[B! nginx] n2sã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

n2s id:n2s

nginxã«é–¢ã™ã‚‹n2sã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (76)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

nginx : ssl_dhparamã®æœ‰ã‚Šç„¡ã—ã§ã®æŒ™å‹•ã®é•ã„ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
n2s 2020/07/15
2017å¹´9æœˆã®è¨˜äº‹ã€‚1.11ç³»ã§ãã‚“ãªå¤‰æ›´ãŒã‚ã£ãŸã®ã‹ / ã¨ãã«ã€ECDHE-* ãŒä½¿ãˆã‚‹ã‘ã©DHE-* ãŒä½¿ãˆãªã„ã£ã¦ä»Šæ—¥æ—¥ä¸éƒ½åˆã¯ã‚ã‚‹ã‚‚ã‚“ãªã‚“ã§ã™ã‹ãâ€¦ï¼Ÿ

nginx

SSL
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã¨ã¯ï¼Ÿ
ãƒ¬ãƒƒãƒ‰ãƒãƒƒãƒˆè£½å“ Red Hat Enterprise Linuxã‚’ã¯ã˜ã‚ã€ã‚³ãƒ³ãƒ†ãƒŠãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚„è‡ªå‹•åŒ–ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ãªã©ã€ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚ºé ˜åŸŸã§åˆ©ç”¨ã•ã‚Œã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æä¾›ã„ãŸã—ã¾ã™ã€‚ Red Hat Enterprise Linux ã‚µã‚¤ã‚ªã‚¹OSSã‚ˆã‚ãšç›¸è«‡å®¤ ã€Œã‚µã‚¤ã‚ªã‚¹OSSã‚ˆã‚ãšç›¸è«‡å®¤ã€ã¯ã€ã‚µã‚¤ã‚ªã‚¹ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ãŒä¼æ¥å‘ã‘ã«ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ˆOSSï¼‰ã®ã‚µãƒãƒ¼ãƒˆã‚’å®Ÿæ–½ã—ç¶šã‘ã¦ããŸä¸ã§åŸ¹ã‚ã‚ŒãŸæŠ€è¡“åŠ›ã¨ãƒŠãƒ¬ãƒƒã‚¸ã‚’ã”æä¾›ã—ã€ãŠå®¢æ§˜ã®OSSç©æ¥µæ´»ç”¨ã‚’æ”¯æ´ã™ã‚‹ã‚µãƒãƒ¼ãƒˆã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚æœ€æ–°ã®OSSã«ã‚‚å–ã‚Šçµ„ã‚“ã§ãŠã‚Šã€å•†ç”¨è£½å“ã®ã‚µãƒãƒ¼ãƒˆå“è³ªã«åŒ¹æ•µã™ã‚‹æ‰‹åŽšã„ã‚µãƒ¼ãƒ“ã‚¹ã‚’å„ç¨®OSSã§ã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã™ã€‚
n2s 2020/06/11
nginx
ãƒªãƒ³ã‚¯
Nginxã§CORSè¨å®šã—ã¦ã„ã‚‹æ™‚ã«40x,50xã®HTTPã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã§ã‚‚CORSã‚¨ãƒ©ãƒ¼ãŒå‡ºãªã„ã‚ˆã†ã«ã—ãŸã„ - ãƒ†ã‚¯ãƒŽãƒè‡ªæ…°é€šä¿¡
ã¯ã˜ã‚ã« ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã‚„ã€ãƒžã‚¤ãƒã‚µãƒ¼ãƒ“ã‚¹ãŒé€²ã‚“ã§ãã¦ã„ã‚‹æ˜¨ä»Šã«ãŠã„ã¦ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆå…ƒã¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆå…ˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒå¿…ãšåŒã˜ã¨ã¯é™ã‚‰ãªã„çŠ¶æ³ãŒå¤šã€…ã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ãã“ã§ã€Javascriptã ã¨å›žé¿ç–ã¨ã—ã¦JSONPä½¿ã†ã‹CORSè¨å®šã™ã‚‹ã‹ï¼ŸãŒãƒ¡ã‚¸ãƒ£ãƒ¼ã©ã“ã‚ã§ã™ãŒã€ä»Šå›žã¯å¾Œè€…ã®CORSè¨å®šã«ã¤ã„ã¦ã§ã™ã€‚ HTTPã‚µãƒ¼ãƒãƒ¼ã¯Nginxã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ ç›´é¢ã—ãŸäº‹ Nginxã§CORSè¨å®šã—ã¦ã„ã¦ã€ä½•ã‚‰ã‹ã®åŽŸå› ã€ä¾‹ãˆã°ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã«ã‚¨ãƒ©ãƒ¼ãŒã‚ã£ã¦500ç•ªã®HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãŒè¿”ã•ã‚Œã‚‹ã¨ã—ã¾ã™ã€‚ãã®å ´åˆã«ã€ãªãœã‹CORSã®ã‚¨ãƒ©ãƒ¼ãŒå‡ºã‚‹ã¨ã„ã£ãŸç¾è±¡ã«éé‡ã—ã¾ã—ãŸã€‚ localhost:5555â†’localhost:1000 ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã—ãŸæ™‚ã«502 BadGatewayã‚’ã‚ã–ã¨ç™ºç”Ÿã•ã›ã¦ã€ãã†ã™ã‚‹ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ƒã®ãƒ–ãƒ©ã‚¦ã‚¶ã§ã¯CORSã®ã‚¨ãƒ©ãƒ¼ãŒå‡ºã¾ã™ã€‚ Javascriptã§é–‹ç™ºã—ã¦ã„ã‚‹
n2s 2020/04/09
nginx

CORS
ãƒªãƒ³ã‚¯
nginx ã§ç‰¹å®šãƒ¡ã‚½ãƒƒãƒ‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ãƒã‚°ã«å‡ºåŠ›ã•ã›ãŸããªã„å ´åˆ - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
â€» ã“ã®ã‚¨ãƒ³ãƒˆãƒªã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—çµ‚äº†ã«ä¼´ã†ã€ã‚µãƒ–ãƒ–ãƒã‚°ã‹ã‚‰ã®å¼•è¶Šã‚¨ãƒ³ãƒˆãƒª(2011/07)ã§ã™ã€‚ â€» æƒ…å ±ãŒå¤ã„å¯èƒ½æ€§ã‚‚ã‚ã‚Šã¾ã™ã®ã§ã€ã”ç•™æ„ãã ã•ã„ã€‚ ãŸã¨ãˆã°ã€GET ãƒ¡ã‚½ãƒƒãƒ‰ä»¥å¤–ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ãƒã‚°ã«å‡ºåŠ›ã•ã›ãŸã„å ´åˆã¯ã€è¨å®šã«ä»¥ä¸‹ã®ã‚ˆã†ã«æ›¸ãã€‚ # é¬¼ã®ã‚ˆã†ã«ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚ã‚‹ã‚µã‚¤ãƒˆã¨ã‹ããƒ»ãƒ»ãƒ»ã€‚ location / { root /path/to; access_log logs/access.log; if ( $request_method = GET ) { access_log off; } }ãƒã‚°ã®å‡ºåŠ›æœ‰ç„¡ä»¥å¤–ã«ã‚‚ã€ä¸‹è¨˜ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã€ if ( $request_method = GET ) { (è¨å®šã‚’è¨˜è¿°) }ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ¡ã‚½ãƒƒãƒ‰ã‚’æ¡ä»¶ã«ã—ã¦è¨å®šã‚’è¨˜è¿°ã§ãã‚‹ã€‚ ãƒ¡ã‚½ãƒƒãƒ‰ã®æŒ‡å®šéƒ¨åˆ†ã¯ã€ã‚‚ã¡ã‚ã‚“æ£è¦è¡¨ç¾ã‚‚ä½¿ãˆã‚‹ã®ã§ã€è¤‡æ•°æ¡ä»¶ã‚‚OKã€‚
n2s 2019/11/28
nginx
ãƒªãƒ³ã‚¯
CVE-2019-11043ï¼šPHP-FPMã«ãŠã‘ã‚‹è„†å¼±æ€§ã«ã‚ˆã‚Šã€nginxã§ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã‚‹å¯èƒ½æ€§ã‚ã‚Š
nginxã¨PHP-FPMã‚’ä½¿ç”¨ã™ã‚‹Webã‚µãƒ¼ãƒãƒ¼ã¯ã€ç‰¹å®šã®æ¡ä»¶ä¸‹ã§ã“ã®æ¬ é™¥ã«å¯¾ã—ã¦è„†å¼±ã§ã™ã€‚ èƒŒæ™¯ 10æœˆ22æ—¥ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®Omar Ganievæ°ã¯ã€PHPã®FastCGI Process Managerï¼ˆFPMï¼‰ã§ã‚ã‚‹PHP-FPMã«ãŠã‘ã‚‹ã€Œãƒ‘ãƒƒãƒãŒé©ç”¨ã•ã‚ŒãŸã°ã‹ã‚Šã€ã®ãƒªãƒ¢ãƒ¼ãƒˆã‚³ãƒ¼ãƒ‰å®Ÿè¡Œã®è„†å¼±æ€§ã«é–¢ã™ã‚‹ãƒ„ã‚¤ãƒ¼ãƒˆã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ ã“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã«ã¯ã€è„†å¼±æ€§ã®æ¦‚å¿µå®Ÿè¨¼ï¼ˆPoCï¼‰ãŒå…¬é–‹ã•ã‚ŒãŸGitHubãƒªãƒã‚¸ãƒˆãƒªã¸ã®ãƒªãƒ³ã‚¯ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ Freshly patched RCE in PHP-FPM:https://t.co/kaVsCStBJx Exploit:https://t.co/VLmhxMWVxo Many nginx+PHP configurations vulnerable, watch out! â€” BECHED (@ahack_ru) October 22,
n2s 2019/10/26
PHP

nginx
ãƒªãƒ³ã‚¯
Nginx & PHP-FPM systemd services.
n2s 2018/12/13
nginx

PHP

systemd
ãƒªãƒ³ã‚¯
NGINX Documentation
Skip Navigation Subscription licensing & solutions Overview About subscription licenses Overview NGINX Plus licensing workflows Getting started Instructional videos
n2s 2018/12/13
nginx

systemd
ãƒªãƒ³ã‚¯
nginxãŒã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã§403ã‚’è¿”ã™ - latest log
nginxãŒ403ã‚’è¿”ã™ç†ç”±ã¯æ§˜ã€…ã§ã™ã€‚ ã¾ãšã¯ã“ã¡ã‚‰ã‚’ã–ã–ã£ã¨å‚ç…§ã—ã€æ°—ã«ãªã‚‹ãƒã‚¤ãƒ³ãƒˆãŒã‚ã£ãŸã‚‰è©¦ã—ã¦ã¿ã¾ã—ã‚‡ã†: www.1and1.com åƒ•ã¯æ™‚ã€…ã¯ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’è¨å®šã—ã¦403ã«ãªã£ã¦ã—ã¾ã„é ã‚’æŠ±ãˆã¦ã—ã¾ã„ã¾ã™ã€‚æ•°å¹´ã«ä¸€å›žãã‚‰ã„ã®ãƒšãƒ¼ã‚¹ã§ã‚„ã‚‰ã‹ã™ã®ã§ã€æ¯Žå›žã‚°ã‚°ã£ã¦ã‚‹ã‚“ã§ã™ã‚ˆãã€‚ ãŸã¨ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ã«ã€your-project ä»¥ä¸‹ã«å˜åœ¨ã™ã‚‹ assets ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ https://localhost/assets ã§ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã«ã—ã‚ˆã†ã¨ã—ã¦ã€ã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯ã‚’è¨å®šã™ã‚‹ã¨403ã«ãªã£ãŸã‚Šã—ã¾ã™ã€‚ $ cd your-project $ ln -s assets /usr/local/var/www/assets ã“ã®å ´åˆã¯ nginx.conf ã« location /assets/ ã‚’è¿½åŠ ã™ã‚‹ã¨è‰¯ã„ã§ã—ã‚‡ã†ã€‚ location /assets/ { root
n2s 2018/06/23
nginx
ãƒªãƒ³ã‚¯
@no1zy_secã®ãƒžã‚¤ãƒšãƒ¼ã‚¸ - Qiita
posted articles:nginx:60%Security:60%Config:47%CTF:40%writeup:27%
n2s 2018/05/29
5/26ä»¥é™ã€Œnginxã®è¨å®šãƒŸã‚¹ã§èµ·ã“ã‚‹ã€ã‚·ãƒªãƒ¼ã‚º

nginx

security

!index
ãƒªãƒ³ã‚¯
Nginxã§locationã®æ›¸ãæ–¹ã¯ã¨ã‚Šã‚ãˆãšã‚³ãƒ¬ã«ã—ã¦ãŠã‘ - Panda Noir
ã€ŒNginx ã® location ã®æ›¸ãæ–¹ãŒã‚ã‹ã‚‰ãªã„ï¼ã€ãã†æ€ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã‹ï¼Ÿ ãƒã‚¹ãƒˆã™ã‚‹ã¨ãŠã‹ã—ããªã‚‹ åŒã˜éšŽå±¤ã«ã‚ã‚‹ã†ã¡ä¸€ã¤ã—ã‹é©ç”¨ã•ã‚Œãªã„ åŒã˜éšŽå±¤ã®locationãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ¼”ç®—åã‚’ã™ã¹ã¦ãƒã‚§ãƒƒã‚¯ã—ãªã„ã¨ã€ã©ã‚ŒãŒé©ç”¨ã•ã‚Œã‚‹ã‹ã‚ã‹ã‚‰ãªã„ ã“ã®ã‚ˆã†ã«ã€Nginx ã® locationãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ç›´æ„Ÿçš„ã§ã¯ãªãã€ã‚¯ã‚»ã®ã‚ã‚‹å‹•ä½œã‚’ã—ã¾ã™ã€‚ ä»Šå›žã¯ã¨ã¦ã‚‚ã‚«ãƒ³ã‚¿ãƒ³ã§ã€ãƒ•ã‚¡ã‚¤ãƒ«åˆ†å‰²ç®¡ç†ãŒæ¥½ã«ãªã‚‹ã‚„ã‚Šæ–¹ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ locationã®åŸºç¤Žäº‹é … ã¾ãšlocationã®åŸºç¤ŽçŸ¥è˜ã§ã™ãŒã€locationã¯ä¸¦åˆ—ã—ã¦æ›¸ã‹ã‚Œã¦ã„ãŸå ´åˆã€ã©ã‚Œã‹ä¸€ã¤ã®ã¿é©ç”¨ã•ã‚Œã¾ã™ã€‚ã©ã‚ŒãŒé©ç”¨ã•ã‚Œã‚‹ã‹ã¯æ¼”ç®—åã«ã‚ˆã‚Šã¾ã™ã€‚ ã€Œ=ã€^~ã€~ã€~*ã€ãªã—ã€ã®é †ã«é©ç”¨ã•ã‚Œã¾ã™ã€‚ =å®Œå…¨ä¸€è‡´ ^~å‰æ–¹ä¸€è‡´~case-sensitive*1ãªæ£è¦è¡¨ç¾ ~*case-insensitive*2ãªæ£è¦è¡¨ç¾ ãªã—å‰æ–¹ä¸€è‡´
n2s 2018/05/19
nginx

!è¦ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
Nginxã®ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã‚’JSONå½¢å¼ã§å‡ºåŠ›ã™ã‚‹ - Qiita
http { : log_format json escape=json '{"time": "$time_iso8601",' '"host": "$remote_addr",' '"vhost": "$host",' '"user": "$remote_user",' '"status": "$status",' '"protocol": "$server_protocol",' '"method": "$request_method",' '"path": "$request_uri",' '"req": "$request",' '"size": "$body_bytes_sent",' '"reqtime": "$request_time",' '"apptime": "$upstream_response_time",' '"ua": "$http_user_agent",'
n2s 2018/03/19
nginx
ãƒªãƒ³ã‚¯
Nginxè¨å®šã®ã¾ã¨ã‚
ã¯ã˜ã‚ã« åƒ•ã¯ç›²ç›®çš„ã«unicornã‚’èµ·å‹•ã™ã‚‹ãŸã‚ã ã‘ã«nginxã‚’ä½¿ã£ã¦ã„ã¦ã€è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®å†…å®¹ã¨ã‹ã‚’ã»ã¨ã‚“ã©çŸ¥ã‚‰ãªã„ã€‚ ãªã®ã§ã€ã“ã“ã«nginxã®è¨å®šå†…å®¹ã‚’ã¾ã¨ã‚ã‚‹äº‹ã§è‡ªåˆ†è‡ªèº«ãŒè¦šãˆã‚ˆã†ã¨æ€ã†ã€‚ æ™®æ®µä½¿ã†å¤§æŠµã®è¨å®šã¯è¨˜è¼‰ã—ã¦ã„ã‚‹ã¤ã‚‚ã‚Šã§ã™ã€‚ è¨˜è¼‰å†…å®¹ã¯å®Ÿéš›ã«è©¦ã—ãŸã‚‚ã®ã¨è©¦ã—ã¦ãªã„ã‚‚ã®ãŒæ··åœ¨ã—ã¦ã‚‹ã®ã§ã€èª¤ã£ãŸè¨å®šãªã©ãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã®ã§ãã®è¾ºã¯ã‚³ãƒ¡ãƒ³ãƒˆã§ã”æŒ‡æ‘˜ã„ãŸã ã‘ã‚‹ã¨åŠ©ã‹ã‚Šã¾ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¤ã„ã¦ã¯åƒ•ãŒæ›¸ãã‚ˆã‚Šä»–ã®äººã®è¨˜äº‹ã‚’è¦‹ãŸæ–¹ãŒã„ã„ã¨æ€ã†ã€‚ centosã«å…¥ã‚Œã‚‹ãªã‚‰ä»¥ä¸‹ã®è¨˜äº‹ãŒå‚è€ƒã«ãªã‚‹ã€‚ CentOS6.xã«ã¦nginxã®æœ€æ–°ç‰ˆã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹æ‰‹é † CentOS 6.5ã§nginxã‚’å‹•ã‹ã™ç‚ºã®æœ€ä½Žé™ã®è¨å®š ã¾ãŸchefã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹å ´åˆã¯ä»¥ä¸‹ã®è¨˜äº‹ãŒå½¹ã«ãŸã¤ã€‚ Chefã§nginxã‚’å°Žå…¥ã—ã¦ã¿ã‚‹ Chefã§Nginxã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ãã«ãƒãƒžã£ãŸ c
n2s 2017/10/10
nginx

!è¦ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
Nginxã®ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã¨http2é€šä¿¡ã™ã‚‹ - ASnoKaze blog
ä»¥å‰æ›¸ã„ãŸã¨ãŠã‚Šã€Apacheã§ã¯ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã¨HTTP2é€šä¿¡ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ asnokaze.hatena blog.com Nginxã®å ´åˆã¯ã€é–‹ç™ºè€…ã®ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã§Googleã®äººãŒæ›¸ã„ã¦ã‚‹ã€Œngx_http_v2_upstreamã€ãƒ‘ãƒƒãƒã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ã§ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰(upstream)ã¨HTTP2é€šä¿¡ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãƒ‘ãƒƒãƒ [PATCH 01 of 14] Output chain: propagate last_buf flag to c->send_chain() [PATCH 02 of 14] Upstream keepalive: preserve c->data [PATCH 03 of 14] HTTP/2: add debug logging of control frames [PATCH 04 of 14] HTTP/
n2s 2017/07/04
nginx

HTTP2
ãƒªãƒ³ã‚¯
nginx-buildã®LibreSSLå¯¾å¿œã‚’ã—ãŸ
nginx-buildã¨ã„ã†Goè£½ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒã‚ã‚Šã¾ã™ã€‚åå‰ã®é€šã‚Šnginxã‚’buildã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ãã®nginx-buildã§LibreSSLã®é™çš„ãƒªãƒ³ã‚¯ãŒç°¡å˜ã«ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹PRã‚’ãƒžãƒ¼ã‚¸ã—ã¦ã‚‚ã‚‰ãˆã¾ã—ãŸã€‚ ã‚³ãƒ¡ãƒ³ãƒˆã«ã‚‚æ›¸ã„ãŸã‚ˆã†ã«ã€ä»Šã¾ã§ã®ã‚³ãƒ¼ãƒ‰ã¯ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã«æ¸¡ã™ã‚ªãƒ—ã‚·ãƒ§ãƒ³åã¨ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢åãŒä¸€è‡´ã—ã¦ã„ã‚‹äº‹ãŒå‰æã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã—LibreSSLã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³åã¯ â€” with-opensslã§ä¸€è‡´ã—ã¾ã›ã‚“ã€‚ã¾ãŸOpenSSLã¨åŒæ§˜ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’ä»˜ä¸Žã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã®ã§ã¨ã“ã‚ã©ã“ã‚ç‰¹åˆ¥æ‰±ã„ã—ã¦ã„ã¾ã™ã€‚ãã®è¾ºã‚ŠãŒä¸€ç‹ç¸„ã§ã¯è¡Œã‹ãªã„ã®ã§å°‘ã—é¢å€’ã§ã—ãŸã€‚ nginxã¨LibreSSLã«ã¤ã„ã¦å°‘ã—æ›¸ã„ã¦ã¿ã¾ã™ã€‚ nginxã¯å¤§ä½“ã®OSã®æ¨™æº–ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã§å…¥ã‚‹ã®ã§é©å½“ã«åˆ©ç”¨ã—ãŸã„ã ã‘ãªã‚‰æ¨™æº–ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‹ã‚‰å…¥ã‚Œã‚Œã°ååˆ†ã§ã™ã€‚ã—ã‹ã—nginxã¯Apache
n2s 2017/05/29
nginx
ãƒªãƒ³ã‚¯
APIã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹ãŸã‚ã®CORSè¨å®šæ±ºå®šç‰ˆ - Qiita
ã‚¿ã‚¤ãƒˆãƒ«ã¯é‡£ã‚Šã€ã‹ã¤ã€è‡ªåˆ†ã®ãŸã‚ã®å‚™å¿˜éŒ²ã§ã™ã€‚ ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’æ§‹ç¯‰ã™ã‚‹ã¨ã€APIã‚µãƒ¼ãƒã‚’ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨ã«ç«‹ã¦ã‚‹ã‚ã‘ã§ã™ãŒã€ ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã®JSã‚¨ãƒ³ã‚¸ãƒ³ã‹ã‚‰APIã‚µãƒ¼ãƒã‚’å©ãæ™‚ã«é¿ã‘ã¦é€šã‚Œãªã„ã®ãŒã€Same-Origin Policyï¼ˆåŒä¸€ç”Ÿæˆå…ƒãƒãƒªã‚·ãƒ¼ï¼‰ã«ã‚ˆã‚‹CORS (Cross-Origin Resource Sharing)åˆ¶é™ã§ã™ã€‚ ã“ã‚Œã‚’å›žé¿ã™ã‚‹ã«ã¯ã€APIã‚µãƒ¼ãƒå´ã§Access-Control-*ãƒ˜ãƒƒãƒ€ã‚’é©åˆ‡ã«è¿”ã™å¿…è¦ãŒã‚ã‚Šã¾ã™ãŒã€ã©ã†è¨å®šã™ã‚‹ã¹ãã‹ã®æƒ…å ±ãŒæ„å¤–ã¨å°‘ãªã„ã®ã§ï¼ˆè‡ªåˆ†çš„ï¼‰ã“ã‚ŒãŒæ±ºå®šç‰ˆï¼ã€€ã¨ã„ã†è¨å®šã‚’è€ƒãˆã¦ã¿ã¾ã—ãŸã€‚ çµè«– nginxã®å ´åˆã®è¨å®šä¾‹ã§ã™ã€‚ server { listen 80; server_name site.localhost; charset utf-8; root /var/www/app/public; locatio
n2s 2017/02/13
http://twitmatome.bogus.jp/archives/27409 ã® @bulkneets ã•ã‚“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã‚‚è¦å‚ç…§

nginx

CORS

!è¦ãƒã‚§ãƒƒã‚¯
ãƒªãƒ³ã‚¯
ä½œã£ã¦è¦šãˆã‚‹ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚· | æ±åŒ—ã‚®ãƒ¼ã‚¯
ä»Šå›žã¯ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã«ã¤ã„ã¦å‹‰å¼·ã—ã¦ã¿ã¾ã—ãŸã€‚ ã€Œãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã£ã¦ãªã‚“ãªã®ã•ã€ã¨ã„ã†æ–¹ã¯ä¸€ç·’ã«æ‰‹ã‚’å‹•ã‹ã—ãªãŒã‚‰ã”è¦§ãã ã•ã„ã€‚ ãªãŠã€ä»Šå›žã®ç›®çš„ã¯ã‚ãã¾ã§ã€Œãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒã¨ã¯ãªã«ã‹ã‚’ç†è§£ã™ã‚‹ã“ã¨ã€ãªã®ã§ã€å®Ÿéš›ã«é‹ç”¨ã™ã‚‹ã¨ãã«å¤§äº‹ãªè¨å®šã‚’ã™ã£é£›ã°ã—ãŸã‚Šã—ã¦ã„ã¾ã™ã€‚ ãã®ã‚ãŸã‚Šã®è©³ç´°ã®ç†è§£ã«ã¤ã„ã¦ã¯å‚è€ƒãƒªãƒ³ã‚¯ãªã©ã‚’ã‚‚ã¨ã«ã—ã¦æ·±ã‚ã¦ã„ãŸã ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€ã€Œãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã€ã¨ã¯ãªã«ã‹ ã²ã¨ã¾ãšæ„šç›´ã«Wikipediaã§èª¿ã¹ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ï¼ˆè‹±: Reverse proxyï¼‰ã¾ãŸã¯é€†ãƒ—ãƒã‚ã‚·ã¯ã€ç‰¹å®šã®ã‚µãƒ¼ãƒã¸ã®è¦æ±‚ã‚’å¿…ãšçµŒç”±ã™ã‚‹ã‚ˆã†ã«è¨ç½®ã•ã‚ŒãŸãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒã€‚ä¸€èˆ¬çš„ãªãƒ—ãƒã‚ã‚·ã¨ã¯ç•°ãªã‚Šä¸ç‰¹å®šå¤šæ•°ã®ã‚µãƒ¼ãƒã‚’å¯¾è±¡ã¨ã—ãªã„ã€‚ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¯ã€ä¸ç‰¹å®šå¤šæ•°ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰å¯„ã›ã‚‰ã‚Œã‚‹è¦æ±‚ã«å¯¾ã—ã¦ã€å¿œç”ã‚’è‚©ä»£ã‚ã‚Šã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šç‰¹å®šã®ã‚µãƒ¼ãƒã®è² æ‹…ã‚’è»½æ¸›ã—ãŸã‚Šã€ã‚¢ã‚¯ã‚»ã‚¹ã‚’åˆ¶é™ã™ã‚‹ã“
n2s 2016/09/06
nginx
ãƒªãƒ³ã‚¯
TCP serverã‚’SSL/TLSåŒ–ã™ã‚‹ã®ã« nginx ã® stream_ssl_module/stream_proxy_module ãŒä¾¿åˆ© - ãŸã”ã‚‚ã‚Šã™ãƒ¡ãƒ¢
æœ€è¿‘ Fluentd ã®é€šä¿¡ãƒ—ãƒãƒˆã‚³ãƒ«ã¾ã‚ã‚Šã‚’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ãŸã‚ã«ã‚ã‚Œã“ã‚Œã„ã˜ã£ã¦ã„ã‚‹*1ã‚“ã ã‘ã©ã€ã“ã‚Œã¯ãŠãŠã‚€ã fluent-plugin-secure-forward ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ãŸå†…å®¹ã‚’ Fluentd çµ„è¾¼ã¿ã® forward plugin ã§ã‚‚ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã‚ˆã€ã¨ã„ã†ã‚‚ã®ã«ãªã‚‹ã€‚ ã‚“ã§å•é¡Œãªã®ãŒ secure-forward ã¯ SSL/TLS ã§ã®æŽ¥ç¶šã®ã¿ã—ã‹ã‚µãƒãƒ¼ãƒˆã—ã¦ãªã‹ã£ãŸã‚“ã ã‘ã© forward ã§ã¯ç”Ÿã® TCP ã§é€šä¿¡ã™ã‚‹*2ã®ã§ã€æœ¬å½“ã« secure-forward ã¨ forward ãã‚Œãžã‚Œã®å®Ÿè£…é–“ã§äº’æ›æ€§ãŒä¿ãŸã‚Œã¦ã„ã‚‹ã®ã‹ã€ç›´æŽ¥çš„ã«ã¯ç¢ºèªã™ã‚‹æ‰‹æ®µãŒãªã„ã€ã¨ã„ã†ã“ã¨ã«ãªã£ã¦ã—ã¾ã†ã€‚ TCP server ã® SSL/TLS åŒ– ä¸€æ–¹ä¸–ã®ä¸ã«ã¯ SSL/TLS ã‚¿ãƒ¼ãƒŸãƒãƒ¼ã‚¿ã¨ã„ã†æ©Ÿèƒ½ãŒã‚ã£ã¦ã€ãŸã¨ãˆã°ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãªã‚“ã‹ãŒã“ã®æ©Ÿèƒ½ã‚’æŒã£ã¦ã„ã‚‹ã€‚ä½•ã‚’ã‚„ã‚‹ã‹ã¨
n2s 2016/08/24
ã‚„ã¯ã‚Šstoneæ€ã„å‡ºã™äººã‚‚â€¦ã¸ã‡ä»Šã‚‚ãƒ¡ãƒ³ãƒ†ã•ã‚Œã¦ã‚‹ã‚“ã§ã™ã‹

nginx

SSL
ãƒªãƒ³ã‚¯
ãƒŽãƒ³ãƒ–ãƒãƒƒã‚ãƒ³ã‚°I/Oã¨éžåŒæœŸI/Oã®é•ã„ã‚’ç†è§£ã™ã‚‹
English
n2s 2016/07/08
Linux

nginx
ãƒªãƒ³ã‚¯
ï¼“ã¤ã®nginxã‚’ã†ã¾ãä½¿ã„åˆ†ã‘ã‚ˆã†ã€œnginxã€OpenRestyã€Tengineã€œ
OpenRestyã¯nginxã®ã»ã‹ã«ngx_luaã‚’ã¯ã˜ã‚ã¨ã™ã‚‹Cã§æ›¸ã‹ã‚ŒãŸå„ç¨®ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ngx_luaã®APIã‚’åˆ©ç”¨ã—ãŸrestyãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€ãã—ã¦Lua/LuaJITã§æ§‹æˆã•ã‚Œã¦ã„ã¾ã™ã€‚ OpenRestyã«å«ã¾ã‚Œã¦ã„ã‚‹nginxè‡ªä½“ã¯æœ¬å®¶ã®nginxã¨åŸºæœ¬åŒã˜ãªã®ã§ã€åˆ¥ã«OpenRestyã‚’åˆ©ç”¨ã—ãªãã¦ã‚‚è‡ªåˆ†ã§ngx_luaã‚’çµ„ã¿è¾¼ã‚“ã ã‚Šã€ã‚µãƒ¼ãƒä¸Šã«restyãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’é…å¸ƒã™ã‚‹ã“ã¨ã§ä¼¼ãŸã‚ˆã†ãªç’°å¢ƒã‚’æ§‹ç¯‰ã™ã‚‹ã“ã¨ã¯å¯èƒ½ã§ã™ãŒã€OpenRestyã§ã‚ã‚Œã°ä¸»è¦ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚„ãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒ./configureã€makeã€make installã®ä¸€é€£ã®æµã‚Œã§ã™ã¹ã¦ã‚´ã‚½ãƒƒã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¾ã™ã—ã€OpenRestyã®configureã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯nginxã®configureã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’ç¶™æ‰¿ã—ãŸã‚‚ã®ãªã®ã§nginxã®configureã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’ã»ã¼ãã®ã¾ã¾åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚‚ã§
n2s 2016/05/25
nginx

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
100è¡Œã‚ã£ãŸmod_rewirteã‚’ ngx_mrubyã§æ›¸ãæ›ãˆãŸè©±
ç¬¬5å›žãƒšãƒ‘ãƒœãƒ†ãƒƒã‚¯ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã€œã‚¤ãƒ³ãƒ•ãƒ©ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢å¤§ç‰¹é›†ã€œ ã§ç™ºè¡¨ã—ãŸè³‡æ–™ã§ã™ http://pepabo.connpass.com/event/30348/
n2s 2016/05/14
nginx
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸