html;
}
}
3、测试
[root@web01 ~]# ab -n 1000 -c 20 http://www.autoindex.com/index.html
nginx的location配置
使用Nginx Location可以控制访问网站的路径,但一个server可以有多个location配置, 多个location的优先级该如何区分：
1.语法
Syntax: location [ = | ~ | ~* | ^~ ] uri { ... }
location @name { ... }
Default: —
Context: server, location
2.location匹配符
匹配符 匹配规则 优先级
= 精确匹配 1
^~ 以某个字符串开头 2
~ 区分大小写的正则匹配 3
~* 不区分大小写的正则匹配 3
/ 通用匹配，任何请求都会匹配到 4
3.优先级验证 -- #了解
[root@web01 ~]# vim /etc/nginx/conf.d/mm2021.conf ###优先级验证
server {
listen 80;
server_name linux12.test.com;
location / {
default_type text/html; #文档字符
return 200 "location /";
}
location =/ {
default_type text/html;
return 200 "location =/";
}
location ~ / {
default_type text/html;
return 200 "location ~/";
}
# location ^~ / {
# default_type text/html;
# return 200 "location ^~";
# }
}
4.Locaiton应用场景
# 通用匹配，任何请求都会匹配到
location / {
...
}
# 严格区分大小写，匹配以.php结尾的都走这个location
location ~ \.php$ {
...
}
# 严格区分大小写，匹配以.jsp结尾的都走这个location
location ~ \.jsp$ {
...
}
# 不区分大小写匹配，只要用户访问.jpg,gif,png,js,css 都走这条location
location ~* .*\.(jpg|gif|png|js|css)$ {
...
}
http://linux.test.com/1.PHP
http://linux.test.com/1.JPG
http://linux.test.com/1.jsp
http://linux.test.com/1.Gif
http://linux.test.com/1.PnG
http://linux.test.com/1.JsP
