[B! nginx] penaltyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

penalty id:penalty

nginxã«é–¢ã™ã‚‹penaltyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

nginx ã®è¨å®šã‚’ãƒ¬ãƒ“ãƒ¥ãƒ¼ã™ã‚‹ã¨ãã®è¦³ç‚¹ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - Cybozu Inside Out | ã‚µã‚¤ãƒœã‚¦ã‚ºã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€‚ ã‚¤ãƒ³ãƒ•ãƒ©ãƒãƒ¼ãƒ ã®é‡Žå³¶ï¼ˆ@nojimaï¼‰ã§ã™ã€‚ ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã« nginx ã®è¨å®šã«ã¤ã„ã¦æ°—ã‚’ã¤ã‘ã‚‹ã¹ãç‚¹ã‚’å…±æœ‰ã™ã‚‹ãŸã‚ã«ã€ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ã‚’æ›¸ãã¾ã—ãŸã€‚ ã›ã£ã‹ããªã®ã§ã“ã“ã§å…¬é–‹ã—ã¾ã™ã€‚ ã»ã¨ã‚“ã©ã®é …ç›®ã¯è‡ªåˆ†ã‚„ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã®å®Ÿä½“é¨“ã«åŸºã„ã¦ã„ã¾ã™ã€‚ ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ server server_name ãŒä»–ã®ã‚„ã¤ã¨è¢«ã£ã¦ã„ãªã„ã‹ã€‚ listen ã™ã‚‹ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒåŒã˜å ´åˆã€server_name ã§åŒºåˆ¥ã§ããªã„ã¨ã„ã‘ãªã„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€SNI ã‚’ã‚µãƒãƒ¼ãƒˆã—ãªã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã¯ TLS ç”¨ã®è¨å®šãŒ default_server ã®ã‚‚ã®ãŒä½¿ã‚ã‚Œã‚‹ç‚¹ã«ã‚‚æ³¨æ„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€listen ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã« ssl ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’æ›¸ã„ã¦ã„ã‚‹ã‹ã€‚ location location ã®ãƒžãƒƒãƒã®é †ç•ªã«æ³¨æ„ æ£è¦è¡¨ç¾ã® location ã¯å‰æ–¹ä¸€è‡´ã® location ã‚ˆã‚Š
penalty 2015/11/20
nginx
ãƒªãƒ³ã‚¯
nginxã®proxy_passã®æ³¨æ„ç‚¹ -- ãºã‘ã¿ã•ãŠ
nginxã‚’ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã«ã™ã‚‹å ´åˆã«ä½¿ç”¨ã™ã‚‹proxy_passãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€URIãŒä¸Žãˆã‚‰ã‚ŒãŸå ´åˆã¨ã€ãã†ã§ãªã„å ´åˆã§æŒ™å‹•ãŒç•°ãªã‚‹ã€‚ ã©ã†ã„ã†ã“ã¨ã‹ã¨ã„ã†ã¨ã€ä»¥ä¸‹ã®1.ã¨2.ã¯åˆ¥ã€…ã®çµæžœã¨ãªã‚‹ã€‚proxy_passãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®å¼•æ•°ã«æ³¨ç›®ã—ã¦æ¬²ã—ã„ã€‚ # 1. specified with a URI location /name/ { proxy_pass http://127.0.0.1/; } 1.ã¯proxy_passãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«å®Œå…¨ãªURIã‚’ä¸ŽãˆãŸä¾‹ã§ã‚ã‚‹ã€‚ã“ã®å ´åˆhttp://example.com/name/fooã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ã€/nameãŒå‰Šé™¤ã•ã‚ŒãŸhttp://127.0.0.1/fooã¸è»¢é€ã•ã‚Œã‚‹ã€‚ 2.ã¯proxy_passãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«å®Œå…¨ãªURIã‚’ä¸Žãˆãªã‹ã£ãŸä¾‹ã§ã‚ã‚‹ã€‚ã“ã®å ´åˆhttp://example.com/name/fooã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯ã€
penalty 2015/06/03
ç½

nginx
ãƒªãƒ³ã‚¯
SPDY ã®ç´¹ä»‹ã¨ nginx ã§ SPDY ã‚’ä½¿ã†æ–¹æ³• - HeartRails Tech Blog
HeartRails Tech Blog ãƒãƒ¼ãƒˆãƒ¬ã‚¤ãƒ«ã‚ºã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€ãƒ‡ã‚¶ã‚¤ãƒŠãƒ¼ã«ã‚ˆã‚‹ãƒ–ãƒã‚°ã§ã™ã€‚ ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã€ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã€IoT ãƒ‡ãƒã‚¤ã‚¹ã®é–‹ç™ºã«é–¢é€£ã™ã‚‹æŠ€è¡“çš„ãªæƒ…å ±ã‚’ç™ºä¿¡ã—ã¦ã„ãã¾ã™ã€‚ ã¿ãªã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚æ˜¨å¹´æœ«ã«å…¥ç¤¾ã—ã¾ã—ãŸ ã‚„ã¾ãŽã— ã¨ã„ã†è€…ã§ã”ã–ã„ã¾ã™ã€‚Twitter ç‰ã¯ã‚„ã£ã¦ã„ãªã„ã€ã¨ã„ã†ã“ã¨ã«ã—ã¦ãŠã„ã¦ãã ã•ã„ã€‚ã¨ã‚‚ã‹ãä½•å’ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ã•ã¦ã€åæ•°å¹´ã‚‚ã®é–“ 1.1 ã®ã¾ã¾å¤‰ã‚ã‚‰ãšæœ‰ã‚Šç¶šã‘ã¦ã„ãŸ HTTP ã®è¦æ ¼ã§ã™ãŒã€ã“ã®é ƒã¯æ–°ãŸãªé¢¨ãŒå¹ã„ã¦ãŠã‚Šã€HTTP/2.0 ã®å˜åœ¨ãŒè¦‹ãˆã¦ãã¾ã—ãŸã€‚ã¾ã ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ãŒç™ºè¶³ã—ãŸã°ã‹ã‚Šã§ã‚ã‚Šã€å…·ä½“çš„ã«å¤‰ã‚ã‚‹ã®ã¯å½“åˆ†å…ˆã«ãªã‚‹ã§ã‚ã‚ã†ã¨ã¯æ€ã„ã¾ã™ãŒã€ç±³ Google ç¤¾ã®æå”±ã—ã¦ã„ã‚‹ SPDY ãŒ HTTP/2.0 ã«å–ã‚Šå…¥ã‚Œã‚‰ã‚Œã‚‹å½¢ãŒæ¿ƒåŽšã§ã‚ã‚ã†ã¨è©±ã•ã‚Œã¦ã„ã¾ã™ã€‚ SPDY ã¯å…ˆè¿°ã—ãŸé€šã‚Šç±³ Google ç¤¾ãŒ
penalty 2013/01/28
spdy

nginx
ãƒªãƒ³ã‚¯
nginx+squidã§ç”»åƒã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãƒ¼ã®ä½œã‚Šæ–¹ - hideden.hatenablog.com
ä»•äº‹ã§ç”»åƒã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãƒ¼ã‚’æ§‹ç¯‰ã—ãŸæ™‚ã®ãƒ¡ãƒ¢ã€‚å¤§è¦æ¨¡äº‹ä¾‹ã®è¨å®šä¾‹ãŒæ¤œç´¢ã—ã¦ã‚‚ã‚ã¾ã‚Šè¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸã®ã§åŒã˜ã‚ˆã†ãªå¢ƒé‡ã®èª°ã‹ã®å‚è€ƒã«ãªã‚Œã°ã€‚ ãƒ”ãƒ¼ã‚¯æ™‚ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã¯æ•°Gbps ç”»åƒç·å®¹é‡ã¯æ•°åTB ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®storageãŒè¤‡æ•°ç¨®é¡ž è¦æ¨¡ã¨ã‚¢ã‚¯ã‚»ã‚¹é‡ã¨ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã‚‹ç”»åƒã®ç¨®é¡žãŒå¤šã„ã®ã§ã€squidã§disk cacheã‚’ä½¿ç”¨ã™ã‚‹ã¨COSSç‰ã‚’ä½¿ç”¨ã—ã¦ã‚‚diskIOã§è©°ã¾ã‚‹ç‚ºã€å…¨ã¦on memory cacheã€‚cacheå®¹é‡ã‚’ç¢ºä¿ã™ã‚‹ç‚ºã«å¿…ç„¶çš„ã«cacheã‚µãƒ¼ãƒãƒ¼ã®å°æ•°ã‚‚æ•°åå°ã€‚ 1. squidã‚’siblingæ§‹æˆã§ä¸¦åˆ—ã«ä¸¦ã¹ã‚‹ cache_peer 10.0.1.1 sibling 80 3130 no-query no-digest proxy-only cache_peer 10.0.1.2 sibling 80 3130 no-query no-digest proxy-o
penalty 2009/11/11
nginx

squid

server
ãƒªãƒ³ã‚¯
PCRE - Perl Compatible Regular Expressions
The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as PerlÂ 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API. The PCRE library is free, even for building proprietary software. PCRE was originally written for the Exim MTA, but is now used by many high-pr
penalty 2009/08/20
perläº’æ›æ£è¦è¡¨ç¾ãƒ©ã‚¤ãƒ–ãƒ©ãƒª

nginx

server

regular-expression
ãƒªãƒ³ã‚¯
nginxã§reverse proxyã—ã¦slowlorisã‚’é˜²ã„ã§ã¿ã‚‹ - ãªã‚“ã‹:ã‹ã‚“ãŒãˆã¦-6
Slowloris HTTP DoSã¨ã„ã†ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒæœ€è¿‘è©±é¡Œã§ã€ã ã‚Œã§ã‚‚ã‹ã‚“ãŸã‚“ã«ã€ãã‚“ãªã«å¸¯åŸŸã‚‚ä½¿ã‚ãšã€ãŠã‚‚ã«apacheã«DOSã‚’ã‹ã¾ã›ã¾ã™ã€‚ ãŸã‚ã—ã«(è‡ªåˆ†ã®ã‚µãƒ¼ãƒã«)ã‹ã¾ã—ã¦ã¿ãŸã‚‰ã‚«ãƒ³ã‚¿ãƒ³ã§ã—ãŸã€‚ã„ã«ã—ãˆã®SYN flood attackã£ã½ã„èŠ¸é¢¨ãªæ„Ÿã˜ãŒã—ã¾ã™ã€‚ æ®‹å¿µãªãŒã‚‰apacheç³»ã§ã¯ã€è¨å®šã‚’è¿½ã„è¾¼ã‚€ã¨ã‹ã®ã‚¢ãƒ—ãƒãƒ¼ãƒã§ã¯ã€ãªã‚‹ã¹ãè¢«å®³ã‚’å°ã•ã‚ã«ãŠã•ãˆã‚‹ãã‚‰ã„ã®ã“ã¨ã—ã‹ã§ããªã„ã½ã„ã§ã™ã€‚çŒ›çƒˆãªã„ãŸãšã‚‰é›»è©±ã®è¢«å®³ã«éã£ã¦ã„ã‚‹ã¨ãã«ã€ã‹ã‹ã£ã¦ããŸã„ãŸãšã‚‰é›»è©±ã¯ãªã‚‹ã¹ãã™ãåˆ‡ã‚‹ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†! ãã‚‰ã„ã®è² ã‘æˆ¦ã§ã™ãã€‚ ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã©ã†å‡¦ç†ã™ã‚‹ã‹ã®ãƒ„ã‚¯ãƒªã‚’ç‹™ã‚ã‚Œã¦ã‚‹æ„Ÿã˜ã§ã€ã„ã¾ã®apacheã‚’ä½¿ã†ã‹ãŽã‚Šå¯¾å‡¦ã¯ãªã‹ãªã‹åŽ³ã—ã„ã®ã§ã™ãŒã€æœ€è¿‘äººæ°—ã®ãƒã‚·ã‚¢ã®nginxã ã¨å¤§ä¸ˆå¤«ã¿ãŸã„ã¨ã„ã†ã“ã¨ã§ã€çµ„ã¿åˆã‚ã›ã‚’ãŸã‚ã—ã¦ã¿ã¾ã—ãŸã€‚ nginx (ãˆã‚“ã˜ã‚“ãƒ»ãˆã£ãã™) ã¯webã‚µãƒ¼ãƒã®ã‚½ãƒ•ãƒˆã‚¦
penalty 2009/06/25
slowloriså¯¾ç–ã¨ã—ã¦ã®nginx

nginx

apache

security
ãƒªãƒ³ã‚¯
1