Nginx防盗链，Nginx访问控制，Nginx解析php相关配置， Nginx代理

怼烎@ 2022-01-13 13:05 259阅读 0赞

[2019独角兽企业重金招聘Python工程师标准>>> ][2019_Python_] ![hot3.png][]

# Nginx防盗链： #

![215906\_PUge\_3769333.png][215906_PUge_3769333.png]

vim /usr/local/nginx/conf/vhost/test.com.conf = 默认虚拟主机配置防盗链

![220704\_L5wE\_3769333.png][220704_L5wE_3769333.png]

#防盗链核心配置
    location ~* ^.+\.(gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls)$    =表示匹配文件格式
    {
        expires 7d;     = 保存7天
        valid_referers none blocked server_names  *.test.com ;     = 匹配域名
        if ($invalid_referer) {
            return 403;   = 域名匹配不成功返回403
        }
        access_log off;
    }

配置完以后 -t && -s reload

[root@aming-01 test.com]# /usr/local/nginx/sbin/nginx -t
    nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
    nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
    [root@aming-01 test.com]# /usr/local/nginx/sbin/nginx -s reload

测试防盗链：

[root@aming-01 test.com]# curl -e "http:www.test.com/1.txt" -x127.0.0.1:80 test.com/1.gif -I   =测试防盗链需要指定 -e 然后格式必须使用 http 开头
    HTTP/1.1 200 OK    = 200状态码说明Ok
    Server: nginx/1.12.1
    Date: Thu, 26 Apr 2018 14:04:56 GMT
    Content-Type: image/gif
    Content-Length: 21
    Last-Modified: Thu, 26 Apr 2018 13:48:21 GMT
    Connection: keep-alive
    ETag: "5ae1d8a5-15"
    Expires: Thu, 03 May 2018 14:04:56 GMT
    Cache-Control: max-age=604800
    Accept-Ranges: bytes

# Nginx访问控制： #

![221241\_NO17\_3769333.png][221241_NO17_3769333.png]

vim /usr/local/nginx/conf/vhost/test.com.conf =虚拟主机配置文件

![004537\_hi9l\_3769333.png][004537_hi9l_3769333.png]

location /admin/
    {
        allow 192.168.133.1;
        allow 127.0.0.1;
        deny all;
    }

配置文件里面的规则，nginx是一条一条匹配的如果第一条匹配成功那么就不会匹配下面的规则了。例如 配置里面 allow 127.0.0.1 如果访问的 IP是127.0.0.1 那么匹配第一条规则就直接允许访问，就不会匹配后面的其他规则，如果访问过来的是127.0.0.2那么就会直接deny 掉不允许访问。

allow=允许访问 deny=拒绝访问

![005327\_OL6r\_3769333.png][005327_OL6r_3769333.png]

还可以同样适用正则匹配，和user\_agent限制

可以匹配正则
    location ~ .*(abc|image)/.*\.php$
    {
            deny all;
    }
    根据user_agent限制
    if ($http_user_agent ~ 'Spider/3.0|YoudaoBot|Tomato')
    {
          return 403;
    }
     deny all和return 403效果一样

# Nginx解析php相关配置： #

![215648\_olC9\_3769333.png][215648_olC9_3769333.png]

vim /usr/local/nginx/conf/vhost/test.com.conf =虚拟主机配置文件

![215914\_DOru\_3769333.png][215914_DOru_3769333.png]

location ~ \.php$
        {
            include fastcgi_params;    #fastcgi_pass 用来指定php-fpm监听的地址或者socket
            fastcgi_pass unix:/tmp/php-fcgi.sock;     
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME /data/wwwroot/test.com$fastcgi_script_name;
        }

# Nginx代理： #

![221847\_0oNa\_3769333.png][221847_0oNa_3769333.png]

Nginx代理分正向代理和反向代理。

[http://blog.csdn.net/zjf280441589/article/details/51501408][http_blog.csdn.net_zjf280441589_article_details_51501408]

Nginx代理是在一台代理服务器中自定义一个域名（这个域名基本上跟web服务器的域名相同），该域名指向一个IP（web服务器），然后将用户的请求通过这台代理服务器访问指定的IP所对应的web服务器。

首先创建一个新的配置文件：

[root@aminglinux-01 ~]# cd /usr/local/nginx/conf/vhost/
    [root@aminglinux-01 vhost]# 
    [root@aminglinux-01 vhost]# vim proxy.conf

配置文件：

server
    {
        listen 80;
        server_name ask.apelearn.com;
    
        location /
        {
            proxy_pass      http://121.201.9.155/;
            proxy_set_header Host   $host;
            proxy_set_header X-Real-IP      $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }

![223104\_FsdN\_3769333.png][223104_FsdN_3769333.png]

测试本机访问论坛。

![223324\_mBPn\_3769333.png][223324_mBPn_3769333.png]

### 扩展 ###

502问题汇总 [http://ask.apelearn.com/question/9109][http_ask.apelearn.com_question_9109]

location优先级：[http://blog.lishiming.net/?p=100][http_blog.lishiming.net_p_100]

转载于:https://my.oschina.net/u/3769333/blog/1801861

[2019_Python_]: https://my.oschina.net/u/2663968/blog/3061697
[hot3.png]: /images/20220113/045b5e2462c64806862d9160a32aa53c.png
[215906_PUge_3769333.png]: https://static.oschina.net/uploads/space/2018/0426/215906_PUge_3769333.png
[220704_L5wE_3769333.png]: https://static.oschina.net/uploads/space/2018/0426/220704_L5wE_3769333.png
[221241_NO17_3769333.png]: https://static.oschina.net/uploads/space/2018/0426/221241_NO17_3769333.png
[004537_hi9l_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/004537_hi9l_3769333.png
[005327_OL6r_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/005327_OL6r_3769333.png
[215648_olC9_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/215648_olC9_3769333.png
[215914_DOru_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/215914_DOru_3769333.png
[221847_0oNa_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/221847_0oNa_3769333.png
[http_blog.csdn.net_zjf280441589_article_details_51501408]: http://blog.csdn.net/zjf280441589/article/details/51501408
[223104_FsdN_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/223104_FsdN_3769333.png
[223324_mBPn_3769333.png]: https://static.oschina.net/uploads/space/2018/0427/223324_mBPn_3769333.png
[http_ask.apelearn.com_question_9109]: http://ask.apelearn.com/question/9109
[http_blog.lishiming.net_p_100]: http://blog.lishiming.net/?p=100