Nginx的功能配置整合

矫情吗；* 2022-02-04 01:51 189阅读 0赞

**环境：**  
2台虚拟机：  
server1：172.25.70.1  
server2：172.25.70.2  
物理机：  
172.25.70.250

### 一、压缩网页内容 ###

#### 1.制作一个比较大的默认发布页网页 ####

cp /etc/passwd .
    mv passwd index.html
    vim index.html

![在这里插入图片描述][20190506171807195.png]

#### 2.修改Nginx配置文件，使其可以压缩网页 ####

vim /usr/local/nginx/conf/nginx.conf
    ======================================
    
     33     gzip  on;
     34     gzip_min_length 1; 
     35     gzip_comp_level 2;
     36     gzip_types text/plain application/x-javascript text/css application/xml     text/javascript application/x-httpd/php image/jpeg image/gif image/png;

![在这里插入图片描述][20190506172118562.png]

#### 3.重新加载配置文件内容 ####

./nginx -s reload

![在这里插入图片描述][20190506172136427.png]  
网页访问172.25.70.1，F12查看  
![在这里插入图片描述][20190506172530374.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70]

#### 4.将刚才的修改注释，再次重新加载配置文件内容 ####

./nginx -s reload

![在这里插入图片描述][20190506180536954.png]  
网页访问172.25.13.1，F12查看  
![在这里插入图片描述][20190506180552365.png]

### 二、制作Nginx的systemd服务快捷方式 ###

#### 1.下载安装httpd ####

yum install -y httpd

#### 2.复制httpd的systemd服务快捷方式文件，并为Nginx重写 ####

cd /usr/lib/systemd/system/
    cp httpd.service /etc/systemd/system/nginx.service
    vim nginx.service
    ====================================================
    [Unit]
    Description=The Nginx HTTP Server
    After=network.target remote-fs.target nss-lookup.target
    
    [Service]
    Type=forking
    ExecStart=/usr/local/nginx/sbin/nginx
    ExecReload=/usr/local/nginx/sbin/nginx -s reload
    ExecStop=/usr/local/nginx/sbin/nginx -s stop
    PrivateTmp=true
    
    [Install]
    WantedBy=multi-user.target

#### 3.测试 ####

systemctl start nginx.service
    systemctl status nginx.service
    
    systemctl stop nginx.service
    systemctl status nginx.service

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 1]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 2]

### 三、限制客户端网页访问速度 ###

#### 1.修改Nginx的配置文件 ####

cd /usr/local/nginx/
    vim conf/nginx.conf
    =====================================================================
     37         limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;
    
     52         location /search/ { 
     53                 limit_req zone=one burst=5;
     54         }

![在这里插入图片描述][2019050709510382.png]

#### 2.新建目录 ####

mkdir html/search

![在这里插入图片描述][20190507110159637.png]

#### 3.重新加载Nginx配置文件内容 ####

systemctl reload nginx.service

#### 4.测试 ####

浏览器输入:[http://172.25.70.1/search/vim.jpg][http_172.25.70.1_search_vim.jpg]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 3]  
压力测试：

ab -c 1 -n 10 http://172.25.70.1/search/vim.jpg

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 4]

vim conf/nginx.conf
    ===================
     52         location /search/ { 
     53                 limit_rate 50k;
     54                 limit_req zone=one burst=5;
     55         }

![在这里插入图片描述][20190507110924520.png]  
重新加载配置文件

systemctl reload nginx.service

再次测试

ab -c 1 -n 10 http://172.25.70.1/search/vim.jpg

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 5]

### 四、Nginx的模块使用：realip、image\_filter、http\_ssl ###

#### 1.解决依赖性 ####

yum install -y openssl-devel
    yum install -y gd-devel-2.0.35-26.el7.x86_64.rpm

#### 2.编译模块 ####

./configure --prefix=/usr/local/nginx --with-file-aio --with-http_realip_module --with-http_image_filter_module --with-http_ssl_module
    =======================================================================================================================================
    make

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 6]

#### 3.查看编译好的Nginx版本 ####

[root@server1 nginx-1.15.9]# ls
    auto     CHANGES.ru  configure  html     Makefile  objs    src
    CHANGES  conf        contrib    LICENSE  man       README
    [root@server1 nginx-1.15.9]# cd objs/
    [root@server1 objs]# ./nginx -V
    nginx version: nginx/1.15.9
    built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC) 
    built with OpenSSL 1.0.1e-fips 11 Feb 2013
    TLS SNI support enabled
    configure arguments: --prefix=/usr/local/nginx --with-file-aio --with-http_realip_module --with-http_image_filter_module --with-http_ssl_module

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 7]

#### 4.替换二进制执行文件 ####

[root@server1 objs]# cp -f nginx /usr/local/nginx/sbin/
    cp: overwrite ‘/usr/local/nginx/sbin/nginx’? y
    [root@server1 objs]#

![在这里插入图片描述][20190507112155894.png]

#### 5.修改配置文件 ####

vim /usr/local/nginx/conf/nginx.conf
    ===============================
    127 server { 
    128         listen 80;
    129         server_name server1.example.org;
    130         set_real_ip_from 172.25.13.1;
    131         real_ip_header X-Forward-For;
    132         real_ip_recursive on;
    133         location / { 
    134                 return 200 "client real ip: $remote_addr\n" 
    135         }
    136 }

#### image\_filter ####

#### 1修改配置文件 ####

vim /usr/local/nginx/conf/nginx.conf
    
     53         location /search/ { 
     54                 #limit_rate 50k;
     55                 limit_req zone=one burst=5;
     56                 image_filter resize 150 100;
     57         }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 8]

#### 2.测试 ####

浏览器访问：[http://172.25.70.1/search/vim.jpg][http_172.25.70.1_search_vim.jpg]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 9]

#### ssl加密 ####

#### 1.修改配置文件 ####

vim /usr/local/nginx/conf/nginx.conf
    ======================================
    110     server { 
    111         listen       443 ssl;
    112         server_name  www.westos.org;
    113 
    114         ssl_certificate      cert.pem;
    115         ssl_certificate_key  cert.pem;
    116 
    117         ssl_session_cache    shared:SSL:1m;
    118         ssl_session_timeout  5m;
    119 
    120         ssl_ciphers  HIGH:!aNULL:!MD5;
    121         ssl_prefer_server_ciphers  on;
    122 
    123         location / { 
    124             root   /web;
    125             index  index.html index.htm;
    126         }
    127     }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 10]

#### 2.建立/web目录，编写网页发布文件 ####

[root@server1 conf]# mkdir /web
    [root@server1 conf]# vim /web/index.html

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 11]

#### 3.生成证书 ####

[root@server1 conf]# cd /etc/pki/tls/certs/
    [root@server1 certs]# make cert.pem
    umask 77 ; \
    PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
    PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
    /usr/bin/openssl req -utf8 -newkey rsa:2048 -keyout $PEM1 -nodes -x509 -days 365 -out $PEM2 -set_serial 0 ; \
    cat $PEM1 >  cert.pem ; \
    echo ""    >> cert.pem ; \
    cat $PEM2 >> cert.pem ; \
    rm -f $PEM1 $PEM2
    Generating a 2048 bit RSA private key
    .+++
    ....................................+++
    writing new private key to '/tmp/openssl.GT9GkG'
    -----
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [XX]:cn
    State or Province Name (full name) []:shaanxi
    Locality Name (eg, city) [Default City]:xi'an Organization Name (eg, company) [Default Company Ltd]:linux Organizational Unit Name (eg, section) []:westis Common Name (eg, your name or your server's hostname) []:server1
    Email Address []:root@westos.org
    [root@server1 certs]# ls
    ca-bundle.crt        cert.pem         Makefile
    ca-bundle.trust.crt  make-dummy-cert  renew-dummy-cert

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 12]

#### 4.将证书复制到nginx配置文件目录，重启nginx服务 ####

[root@server1 certs]# cp cert.pem /usr/local/nginx/conf/
    [root@server1 certs]# systemctl reload nginx.service

#### 5.测试 ####

浏览器输入：[https://172.25.70.1/][https_172.25.70.1]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 13]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 14]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 15]

#### realip ####

环境准备：准备server2：安装nginx用来作负载均衡

#安装必要依赖
    [root@server2 ~]# yum install -y gd-devel-2.0.35-26.el7.x86_64.rpm openssl-devel pcre-devel gc
    #配置模块
    [root@server2 nginx-1.15.9]# ./configure --prefix=/usr/local/nginx --with-http_realip_module --with-http_image_filter_module=dynamic --with-http_ssl_module
    #编译安装
    [root@server2 nginx-1.15.9]# make && make install
    #制作软链接
    [root@server2 nginx-1.15.9]# ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/
    #建立nginx用户
    [root@server2 nginx-1.15.9]# useradd nginx
    [root@server2 nginx-1.15.9]# id nginx
    uid=1000(nginx) gid=1000(nginx) groups=1000(nginx)

为server2快速配置环境变量

[root@server1 nginx]# cd /etc/systemd/system/
    [root@server1 system]# ls | grep nginx
    nginx.service
    [root@server1 system]# scp nginx.service server2:/etc/systemd/system/
    root@server2's password: 
    nginx.service                                 100%  251     0.3KB/s   00:00    
    [root@server1 system]#

#### 1.修改作为web服务器(server1)的nginx配置文件 ####

41     server { 
     42         listen       80;
     43         server_name  localhost;
     44          set_real_ip_from 172.25.70.2;
     45          real_ip_header X-Forwarded-For;
     46          real_ip_recursive on;

![在这里插入图片描述][20190508161504103.png]  
重新加载配置文件：

[root@server1 nginx]# systemctl reload nginx.service

#### 2.修改用来做反代的nginx配置文件 ####

vim /usr/local/nginx/conf/nginx.conf
    ===========================================
    修改：
    
      2 user  nginx nginx;
      3 worker_processes  auto;
    =================================
     17 http { 
     18     include       mime.types;
     19     default_type  application/octet-stream;
     20         upstream westos { 
     21                 server 172.25.70.1:80;
     22 }
    ======================================================
     98     server { 					#添加虚拟主机
     99             listen 80;
    100             server_name www.westos.org;
    101 
    102             location / { 
    103                     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    104                     proxy_pass http://westos;
    105             }
    106     }

![在这里插入图片描述][20190508162912990.png]  
![在这里插入图片描述][20190508162919725.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 16]

#### 3.测试 ####

在客户端写入解析，curl www.westos.org在server1访问日志中查看会发现访问的是代理服务器，但获得的内容是server1  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 17]

[root@vits Desktop]# curl www.westos.org

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 18]  
在server1的nginx的日志里看到访问信息：  
![在这里插入图片描述][2019050816373038.png]  
把web服务器的配置文件还原：  
![在这里插入图片描述][20190508163830974.png]  
重新加载配置后，再用客户端访问，查看日志：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 19]  
日志会显示是由反向代理服务器GET访问

### 五、日志记录——对客户端访问本地资源进行监控 ###

21     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                 
     22                       '$status $body_bytes_sent "$http_referer" '
     23                       '"$http_user_agent" "$http_x_forwarded_for"';
     24 
     46         access_log logs/redhat.access.log main;

![在这里插入图片描述][20190508143631466.png]

![在这里插入图片描述][2019050814384430.png]  
重启Nginx服务

[root@server1 conf]# vim nginx.conf
    [root@server1 conf]# systemctl restart nginx.service

客户端访问服务器指定页面

[root@vits ~]# ab -c 1 -n 5 http://172.25.70.1/search/vim.jpg

查看服务器日志文件内容  
![在这里插入图片描述][20190508144314627.png]

### 六、重定向 ###

在我们配置的web服务器（server1）上：

#### 1.临时重定向 ####

[root@server1 conf]# vim ../conf/nginx.conf
    ===============================================
    112     server { 
    113         listen       443 ssl;
    114         server_name  localhost;
    115 
    116         ssl_certificate      cert.pem;
    117         ssl_certificate_key  cert.pem;
    118 
    119         ssl_session_cache    shared:SSL:1m;
    120         ssl_session_timeout  5m;
    121 
    122         ssl_ciphers  HIGH:!aNULL:!MD5;
    123         ssl_prefer_server_ciphers  on;
    124 
    125         location / { 
    126             root   /web;
    127             index  index.html index.htm;
    128         }
    129     }
    130     server { 
    131         listen 80;
    132         server_name www.westos.com;
    133 
    134         rewrite ^/(.*) https://www.westos.com/$1;
    135     }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 20]  
重新加载配置文件：

[root@server1 nginx]# systemctl reload nginx.service

客户端测试：

要保证客户端有www.westos.com的本地解析

[root@vits Desktop]# curl -I www.westos.org
    [root@vits Desktop]# cat /etc/hosts
    [root@vits Desktop]# curl -I www.westos.org/index.html

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 21]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 22]  
上面的配置可以实现将 [www.westos.com][] 重定向到 [https://www.westos.com][https_www.westos.com] 。

我们还可以在配置文件中加入一个虚拟主机，完成一台服务器部署两个web服务，对应一个IP地址，在实际生产环境中可以节约资源。

更改配置文件：

[root@server1 conf]# vim nginx.conf
    ========================================
    131          server { 
    132                  listen 80;
    133                 server_name www.westos.com;
    134                 rewrite ^/(.*) https://www.westos.com/$1;
    135                  # set_real_ip_from 172.25.70.1;
    136                  # real_ip_header X-Forward-For;
    137                  # real_ip_recursive on;
    138                  # location / { 
    139                  # return 200 "client real ip: $remote_addr\n" ;
    140                  # }
    141         }
    142         server { 
    143                 listen 80;
    144                 server_name bbs.westos.com;
    145 
    146                 location / { 
    147                         root /bbs;
    148                         index index.html;
    149                 }
    150         }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 23]

[root@server1 nginx]# mkdir /bbs
    [root@server1 nginx]# vim /bbs/index.html
    [root@server1 nginx]# cat /bbs/index.html
    bbs.westos.com
    [root@server1 nginx]# systemctl reload nginx.service 
    [root@server1 nginx]#

添加本地解析：

[root@vits Desktop]# vim /etc/hosts

![在这里插入图片描述][20190508171942763.png]  
测试：

[root@vits Desktop]# curl -I www.westos.com
    [root@vits Desktop]# curl bbs.westos.com

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 24]

#### 2.永久重定向 ####

修改配置文件：

[root@server1 conf]# vim nginx.conf
    =========================================
    130     server { 
    131         listen 80;
    132         server_name www.westos.com;
    133 
    134         rewrite ^/(.*) https://www.westos.com/$1 permanent;
    135 
    136     }
    137 
    138     server { 
    139         listen 80;
    140         server_name bbs.westos.com;
    141 
    142         location / { 
    143                 root    /bbs;
    144                 index   index.html;
    145         }
    146     }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 25]  
重载配置文件

[root@server1 nginx]# systemctl reload nginx.service

客户端测试：

[root@vits Desktop]# curl -I www.westos.com

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 26]  
成功实现永久重定向。

#### 3.设置不同域名的重定向 ####

[root@server1 conf]# vim nginx.conf
    ====================================
    131          server { 
    132                  listen 80;
    133                 server_name www.westos.com #bbs.westos.com;
    134                 #rewrite ^/(.*) https://www.westos.com/$1 permanent;
    135                 rewrite ^/bbs$ http://www.westos.com permanent;
    136                 #rewrite ^/bbs/(.*) http://www.westos.com/$1 permanent;
    137                  # set_real_ip_from 172.25.70.1;
    138                  # real_ip_header X-Forward-For;
    139                  # real_ip_recursive on;
    140                  # location / { 
    141                  # return 200 "client real ip: $remote_addr\n" ;
    142                  # }
    143         }
    144         server { 
    145                 listen 80;
    146                 server_name bbs.westos.com;
    147 
    148                 location / { 
    149                         root /bbs;
    150                         index index.html;
    151                 }
    152         }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 27]  
重新加载配置文件

[root@server1 nginx]# systemctl reload nginx.service

客户端测试：

curl -I www.westos.com/bbs/index.html
    [root@vits Desktop]# curl bbs.westos.com

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 28]  
![在这里插入图片描述][20190508184914578.png]

#### 4.设置不同域名访问同一资源 ####

[root@server1 conf]# vim nginx.conf
    ==========================================
    130     server { 
    131         listen 80;
    132         server_name www.westos.com bbs.westos.com;
    133 
    134         #rewrite ^/(.*) https://www.westos.com/$1 permanent;
    135         rewrite ^/bbs$ http://bbs.westos.com permanent;
    136         rewrite ^/bbs/(.*)$ http://bbs.westos.com/$1 permanent;
    137 
    138         if ($host = "bbs.westos.com") { 
    139                 rewrite ^/(.*)$ http://www.westos.com/$1 permanent;
    140         }
    141         location / { 
    142                 root    /web;
    143                 index   index.html;
    144         }
    145     }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 29]  
重新加载配置文件，客户端测试：  
![在这里插入图片描述][20190508185447956.png]

[root@vits Desktop]# curl -I bbs.westos.com
    [root@vits Desktop]# curl -I bbs.westos.com/index.html

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 30]

### 七、防盗链 ###

*  server1：172.25.70.1 被盗链的服务器
 *  server2：172.25.70.2 盗链服务器

#### 1.模拟盗链 ####

1.在server2上：

[root@server2 ~]# vim /usr/local/nginx/conf/nginx.conf
    ============================================================
    118     server { 
    119         listen 80;
    120         server_name daolian.westos.com;
    121         charset utf-8;
    122         location / { 
    123                 root /web;
    124                 index index.html;
    125         }
    126     }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 31]  
创建资源：

[root@server2 ~]# mkdir /web
    [root@server2 ~]# vim /web/index.html
    =========================================
    <html>
    <body>
    <br>盗链图片</br>
    <img src="http://www.westos.com/vim.jpg">
    </body>
    </html>

![在这里插入图片描述][20190508202024573.png]  
2.在server1上创建被盗链的资源：

[root@server1 html]# vim ../conf/nginx.conf
        server { 
            listen 80;
            server_name www.westos.com bbs.westos.com;
    
            #rewrite ^/(.*) https://www.westos.com/$1 permanent;
            rewrite ^/bbs$ http://bbs.westos.com permanent;
            rewrite ^/bbs/(.*)$ http://bbs.westos.com/$1 permanent;
    
            if ($host = "bbs.westos.com") { 
                    rewrite ^/(.*)$ http://www.westos.com/$1 permanent;
            }
            location / { 
                    root    /web;
                    index   index.html;
            }
        }
    [root@server1 html]# ls
    50x.html  vim.jpg  index.html  search
    [root@server1 html]# cp vim.jpg /web/
    [root@server1 html]# cd /web
    [root@server1 web]# ls
    vim.jpg  index.html

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 32]  
3.重启server1、server2上的nginx服务，在客户端增加本地解析并测试

*  server1:

[root@server1 search]# systemctl reload nginx.service

*  server2:

[root@server2 nginx]# systemctl reload nginx.service

**客户端：**

vim /etc/hosts
    ======================
    172.25.70.1 server1 www.westos.com bbs.westos.com
    172.25.70.2 server2 www.westos.org daolian.westos.com

测试：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 33]  
盗链成功

#### 2.防止盗链 ####

1.在我们的server1上编辑配置文件：

[root@server1 html]# vim ../conf/nginx.conf
    ================================================
    131          server { 
    132                  listen 80;
    133                 server_name www.westos.com #bbs.westos.com;
    134                 #rewrite ^/(.*) https://www.westos.com/$1 permanent;
    135                 rewrite ^/bbs$ http://bbs.westos.com permanent;
    136                 rewrite ^/bbs/(.*)$ http://bbs.westos.com/$1 permanent;
    137                  # set_real_ip_from 172.25.70.1;
    138                  # real_ip_header X-Forward-For;
    139                  # real_ip_recursive on;
    140                  # location / { 
    141                  # return 200 "client real ip: $remote_addr\n" ;
    142                  # }
    143                 if ($host = "bbs.westos.com") { 
    144                         rewrite ^/(.*)$ http://www.westos.com/$1 permanent;
    145                 }
    146                 location / { 
    147                         root /web;
    148                         index index.html;
    149                 }
    150          location ~* \.(gif|jpg|png|jpeg)$ { 
    151                  root    /web;
    152                  valid_referers none blocked www.westos.com;
    153                  if ($invalid_referer) { 
    154                          rewrite ^/ http://bbs.westos.com/daolian.jpg;
    155                  }
    156          }
    157         }
    158         server { 
    159                 listen 80;
    160                 server_name bbs.westos.com;
    161 
    162                 location / { 
    163                         root /bbs;
    164                         index index.html;
    165                 }
    166         }
    167 
    168 }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 34]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 35]  
2.创建检测到盗链后，重定向的资源：

[root@server1 ~]# cd /bbs/
    [root@server1 bbs]# ls
    daolian.jpg  index.html

3.重新加载配置文件后，在客户端测试：

[root@server1 nginx]# systemctl reload nginx.service

测试：

daolian.westos.com

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 36]  
被盗链的服务器将盗链请求给重定向！

[20190506171807195.png]: /images/20220204/69377b9a213b4e458b0d3f2aa2107701.png
[20190506172118562.png]: /images/20220204/4469709188a64fd09bf533ba8773edc9.png
[20190506172136427.png]: /images/20220204/fc731204063247ccae15142749795c13.png
[20190506172530374.png]: /images/20220204/cf8833aa46bc4026a5141996f5499073.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70]: /images/20220204/4bd194ddd68546dfb4970aea8a9b2534.png
[20190506180536954.png]: /images/20220204/3b449de574f74cbda68c1d892d9b531d.png
[20190506180552365.png]: /images/20220204/5765746429bf4d2e86783f49006a6c1c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 1]: /images/20220204/0d4d82e197c047c29ab24b13e37e152d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 2]: /images/20220204/fbba883a941d4128a3ebd21db2bf7621.png
[2019050709510382.png]: /images/20220204/2e6dcefb6a3744dc88aa1c2e539570c6.png
[20190507110159637.png]: /images/20220204/93e7c8f35c2e4339a0a2a45a3df3cba2.png
[http_172.25.70.1_search_vim.jpg]: http://172.25.70.1/search/vim.jpg
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 3]: /images/20220204/feaa117c2b1e4235ac6fa52d7dac9863.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 4]: /images/20220204/f472030114734a18bb79edefbae05949.png
[20190507110924520.png]: /images/20220204/fc3e2f81ba0541ed99a5693e2f90f270.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 5]: /images/20220204/20d3eba20e74405eaf7be84409ecbaeb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 6]: /images/20220204/949b11d132094374a9dc8578f9638ed7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 7]: /images/20220204/46663379844846aaa2673a3bf743f75f.png
[20190507112155894.png]: /images/20220204/b9553ac643fb4d159c7775e631eaccf7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 8]: /images/20220204/e2c2463421434bfa9385a5b8dbde9834.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 9]: /images/20220204/dc0ca5ff432545f5898242655d85faa7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 10]: /images/20220204/f97785642c2f44868379c02b83acf5f8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 11]: /images/20220204/405dd5bb3c994243a0fcdfe444c92610.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 12]: /images/20220204/b6a1e2c2d8744a4c8d2954aacf869bbf.png
[https_172.25.70.1]: https://172.25.70.1/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 13]: /images/20220204/13dae424d92541b9bb40f08992526357.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 14]: /images/20220204/8d5131a88622444f87cfb7c5b684941d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 15]: /images/20220204/ac40efd06f7047a29f39957bab9f8418.png
[20190508161504103.png]: /images/20220204/434f849d31fe404fb4ae0ca57288caac.png
[20190508162912990.png]: /images/20220204/0ec56abed2b2419e940dee0d0d1d9270.png
[20190508162919725.png]: /images/20220204/220b8a3a7f5c4b189a6a38a856a6a888.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 16]: /images/20220204/a6667d0d188c4504894e2092f18e57a6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 17]: /images/20220204/1defd066edee468f99f514b700aba45e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 18]: /images/20220204/ffdfa66a4253405ab8b9ab49b84e8389.png
[2019050816373038.png]: /images/20220204/a332104c9a4543bc9f89507e2a378346.png
[20190508163830974.png]: /images/20220204/e84cc43e82ed4020824ee26fe4435e91.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 19]: /images/20220204/f42e5a5a70e34f0daf9b3e02cb0a4bf2.png
[20190508143631466.png]: /images/20220204/4d6d5d9ffa5e4660965edd9e13f293fa.png
[2019050814384430.png]: /images/20220204/f7b66a8b4a1449649b254e66876a3c71.png
[20190508144314627.png]: /images/20220204/b93ca674cb7947c88e48d20917ed3068.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 20]: /images/20220204/72d661fc1be54e78ba572c72900e16ee.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 21]: /images/20220204/8f0c26acff06455999029848f01b3560.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 22]: /images/20220204/08937a8dae4947adafcf20d08b68e77e.png
[www.westos.com]: http://www.westos.com
[https_www.westos.com]: https://www.westos.com
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 23]: /images/20220204/99677462c9794782b5f068d14f1e6630.png
[20190508171942763.png]: /images/20220204/4ec6755d4a864dad9b77edf124197f2c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 24]: /images/20220204/f8080fa5712147aca3694abf4e581e8a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 25]: /images/20220204/dfde687bb11449e1b8ab4a729c4aacbf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 26]: /images/20220204/e95e493ac1194786aeb1815367a58f0d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 27]: /images/20220204/17c95d9abc7240f18701ef907e6f2c28.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 28]: /images/20220204/97fa0f0a2e214cc48a3168dc4f5afa57.png
[20190508184914578.png]: /images/20220204/071ab8610aa64253a55ecd141d04a15f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 29]: /images/20220204/c5387379dec44e4587e2663fd9491837.png
[20190508185447956.png]: /images/20220204/a183ae70c62546959de483d3d9698dd9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 30]: /images/20220204/4ffbe1f2115944bca46fda3994620916.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 31]: /images/20220204/d9521defc91148fda0c95738a330091f.png
[20190508202024573.png]: /images/20220204/843fc903f3d44d528bf20d8ef2814cb6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 32]: /images/20220204/9d89294144774c58a100eeccfb475b28.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 33]: /images/20220204/4f75844a533a4abd8450035c53d39931.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 34]: /images/20220204/569aaba3173b4c9f958941cc6892ef7c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 35]: /images/20220204/b14aefea31914a6688ab22e127b96511.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 36]: /images/20220204/b5154ca63ded4867907c548f442eaf57.png