{"id":2200,"date":"2017-05-10T11:00:23","date_gmt":"2017-05-10T03:00:23","guid":{"rendered":"http:\/\/cn.hostease.com\/xueyuan\/?p=2200"},"modified":"2024-11-15T14:54:47","modified_gmt":"2024-11-15T06:54:47","slug":"lnmp%e9%ab%98%e7%ba%a7%e5%ba%94%e7%94%a8-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86cc%e9%98%b2%e6%8a%a4","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/xueyuan\/jishu\/linux\/lnmp%e9%ab%98%e7%ba%a7%e5%ba%94%e7%94%a8-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86cc%e9%98%b2%e6%8a%a4\/","title":{"rendered":"LNMP\u9ad8\u7ea7\u5e94\u7528 \u53cd\u5411\u4ee3\u7406+CC\u9632\u62a4"},"content":{"rendered":"<p>\u4e00\u3001LNMP\u9ad8\u7ea7\u5e94\u7528\u4e4bnginx\u6700\u7b80\u5355\u53cd\u5411\u4ee3\u7406<\/p>\n<p>server<\/p>\n<p>{<\/p>\n<p>listen \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a080;<\/p>\n<p>server_name \u00a0\u00a0\u00a0\u00a0vpsmm.com;<\/p>\n<p>location \/ {<\/p>\n<p>proxy_pass \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0https:\/\/cache.vpsmm.com\/;<\/p>\n<p>proxy_redirect \u00a0\u00a0\u00a0\u00a0\u00a0off;<\/p>\n<p>proxy_set_header \u00a0\u00a0\u00a0X-Real-IP \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0$remote_addr;<\/p>\n<p>proxy_set_header \u00a0\u00a0\u00a0X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n<p>}<\/p>\n<p>}<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>\u4e8c\u3001\u6700\u7b80\u5355\u7684\u524d\u7aef\u5168\u7f13\u5b58+\u53cd\u5411\u4ee3\u7406\u811a\u672c<\/p>\n<p>mkdir \/home\/cache\/path -p #\u65b0\u5efa2\u4e2a\u76ee\u5f55\uff0c\u653e\u7f6e\u7f13\u5b58\u6587\u4ef6<\/p>\n<p>mkdir \/home\/cache\/temp -p<\/p>\n<p>\u4fee\u6539 \/usr\/local\/nginx\/conf\/nginx.conf \u65b0\u589e\u4ee5\u4e0b\u4ee3\u7801\uff0c\u4e3b\u8981\u662f\u7f13\u5b58\u76f8\u5173\u8bbe\u7f6e\uff0c\u8bf7\u653e\u7f6e\u4e8e http{ ##\u8fd9\u91cc } \u4e2d\uff0c\u4e00\u822c\u52a0\u5728 log_format \u4e0a\u9762\u6216\u4e0b\u9762\u5747\u53ef\uff1a<\/p>\n<p>client_body_buffer_size \u00a0512k;<\/p>\n<p>proxy_connect_timeout \u00a0\u00a0\u00a05;<\/p>\n<p>proxy_read_timeout \u00a0\u00a0\u00a0\u00a0\u00a0\u00a060;<\/p>\n<p>proxy_send_timeout \u00a0\u00a0\u00a0\u00a0\u00a0\u00a05;<\/p>\n<p>proxy_buffer_size \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a016k;<\/p>\n<p>proxy_buffers \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a04 64k;<\/p>\n<p>proxy_busy_buffers_size 128k;<\/p>\n<p>proxy_temp_file_write_size 128k;<\/p>\n<p>proxy_temp_path \u00a0\u00a0\/home\/cache\/temp;<\/p>\n<p>proxy_cache_path \u00a0\/home\/cache\/path levels=1:2 keys_zone=cache_one:500m inactive=7d max_size=30g;<\/p>\n<p>#500m\u662f\u5185\u5b58\u5360\u7528\uff0c7d\u662f7\u5929\u65e0\u8bbf\u95ee\u5220\u9664\uff0c30g\u662f\u7f13\u5b58\u5360\u5177\u786c\u76d8\u7a7a\u95f4<\/p>\n<p>\u4ee5\u4e0b\u4e3a\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u6587\u4ef6\uff0c\u53ef\u53e6\u5b58\u6210 .conf \u653e\u7f6e\u4e8e vhost \u4e0b\u9762\uff1a<\/p>\n<p>server<\/p>\n<p>{<\/p>\n<p>listen \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a080;<\/p>\n<p>server_name \u00a0\u00a0\u00a0\u00a0vpsmm.com; #\u4e3b\u673a\u540d<\/p>\n<p>location \/ {<\/p>\n<p>proxy_cache cache_one;<\/p>\n<p>proxy_cache_valid \u00a0200 304 3d; #\u6b63\u5e38\u72b6\u6001\u7f13\u5b58\u65f6\u95f43\u5929<\/p>\n<p>proxy_cache_key $host$uri$is_args$args;<\/p>\n<p>proxy_pass \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0https:\/\/cache.vpsmm.com\/; #\u53cd\u4ee3\u7684\u7f51\u7ad9<\/p>\n<p>proxy_redirect \u00a0\u00a0\u00a0\u00a0\u00a0off;<\/p>\n<p>proxy_set_header \u00a0\u00a0\u00a0X-Real-IP \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0$remote_addr;<\/p>\n<p>proxy_set_header \u00a0\u00a0\u00a0X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n<p>expires 10d; #\u9ed8\u8ba410\u5929\u7f13\u5b58<\/p>\n<p>access_log \u00a0\/home\/wwwlogs\/vpsmm.log \u00a0access; #\u65e5\u5fd7\u6587\u4ef6<\/p>\n<p>}<\/p>\n<p>}<\/p>\n<p>\u70b9\u51fb\u51e0\u4e0b\u7f51\u7ad9\uff0cdf -sh \u547d\u4ee4\uff0c\u67e5\u770b \/home\/cache \u76ee\u5f55\u5927\u5c0f\uff0c\u5373\u53ef\u6d4b\u8bd5\u662f\u5426\u7f13\u5b58\u6210\u529f\u3002\u6b64\u811a\u672c\u4e3a\u524d\u7aef\u5168\u7f13\u5b58\uff0c\u540e\u7aef\u52a8\u6001\u66f4\u65b0\u540e\uff0c\u524d\u7aef\u4e0d\u4f1a\u81ea\u52a8\u4fee\u6539\u3002\u53ef\u624b\u52a8\u6e05\u7406cache\u76ee\u5f55\u4e0b\u6587\u4ef6\u3002\u8fd9\u4e2a\u65b9\u6cd5\uff0c\u53ef\u4ee5\u7528\u7eaf\u9759\u6001\u7684\u5f62\u5f0f\u6765\u9632CC\uff0c\u5982\u679c\u4f60\u7684\u52a8\u6001\u535a\u5ba2\uff0c\u53d7\u5230CC\u653b\u51fb\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u4e00\u4e0b\u3002<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>\u4e09\u3001LNMP\u7b80\u5355\u7684\u4e00\u4e9b\u9632CC\u7684\u529e\u6cd5<\/p>\n<p>\u89c2\u770b\u751f\u6210\u7684.log\u65e5\u5fd7\u6587\u4ef6\uff0c\u5224\u65ad\u6765\u8def\uff0c\u76f4\u63a5301\u767e\u5ea6\uff1a<\/p>\n<p>if ($http_referer ~* mi5.gov ) {<\/p>\n<p>rewrite ^(.*)$ https:\/\/www.baidu.com\/ permanent;<\/p>\n<p>}<\/p>\n<p>\u89c2\u770b\u751f\u6210\u7684.log\u65e5\u5fd7\u6587\u4ef6\uff0c\u5224\u65ad\u6d4f\u89c8\u5668\u7279\u5f81\u7801\uff0c\u76f4\u63a5301\u767e\u5ea6\uff1a<\/p>\n<p>if ($http_user_agent ~* firefox4.0 ) {<\/p>\n<p>rewrite ^(.*)$ https:\/\/www.baidu.com\/ permanent;<\/p>\n<p>}<\/p>\n<p>\u6839\u636e\u7279\u5f81\u7801\uff0c\u76f4\u63a5\u67e5\u627e.log\u6587\u4ef6\uff0c\u5e76iptables\u5c01\u6b7b\u76f8\u5e94IP\uff1a<\/p>\n<p>cat com.log | grep &#8216;Mozilla\/5.0&#8217; | awk &#8216;{print &#8220;iptables -I INPUT -p tcp &#8211;dport 80 -s &#8220;, $1, &#8220;-j DROP&#8221;}&#8217;| sort -n | uniq | sh<\/p>\n<p>if ($http_user_agent ~* 142.54.161.3 ) {rewrite ^(.*)$ https:\/\/www.baidu.com\/ permanent;}<\/p>\n<p>\u6587\u7ae0\u6765\u81ea\u7f51\u7edc\u535a\u5ba2\uff0c\u7248\u6743\u5f52\u4f5c\u8005\u6240\u6709\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001LNMP\u9ad8\u7ea7\u5e94\u7528\u4e4bnginx\u6700\u7b80\u5355\u53cd\u5411\u4ee3\u7406 server { listen \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a080; se &#8230; <a title=\"LNMP\u9ad8\u7ea7\u5e94\u7528 \u53cd\u5411\u4ee3\u7406+CC\u9632\u62a4\" class=\"read-more\" href=\"https:\/\/cn.hostease.com\/xueyuan\/jishu\/linux\/lnmp%e9%ab%98%e7%ba%a7%e5%ba%94%e7%94%a8-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86cc%e9%98%b2%e6%8a%a4\/\" aria-label=\"\u9605\u8bfb LNMP\u9ad8\u7ea7\u5e94\u7528 \u53cd\u5411\u4ee3\u7406+CC\u9632\u62a4\">\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[49],"tags":[1543,147,1544],"class_list":["post-2200","post","type-post","status-publish","format-standard","hentry","category-linux","tag-cc","tag-lnmp","tag-1544"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/comments?post=2200"}],"version-history":[{"count":1,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2200\/revisions"}],"predecessor-version":[{"id":2201,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/posts\/2200\/revisions\/2201"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/media?parent=2200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/categories?post=2200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/xueyuan\/wp-json\/wp\/v2\/tags?post=2200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}