天飞 学习笔记

nginx笔记

第三章 场景实践篇

静态web服务

跨域访问

服务器允许网站请求其它域名的内容.

add_header Access-Control-Allow-Orgin http://example.com;
add_header Access-Control-Allow-Methods POST,GET,PUT,DELETE,OPTIONS;

防盗链

nginx支持简单方式

• http Referer(Module ngx_http_referer_module)

  • referer_hash_bucket_size 64;
    referer_hash_max_size 2048;
    valid_referers none | blocked | server_names | string ...;
    # 匹配为empty string,不匹配为1
    # none为空
    # blocked是被代理或防火墙删除了http://或https://后剩余的url
    # server_names其中之一
    # string ... 其它匹配字符串

  • # 注意:valid_referers and $valid_referer单复数格式
    valid_referers none blocked server_names
                   *.example.com example.* www.example.org/galleries/
                   ~\.google\.;
    if ($valid_referer){
    		return 403;
    }

代理服务

http

https

rtmp

icmp/pop/smtp

正向代理(客户端)

反向代理(服务端)

ngx_http_proxy_module

Syntax:	proxy_pass URL; //http,https,socket
Default:	—
Context:	location, if in location, limit_except