Nginx反向代理功能-添加头部报文信息

　　　　　　　　　　　　　Nginx反向代理功能-添加头部报文信息

　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　作者：尹正杰

一.添加头部报文的前提条件

　　nginx基于模块ngx_http_headers_module可以实现对头部报文添加指定的key与值，但前提功能是必须Nginx必须开启缓存功能。

　　关于如何开启缓存功能请参考我上一篇笔记:https://www.cnblogs.com/yinzhengjie/p/12100096.html。

　　博主推荐阅读:
　　　　https://nginx.org/en/docs/http/ngx_http_headers_module.html

二.配置Nginx添加自定义的头部报文

1>.修改Nginx的主配置文件

[root@node101.yinzhengjie.org.cn ~]# cat /yinzhengjie/softwares/nginx/conf/nginx.conf
worker_processes  4;
worker_cpu_affinity 00000001 00000010 00000100 00001000; 
 
events {
   worker_connections  100000;
   use epoll;
   accept_mutex on;
   multi_accept on; 
}
   
   http {
     include       mime.types;
       
     default_type  text/html;
    
     server_tokens off; 
      
     charset utf-8;
   
     log_format my_access_json '{"@timestamp":"$time_iso8601",' '"host":"$server_addr",' '"clientip":"$remote_addr",' '"size":$body_bytes_sent,' '"responsetime":$request_ti
me,' '"upstreamtime":"$upstream_response_time",' '"upstreamhost":"$upstream_addr",' '"http_host":"$host",' '"uri":"$uri",' '"domain":"$host",' '"xff":"$http_x_forwarded_for",' '"referer":"$http_referer",' '"tcp_xff":"$proxy_protocol_addr",' '"http_user_agent":"$http_user_agent",' '"status":"$status"}';   
    access_log logs/access_json.log my_access_json;
 
    #定义可用于proxy功能的缓存
    proxy_cache_path /yinzhengjie/data/web/nginx/proxycache levels=1:2:2 keys_zone=proxycache:512m inactive=10m max_size=1g;

    ssl_certificate /yinzhengjie/softwares/nginx/certs/www.yinzhengjie.org.cn.crt;
    ssl_certificate_key /yinzhengjie/softwares/nginx/certs/www.yinzhengjie.org.cn.key;
    ssl_session_cache shared:sslcache:20m;
    ssl_session_timeout 10m;
  
    include /yinzhengjie/softwares/nginx/conf.d/*.conf;
}
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# nginx -t
nginx: the configuration file /yinzhengjie/softwares/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /yinzhengjie/softwares/nginx/conf/nginx.conf test is successful
[root@node101.yinzhengjie.org.cn ~]#

2>.修改Nginx的子配置文件

[root@node101.yinzhengjie.org.cn ~]# cat /yinzhengjie/softwares/nginx/conf.d/node101_yinzhengjie_org.cn.conf 
server {
    listen 80;
    listen 443 ssl;
    server_name node101.yinzhengjie.org.cn;
 
    access_log /yinzhengjie/softwares/nginx/logs/node101_yinzhengjie_org_cn_access.log my_access_json;
    error_log /yinzhengjie/softwares/nginx/logs/node101_yinzhengjie_org_cn_error.log;

    location / {
       root /yinzhengjie/data/web/nginx/static/cn;
       index index.html;

       valid_referers none blocked server_names *.baidu.com example.*  ~\.google\.;

       if ($invalid_referer) {
           return 403;
       }

       if ($http_user_agent ~ "ApacheBench|WebBench|TurnitinBot|Sougou web spider|Grid Server"){
           return 403;
       }
    }

    location = /favicon.ico {
       root /yinzhengjie/data/web/nginx/images/jd;
    }

    location /app01 {
        proxy_pass http://172.30.1.108/;
        proxy_connect_timeout 60s;
    }

    location /static {
        proxy_pass http://172.30.1.108;
        proxy_cache proxycache;
        proxy_cache_key $request_uri;
        proxy_cache_valid 200 302 301 10m;
        proxy_cache_valid any 5m;
        #调用Nginx的内置变量为Nginx的响应报文添加头部信息
        add_header X-Via $server_addr;
        add_header X-Cache $upstream_cache_status;
        add_header X-Accel $server_name;
    }
 
    location /image {
        proxy_pass http://172.30.1.108;
        proxy_hide_header ETag;
        proxy_set_header yinzhengjie_nginx_ip_forwarded $proxy_add_x_forwarded_for;
        
    }

    location /dynamic {
        proxy_pass http://172.30.1.108;
        proxy_set_header yinzhengjie_nginx_ip_forwarded $proxy_add_x_forwarded_for;
    }
}
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# nginx -t
nginx: the configuration file /yinzhengjie/softwares/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /yinzhengjie/softwares/nginx/conf/nginx.conf test is successful
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]#

3>.重新加载Nginx的配置文件

[root@node101.yinzhengjie.org.cn ~]# ps -ef | grep nginx | grep -v grep
root     21509     1  0 Dec26 ?        00:00:00 nginx: master process nginx
nginx    21782 21509  0 Dec26 ?        00:01:16 nginx: worker process
nginx    21783 21509  0 Dec26 ?        00:01:16 nginx: worker process
nginx    21784 21509  0 Dec26 ?        00:00:33 nginx: worker process
nginx    21785 21509  0 Dec26 ?        00:05:01 nginx: worker process
nginx    21786 21509  0 Dec26 ?        00:00:00 nginx: cache manager process
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# nginx -s reload
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# ps -ef | grep nginx | grep -v grep
root     21509     1  0 Dec26 ?        00:00:00 nginx: master process nginx
nginx    22571 21509 10 18:43 ?        00:00:00 nginx: worker process
nginx    22572 21509 10 18:43 ?        00:00:00 nginx: worker process
nginx    22573 21509  9 18:43 ?        00:00:00 nginx: worker process
nginx    22574 21509  9 18:43 ?        00:00:00 nginx: worker process
nginx    22575 21509  0 18:43 ?        00:00:00 nginx: cache manager process
[root@node101.yinzhengjie.org.cn ~]#

三.验证头部信息是否添加成功

1>.客户端访问之前查看Nginx的缓存目录

[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/
total 0
[root@node101.yinzhengjie.org.cn ~]#

2>.客户端第一次访问Nginx的文件未命中缓存

[root@node105.yinzhengjie.org.cn ~]# curl -I http://node101.yinzhengjie.org.cn/static/access.log
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 27 Dec 2019 10:46:41 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 348797
Connection: keep-alive
Last-Modified: Thu, 26 Dec 2019 09:00:16 GMT
ETag: "5527d-59a979b183760"
X-Via: 172.30.1.101
X-Cache: MISS　　　　　　　　　　　　　　　　　　#很明显，第一次访问时并没有命中访问的文件。
X-Accel: node101.yinzhengjie.org.cn
Accept-Ranges: bytes

[root@node105.yinzhengjie.org.cn ~]# 
[root@node105.yinzhengjie.org.cn ~]#

3>.客户端访问后再一次查看Nginx的缓存目录

[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/
total 0
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/　　　　　　　　　　　　#当有客户端访问时，在缓存目录就会有相应的缓存数据。
total 0
drwx------ 3 nginx nginx 16 Dec 27 18:46 4
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/4/
total 0
drwx------ 3 nginx nginx 16 Dec 27 18:46 61
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/4/61/
total 0
drwx------ 2 nginx nginx 46 Dec 27 18:46 8a
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]# ll /yinzhengjie/data/web/nginx/proxycache/4/61/8a/
total 344
-rw------- 1 nginx nginx 349426 Dec 27 18:46 8163c0ca4d4d0c1ec72229042cf8a614
[root@node101.yinzhengjie.org.cn ~]# 
[root@node101.yinzhengjie.org.cn ~]#

4>.第二次访问相同的文件命中缓存

[root@node105.yinzhengjie.org.cn ~]# curl -I http://node101.yinzhengjie.org.cn/static/access.log
HTTP/1.1 200 OK
Server: Tengine
Date: Fri, 27 Dec 2019 10:48:46 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 348797
Connection: keep-alive
Last-Modified: Thu, 26 Dec 2019 09:00:16 GMT
ETag: "5527d-59a979b183760"
X-Via: 172.30.1.101
X-Cache: HIT　　　　　　　　　　　　　　　　　　　　#很明显，当客户端第二次访问时，会命中缓存。
X-Accel: node101.yinzhengjie.org.cn
Accept-Ranges: bytes

[root@node105.yinzhengjie.org.cn ~]# 
[root@node105.yinzhengjie.org.cn ~]#

5>.使用浏览器访问同一个URL资源(http://node101.yinzhengjie.org.cn/static/access.log)，发现依旧是命中啦。

posted @ 2019-12-26 19:11 尹正杰阅读(7442) 评论(0) 编辑收藏举报

刷新页面返回顶部

尹正杰

Nginx反向代理功能-添加头部报文信息

公告