Nginx常见配置及应用

1234

wget https://nginx.org/download/nginx-1.12.2.tar.gzcd nginx-1.12.2 ./configure make && make install

12

./configure --prefix=/usr/local/nginx --with-http_ssl_module make && make install

12

./configure --prefix=/usr/local/nginx --with-http_realip_modulemake && make install

指令

说明

分类

格式

说明

变量名

说明

123456

location ／ { #请求默认路径是 http://a，如果 URL 中的参数是 at=5，则路径变为 http://b if ($arg_at= '5') { proxy_pass http://b; } proxy_pass http://a; }

123

if ($scheme = 'http') { rewrite ^/(.*)$ https://$host/$1 redirect; }

123456

location / { deny 192.168.1.1; # 禁止 192.168.1.1 访问 allow 192.168.1.0/24; # 允许 192.168.1.0/24 访问 allow 17.1.1.2; # 允许 17.1.1.2 访问 deny all; # 除 allow 的 IP 地址外，其他的 IP 地址都禁止访问}

12345678

server { listen 80; server_name localhost; location / { auth_basic "Nginx Basic"; # 浏览器访问是时的弹框显示内容 auth_basic_user_file conf.d/passwd; # 存放密码的文件地址 } }

1

printf "yourusername:$(openssl passwd -crypt yourpassword)n" >> /etc/nginx/conf.d/passwd

1234567

location / { satisfy any; allow 192.168.1.0/32; deny all; auth_basic "closed site"; auth_basic_user_file conf/htpasswd;}

Syntax

Default

Content

123456789101112131415

location / { #保留代理之前的host 包含客户端真实的域名和端口号 proxy_set_header Host $host; #保留代理之前的真实客户端ip proxy_set_header X-Real-IP $remote_addr; #这个Header和X-Real-IP类似，但它在多级代理时会包含真实客户端及中间每个代理服务器的IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #表示客户端真实的协议（http还是https） proxy_set_header X-Forwarded-Proto $scheme; #指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值 #如果使用"default"参数，将根据location和proxy_pass参数的设置来决定。 #proxy_redirect [ default|off|redirect replacement ]; proxy_redirect off; proxy_pass http://IP:PORT;}

12345678910111213141516171819

# http://nginx:80/eureka/js/1.js 等于 http://10.129.20.36:8761//js/1.jslocation /eureka { proxy_pass http://10.129.20.36:8761/;} # http://nginx:80/eureka/js/1.js 等于 http://10.129.20.36:8761/eureka/js/1.jslocation /eureka { proxy_pass http://10.129.20.36:8761;}# http://nginx:80/eureka/js/1.js 等于 http://10.129.20.36:8761/eureka/js/1.jslocation /eureka/ { proxy_pass http://10.129.20.36:8761;}# http://nginx:80/eureka/js/1.js 等于 http://10.129.20.36:8761/js/1.jslocation /eureka/ { proxy_pass http://10.129.20.36:8761/;}

Syntax

Default

Content

123456789101112131415

# 定义一个 HTTP 服务组upstream test_servers { # 用 server 定义 HTTP 地址 server 127.0.0.1:81 max_fails=5 fail_timeout=10s weight=10; server 127.0.0.1:82 max_fails=5 fail_timeout=10s weight=5; server test.123.com backup; server 127.0.0.1:82 down; } server { listen 80; location / { # 通过代理将请求发送给 upstream 命名的 HTTP 服务 proxy_pass http://test_servers; } }

Syntax

Default

Content

12345

upstream test_servers { hash $request_uri; server 127.0.0.1:81 max_fails=5 fail_timeout=10s weight=10; server 127.0.0.1:82 max_fails=5 fail_timeout=10s weight=5; }

Syntax

Default

Content

123456789101112131415161718

upstream test_servers { server 127.0.0.1:81 max_fails=5 fail_timeout=10s weight=10; server 127.0.0.1:82 max_fails=5 fail_timeout=10s weight=5; keepalive 100; keepalive_requests 1000; keepalive_timeout 1h; } server { listen 80; proxy_set_header Host $Host; proxy_set_header x-forwarded-for $remote_addr; proxy_set_header X-Real-IP $remote_addr; proxy_http_version 1.1; # 设置 HTTP 请求协议，要确保是 HTTP 1.1 的长连接协议 proxy_set_header Connection ""; # 清空 Connection 请求头，避免客户端传递短连接的请求头信息 location / { proxy_pass http://test_servers; } }

Syntax

Default

Content

123456

server{ listen 80; rewrite /1.html /2.html ; rewrite /2.html /3.html ; }

123456

server{ listen 80; rewrite /1.html /2.html break; rewrite /2.html /3.html ; }

123456789

server{ listen 80; rewrite /1.html /2.html break; rewrite /2.html /3.html ; location /2.html { return 403; }}

12345678910111213141516

server{ listen 80; location / { rewrite /1.html /2.html; rewrite /2.html /3.html; } location /2.html { rewrite /2.html /a.html; } location /3.html { rewrite /3.html /b.html; }}

12345678910111213141516

server{ listen 80; location / { rewrite /1.html /2.html break; rewrite /2.html /3.html; } location /2.html { rewrite /2.html /a.html; } location /3.html { rewrite /3.html /b.html; }}

12345678910111213141516

server{ listen 80; location / { rewrite /1.html /2.html last; rewrite /2.html /3.html; } location /2.html { rewrite /2.html /a.html; } location /3.html { rewrite /3.html /b.html; }}

12345

# 匹配以/a/开头的请求，并将/a/后面的 URI 全部捕获，# 然后重定向成 /b/$1 ,其中$1 就是前面捕获到的 URI。# 匹配成功后将其修改成/b 的 URI，并停止 rewrite 阶段，执行下一个阶段，即 proxy_passrewrite ^/a/(.*) /b/$1 break;proxy_pass http://test_servers;

123456

# permanent 参数表示永久重定向，将所有的请求全部跳转到指定域名上# 通过(.*)将 URL 保留下来，跳转过程中参数不会丢失。HTTP 状态码为 301 rewrite ^/(.*)$ http://www.zhe800.com/$1 permanent; # redirect 参数表示临时重定向，将所有的请求全部跳转到指定域名上# 通过(.*)将 URL 保留下来，跳转过程中参数不会丢失。HTTP 状态码 302 rewrite ^/(.*)$ http://www.zhe800.com/$1 redirect;

12

return 307 http://www.test.com/$request_uri; # 临时重定向return 308 http://www.test.com/$request_uri; # 永久重定向

Syntax

Default

Content

123456

location ~* .(gif|jpg|png|webp)$ { valid_referers none blocked server_names *.testnginx.com ~.baidu. .google.; if ($invalid_referer) { return 403; } }

12345

log_format json_log escape=json '{"ip":"$remote_addr","timestamp": "$time_iso8601",' '"host":"$http_host","request":"$request",' '"cookie":"$http_cookie","req_time":"$request_time", "uri":"$uri","referer":"$http_referer" }';

Syntax

Default

Content

12345678910111213

# json_log 定义了日志格式access_log /data1/access.log json_log; # 日志压缩记录，每缓存 5MB 的数据就进行日志压缩access_log /data1/access_1.log combined gzip flush=5m; # 根据条件进行记录，当 if 等于 0 或为空时日志不会被记录# 下面代码的意思是当 HTTP 状态码以 4 开头时，日志不会被记录map $status $loggable { ~^[4] 0; default 1; } access_log /path/to/access.log combined if=$loggable;

Syntax

Default

Content