Nginx 优化

1、隐藏nginx版本号

2、nginx配置优化

3、fastcgi优化

#fastcgi_cache_path /usr/local/nginx/fastcgi_cache levels=1:2

#keys_zone=TEST:10m

#inactive=5m;

#fastcgi_connect_timeout 300;

#fastcgi_send_timeout 300;

#fastcgi_read_timeout 300;

#fastcgi_buffer_size 4k;

#fastcgi_buffers 8 4k;

#fastcgi_busy_buffers_size 8k;

#fastcgi_temp_file_write_size 8k;

#fastcgi_cache TEST;

#fastcgi_cache_valid 200 302 1h;

#fastcgi_cache_valid 301 1d;

#fastcgi_cache_valid any 1m;

#fastcgi_cache_min_uses 1;

#fastcgi_cache_use_stale error timeout invalid_header http_500;

4、gzip优化

#gzip on;

#gzip_min_length 1k;

#gzip_buffers 4 16k;

#gzip_http_version 1.0;

#gzip_comp_level 2;

#gzip_types text/plain application/x-javascript text/css application/xml;

#gzip_vary on;

5、图片防盗链

location ~* ^. .(gif|jpg|png|swf|flv|rar|zip)${

valid_referers none blocked server_name *.etiantian.org etiantian.org;

if($invalid_referer){

rewrite ^/ http://bbs.etiantian.com/img/nolink.jpg;

}

}

6、防爬虫

if ($http_user_agent ~* "qihoobot|Baiduspider|Googlebot|Googlebot-Mobile|Googlebot-Image|Mediapartners-Google|Adsbot-Google|Feedfetcher-Google|Yahoo! Slurp|Yahoo! Slurp China|YoudaoBot|Sosospider|Sogou spider|Sogou web spider|MSNBot|ia_archiver|Tomato Bot")

{

return 403;

}

7、限制并发连接数

http {

    limit_conn_zone   $binary_remote_addr  zone=one:10m  rate=1r/s; #每秒只能一次请求

    limit_conn_zone   $server_name  zone=two:10m;

    server {

        location /seven/ {

            limit_conn   one  1;  #每个IP并发为1

    limit_conn two 2;  #每个虚拟主机连接数2

            limit_req zone=one burst=5;  #可以有5个请求排队等待

        }