Frontend squid reverse proxy to nginx
nginx is DDOS protected according to http_user_agent
First, review the access logs to identify the characteristics of the suspicious visits found http_user_agent, and then filter them
"Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; MyIE 3.01)Cache-Control: no-store, must-revalidate"
if ($http_user_agent ~ must-revalidate) {
return 503;
}
#这样就返回503错误
location = / {
include proxy.conf;
if ( $http_user_agent ~* "MSIE 5.01" ) {
proxy_pass http://www.qq.com;
#access_log /usr/local/nginx/logs/k.log main;
}
proxy_pass http://windows.abc.com;
}
#判断一下user-agent, if it's MSIE 5.01, just throw it to another place, such as pointing to www.qq.com to see if it can resist, haha
proxy_hide_header Cache-Control;
Finally, go back to Cache-Control and visit the page
Now the link is cached to the front-end squid, and the application server will not crash
#########################################################
Detailed description of the parameters of the location module in nginx
Nginx's Location can have the following matches:
1. = Strictly match this query. If found, stop searching.
2. ^~ Match the prefix of the path, if found, stop searching.
3. ~ is a case-sensitive regular match
4. ~* is a case-insensitive match
5. !~ and !~* are case-sensitive and case-insensitive mismatches, respectively
File and directory matching
* -f and !-f are used to determine if a file exists
* -d and !-d are used to determine if a directory exists
* -e and !-e are used to determine if a file or directory exists
* -x and !-x are used to determine whether a file is executable or not
Some of the available global variables
$args
$content_length
$content_type
$document_root
$document_uri
$host
$http_user_agent
$http_cookie
$limit_rate
$request_body_file
$request_method
$remote_addr
$remote_port
$remote_user
$request_filename
$request_uri
$query_string
$scheme
$server_protocol
$server_addr
$server_name
$server_port
$uri
The flag after rewrite can be:
last
break
redirect
permanent
proxy_pass http://localhost:80;
proxy_set_header Host $host;
You can automatically change the domain name information after forwarding |
Posted on 12/20/2016 10:37:01 AM
|
|
|
Landlord|
Posted on 12/20/2016 10:37:25 AM
|
