需要的服务器

autoindex 目录索引

[root@web01 ~]# cat /etc/nginx/conf.d/mirror.oldxu.com.conf 
    server {
        listen 80;
        server_name mirror.oldxu.com;
        charset utf8;

        location / {
            root /code;
            index index.html;

            autoindex on;
            autoindex_exact_size off;
            autoindex_localtime on;
            autoindex_format html;
        }
    }
    
    [root@web01 ~]# mkdir /code/{centos,ubuntu}
    [root@web01 ~]# cat /code/index.html 
    <h1> Mirrors Oldxu.com </h1>
    <ul><li><a href="http://mirror.oldxu.com/centos" target="_blank">centos系统</a></li> </ul>
    <ul><li><a href="http://mirror.oldxu.com/ubuntu" target="_blank">ubuntu系统</a></li> </ul>

访问控制：
基于IP实现访问控制
10.0.0.1 仅允许访问 /centos
10.0.0.100 拒绝访问 /ubuntu , 其他的IP都允许

root@web01 ~]# cat /etc/nginx/conf.d/mirror.oldxu.com.conf 
        server {
            listen 80;
            server_name mirror.oldxu.com;
            charset utf8;
            root /code;

            autoindex on;
            autoindex_exact_size off;
            autoindex_localtime on;
            autoindex_format html;

            location / {
                index index.html;
            }
            location /centos {
                allow 10.0.0.1/32;
                deny all;
            }
            location /ubuntu {
                deny 10.0.0.100/32;
                allow all;
            }
        }

基于用户名和密码的访问控制：
[root@web01 ~]# yum install httpd-tools -y
[root@web01 ~]# htpasswd -bc /etc/nginx/auth_conf oldxu 123

[root@web01 ~]# cat /etc/nginx/conf.d/mirror.oldxu.com.conf 
        server {
            listen 80;
            server_name mirror.oldxu.com;
            charset utf8;
            root /code;

            autoindex on;
            autoindex_exact_size off;
            autoindex_localtime on;
            autoindex_format html;

            location / {
                index index.html;
            }

            location /centos {
                allow 10.0.0.1/32;
                deny all;
            }
            location /ubuntu {
                auth_basic "Oldxu Site";
                auth_basic_user_file /etc/nginx/auth_conf;
            }
        }

限速
请求限制 limit_req
连接限制 limit_conn
下载限速：

[root@web01 ~]# cat /etc/nginx/conf.d/mirror.oldxu.com.conf 
    limit_req_zone $binary_remote_addr zone=req_one:10m rate=1r/s;
    limit_conn_zone $binary_remote_addr zone=addr:10m;

    server {
        listen 80;
        server_name mirror.oldxu.com;
        charset utf8;
        root /code;

        limit_req zone=req_one burst=5 nodelay;
        
        limit_conn addr 1;
        limit_conn_status 504;

        limit_rate 100k;
        limit_rate_after 200m;

        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
        autoindex_format html;

        location / {
            index index.html;
        }

        location /centos {
            allow 10.0.0.1/32;
            allow 10.0.0.7/32;
            deny all;
        }
    }

案列
问题：限制web服务器请求数处理为1秒一个，缓存值为5、限制用户仅可同时下载一个文件。当下载超过100M则限制下载速度为500k。如果同时下载超过2个视频，则返回提示 "请联系oldxu进行会员充值"。

[root@web01 ~]# cat /etc/nginx/conf.d/mirror.oldxu.com.conf
    limit_req_zone $binary_remote_addr zone=req_one:10m rate=1r/s;
    limit_conn_zone $binary_remote_addr zone=addr:10m;

    server {
        listen 80;
        server_name mirror.oldxu.com;
        charset utf8;
        root /code;

        autoindex on;
        autoindex_exact_size off;
        autoindex_localtime on;
        autoindex_format html;

        location / {
            index index.html;
        }

        location /download {
            limit_req zone=req_one burst=5 nodelay;
            limit_conn addr 2;
            limit_conn_status 504;

            limit_rate 300k;
            limit_rate_after 100m;
        }
        #接收抛出504的异常,交给内部 @error_504 处理
        error_page 504 @error_504;
        location @error_504 {
            #default_type text/html;
            #return 200 "请充值会员";

            #跳转到其他页面
            #return 302 https://www.waitsun.com/xpay-html;
        }
    }

nginx七中状态 stub_stauts

状态监控模块

location = /nginx_status {
    stub_status;
}

location匹配规则
location [ = | ~ | ~* | ^~ ] uri { ... }
location @name { ... }

    
    [root@web01 ~]# cat /etc/nginx/conf.d/location.oldxu.com.conf 
    server {
        listen 80;
        server_name location.oldxu.com;

        location = / {
            default_type text/html;
            return 200 'location = /';
        }

        location / {
            default_type text/html;
            return 200 'location /';
        }

        location /documents/ {
            default_type text/html;
            return 200 'location /documents/';
        }

        location ^~ /images/ {
            default_type text/html;
            return 200 'location ^~ /images/';


        }

        location ~* \.(gif|jpg|jpeg)$ {
            default_type text/html;
            return 200 'location ~* \.(gif|jpg|jpeg)';
        }
    }   

nginx 日志
访问日志 记录用户请求的信息
错误日志 记录所有错误信息,便于后期排查

server {
            access_log /var/log/nginx/vhost_name.log main;
            error_log /var/log/nginx/vhost_name_error.log;
        }

注:如果Nginx位于负载均衡器，nginx反向代理之后， web服务器无法直接获取到客 户端真实的IP地址。

# $remote_addr获取的是反向代理的IP地址。 反向代理服务器在转发请求的http头信息中，
# 增加X-Forwarded-For信息，用来记录客户端IP地址和客户端请求的服务器