Nginx 限制访问次数频率 和 禁止中国IP访问

1.限制访问频率

访问限制需要自带模块包 limit_req_zone

2.禁止中国IP

禁止中国IP需要用到第三方模块包 geoip_country

Nginx配置文件如下

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94

access_log  /var/log/nginx/access.log  main; limit_req_zone $binary_remote_addr zone=test_req:10m rate=10r/s; geoip_country /usr/share/GeoIP/GeoIP.dat;   sendfile            on; tcp_nopush          on; tcp_nodelay         on; keepalive_timeout   65; types_hash_max_size 2048;   include             /etc/nginx/mime.types; default_type        application/octet-stream;   # Load modular configuration files from the /etc/nginx/conf.d directory. # See http://nginx.org/en/docs/ngx_core_module.html#include # for more information. include /etc/nginx/conf.d/*.conf;   server {     listen       80;     listen       [::]:80 default_server;     server_name  www.baidu.com;     client_max_body_size 300M;     root         /usr/share/nginx/html;       # Load configuration files for the default server block.     include /etc/nginx/default.d/*.conf;       location /static/ {             alias /home/Production/Website/static/;     }       location /manage/ {         include uwsgi_params;         uwsgi_pass 0.0.0.0:8000;     }       location / {             limit_req zone=test_req burst=5 nodelay;             if ($geoip_country_code = "CN") {                 return "404";             }             include uwsgi_params;             uwsgi_pass 0.0.0.0:8000;     }   } access_log  /var/log/nginx/access.log  main; limit_req_zone $binary_remote_addr zone=test_req:10m rate=10r/s; geoip_country /usr/share/GeoIP/GeoIP.dat;   sendfile            on; tcp_nopush          on; tcp_nodelay         on; keepalive_timeout   65; types_hash_max_size 2048;   include             /etc/nginx/mime.types; default_type        application/octet-stream;   # Load modular configuration files from the /etc/nginx/conf.d directory. # See http://nginx.org/en/docs/ngx_core_module.html#include # for more information. include /etc/nginx/conf.d/*.conf;   server {     listen       80;     listen       [::]:80 default_server;     server_name  www.baidu.com;     client_max_body_size 300M;     root         /usr/share/nginx/html;       # Load configuration files for the default server block.     include /etc/nginx/default.d/*.conf;       location /static/ {             alias /home/Production/Website/static/;     }       location /manage/ {         include uwsgi_params;         uwsgi_pass 0.0.0.0:8000;     }       location / {             limit_req zone=test_req burst=5 nodelay;             if ($geoip_country_code = "CN") {                 return "404";             }             include uwsgi_params;             uwsgi_pass 0.0.0.0:8000;     }   }