IP访问控制
==规则:按照顺序依次检测，直到匹配到第一条规则==
location {
deny 192.168.1.109;
allow 192.168.1.0/24;allow IP/IP段;
deny all;
}
用户认证访问
模块ngx_http_auth_basic_module 允许使用“HTTP基本认证”协议验证用户名和密 码来限制对资源的访问。
location /{
auth_basic "string"|off; //当描述符为off时，关闭该功能
auth_basic_user_file /var/users;
}
Apache发行包中的htpasswd命令来创建user_file 文件
htpasswd -cmb /var/users adn aidongning
==注:需要安装httpd才可以使用上面命令==
yum -y install httpd
htpasswd用法：
Usage:
htpasswd [-cmdpsD] passwordfile username
htpasswd -b[cmdpsD] passwordfile username password
htpasswd -n[mdps] username
htpasswd -nb[mdps] username password
-c Create a new file.
-n Don't update file; display results on stdout.
-m Force MD5 encryption of the password.
-d Force CRYPT encryption of the password (default).
-p Do not encrypt the password (plaintext).
-s Force SHA encryption of the password.
-b Use the password from the command line rather than prompting for it.
-D Delete the specified user.
On Windows, NetWare and TPF systems the '-m' flag is used by default.
On all other systems, the '-p' flag will probably not work.
nginx访问状态监控
location /basic_status {
stub_status on;
}
