nginx1.14的安装

#拷贝指定文件到当前目录下
[root@localhost ~]# find /usr/share -iname "*.jpg" -exec cp {} ./ \；

yum -y install gcc gcc-c++ make libtool zlib zlib-devel openssl openssl-devel pcre pcre-devel lua-devel perlyum groupinstall "Development Tools" "Server Platform Development"

LuaJit： http://luajit.org/download.html
ningx： https://nginx.org/download/nginx-1.14.2.tar.gz
pcre: https://ftp.pcre.org/pub/pcre/pcre-8.42.zip
ngx_devel_kit: https://github.com/simplresty/ngx_devel_kit/tags lua-nginx-module https://github.com/openresty/lua-nginx-module/tags
wget https://github.com/openresty/lua-nginx-module/archive/v0.10.14rc3.tar.gz --no-check-certificatewget http://ftp.17gogoing.com:8852/pub/nginx/nginx_upstream_check_module-master.tar.gz —— 检查后端服务器的状态
nginx_goodies： https://bitbucket.org/nginx-goodies/nginx-sticky-module-ng/downloads/?tab=downloads 下载地址 —— 后端做负载均衡解决session sticky问题

cd /usr/local/src/nginx-1.14.2patch -p1 < /usr/local/src/nginx_upstream_check_module-master/check_1.12.1+.patch#编译参数如下：
./configure \
--user=nginx \
--group=nginx \
--prefix=/usr/local/nginx \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--pid-path=/var/log/nginx/nginx.pid \
--lock-path=/usr/local/nginx/lock/nginx.lock \
--http-log-path=/var/log/nginx/access.log \
--with-openssl=/usr/local/src/openssl-1.0.2k \
--with-http_ssl_module \
--with-http_flv_module \
--with-http_mp4_module \
--http-proxy-temp-path=/usr/local/nginx/proxy_tmp \
--with-http_stub_status_module \
--with-http_gzip_static_module \
--with-pcre=/usr/local/src/pcre-8.42 \
--add-module=/usr/local/src/ngx_devel_kit-0.3. \
--add-module=/usr/local/src/lua-nginx-module-master \
--add-module=/usr/local/src/nginx_upstream_check_module-mastermake -j && make install

#动态每5秒刷新一次
[root@localhost nginx]# watch -n . "ps axo comm,pid,psr |grep nginx"
nginx
nginx
nginx
nginx
nginx #进行压力测试
[root@localhost ~]# yum -y install httpd-tools
#一次10万并发，连接100次
[root@localhost ~]# ab -n -c http://11.11.11.2/index.html#在链接的过程中会发现nginx调用的cpu是不固定的；

如果只绑定3个的话，优先不使用第一个cpu；

worker_priority -;

server {
listen ;
server_name www.yanqi.org;
root /www/nginx/html; location ~* \.(jpg|png)$ {
deny 11.11.11.3;
allow all;
}
}

location / {
satisfy any; allow 192.168.1.0/;
deny all; auth_basic "closed site";
auth_basic_user_file conf/htpasswd;
}

server {
listen ;
server_name www.yanqi.org;
root /data/nginx/vhost; location / {
#root /data/nginx/vhost2;
allow all;
} error_page = /.html
location = /404.html {
root /data/nginx/error_pages;
} error_page /50x.html;
location = /50x.html {
}
}说明：
如果访问404页面：会到 /data/nginx/error_pages 目录下找 404.html 文件； 注释：=200 是定义响应码，就算是访问是吧，返回的状态码也是200
如果访问50x页面：会到 /data/nginx/vhost 目录下找50x.html;

location / {
deny 192.168.1.1;
allow 192.168.1.0/;
allow 10.1.1.0/;
allow :0db8::/;
deny all;
}

location / {
auth_basic "closed site";
auth_basic_user_file conf/htpasswd;
}

gzip on | off; 开启压缩
gzip_comp_level ; 压缩级别
gzip_buffers 4k| 8k; 压缩缓冲 16段 每段8k 默认值
gzip_min_length ; 低于20字节的内容不压缩 默认值
gzip_types text/html text/css application/javascript; 指定压缩目标 #这个可以在/etc/nginx/mime.types 中查看

前段有代理不开启，默认配置

http { ... server {
listen ssl;
keepalive_timeout ; ssl_protocols TLSv1 TLSv1. TLSv1.;
ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
ssl_certificate /usr/local/nginx/conf/cert.pem;
ssl_certificate_key /usr/local/nginx/conf/cert.key;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m; ...
}

http://www.yanqi.org/bbs/ --> http://bbs.yanqi.org
http://www.yanqi.org/media/audio/a.wmv --> http://www.yanqi.org/media/mp3/a.mp3

server {
listen ;
server_name www.yanqi.org;
root /data/nginx/vhost1;
rewrite /(.*)\.png$ /$.jpg;
}

[root@nginx conf.d]# cat vhost1.conf
server {
listen ssl;
server_name cahost.zzidc.com;
root /data/nginx/vhost1;
access_log /var/log/nginx/vhost1_ssl_access.log main; ssl on;
ssl_certificate /etc/nginx/ssl/nginx.crt;
ssl_certificate_key /etc/nginx/ssl/nginx.key;
ssl_protocols sslv3 TLSv1 TLSv1. TLSv1.;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
}server {
listen ;
server_name www.yanqi.org;
root /data/nginx/vhost1;
#rewrite /(.*)\.png$ /$.jpg; #只要是以.png结尾的uri统一转成访问同名下格式为.jpg
#rewrite /(.*)$ https://cahost.zzidc.com/$1; #不管你访问什么，最终都跳转到后边的域名，默认301永久
#rewrite /(.*).png$ /$1.jpg; #服务端自行转换，返回给用户的响应码仍然是200
rewrite /(.*).png$ /$1.jpg redirect; #返回给客户一个新的URL，客户端再去访问新的URL 302 临时重定向
rewrite /(.*).png$ /$1.jpg redirect; #同样需要客户端重新请求， 301 永久重定向

if ($http_user_agent ~ MSIE) { #如果浏览器是IE的话，所有请求跳转到/msie/下，然后跳出本次循环
rewrite ^(.*)$ /msie/$ break;
}if ($http_cookie ~* "id=([^;]+)(?:;|$)") {
set $id $;
}if ($request_method = POST) { #如果客户端请求方法为post的话，直接返回405
return ;
}if ($slow) {
limit_rate 10k;
}if ($invalid_referer) { #防盗链，在定义中没有配置的，直接返回403；这个内容后续有写明。
return ;
}