[B! nginx] shodaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

shodai id:shodai

nginxã«é–¢ã™ã‚‹shodaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (16)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSL ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã§ãŠå˜†ãã®è²´å…„ã« - What Iâ€™ve found has never been enough@Hatena
SSL ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã®ä¾¡æ ¼ã«èƒƒã‚’ç—›ã‚ã¦ã„ã‚‹è²´å…„ã€ãã‚ŒãŒè²·ãˆãš SSL ã®ãŸã‚ã ã‘ã«ã‚µãƒ¼ãƒã®å°æ•°ã‚’ãƒ‹ãƒ§ã‚ãƒ‹ãƒ§ã‚å¢—ã‚„ã—ã¦ã„ã‚‹è²´å…„ã€ãã†ã§ãªãã¨ã‚‚ SSL ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã§ãŠå˜†ãã®è²´å…„ã®ãŸã‚ã«ã€ã„ã‚ã„ã‚ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã‚ˆã€‚ SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆè¨å®šã‚’é•·ãã—ã‚ˆã† SSL ã®è² è·ã®ã»ã¨ã‚“ã©ã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®ç”Ÿæˆã«ã‚ˆã‚‹ã‚‚ã®ãªã®ã§ã€å½“ç„¶ã®ã‚ˆã†ã«ã‚µãƒ¼ãƒå´ã® SSL ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æœ‰åŠ¹ã«ã—ã¦ãŠã‚‰ã‚Œã‚‹ã¨æ€ã„ã¾ã™ãŒã€ãã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã®è¨å®šãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã¾ã¾ã¨ã„ã†æ–¹ãŒå¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ ãŸã¨ãˆã°Apacheã§ã—ãŸã‚‰ã€è¨å®šã‚µãƒ³ãƒ—ãƒ«ã®ã¾ã¾ SSLSessionCache shm:/usr/local/apache/logs/ssl_gcache_data(512000) SSLSessionCacheTimeout 300 ã¨ã—ã¦ã„ã‚‹æ–¹ãŒå¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ å„ã‚µãƒ¼ãƒã®ãƒ‡ãƒ•ã‚©
shodai 2018/11/18
ssl

nginx
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®Webã‚µãƒ¼ãƒã§SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å…±æœ‰ã—ã¦SSLå‡¦ç†ã‚’é«˜é€ŸåŒ–(Apache + mod_ssl + mod_socache_memcache) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HTTPS(SSLåˆ©ç”¨)ã‚µã‚¤ãƒˆãŒSEOçš„ã«å„ªé‡ã•ã‚Œã‚‹ãƒˆãƒ¬ãƒ³ãƒ‰ã§ã€ä¸–é–“çš„ã«ã‚‚HTTPSæŽ¥ç¶šã§ã‚µã‚¤ãƒˆé‹ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚ ã“ã‚ŒãŒã€ãƒã‚¤ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚µã‚¤ãƒˆã«ãªã£ã¦ãã‚‹ã¨ã€ã“ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã§SSLå‡¦ç†ã•ã›ã‚‹ã“ã¨ãŒè² è·çš„ã«ã‚‚ãªã‹ãªã‹è¾›ã„ã®ã§ã™ã€‚ ã§ã€Apache 2.3ä»¥é™ã§ã¯ã€Shared Object Cache Providerã¨ã—ã¦ã€memcachedãŒé¸æŠžã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ä»•çµ„ã¿ã‚’åˆ©ç”¨ã—ã¦ã€Apacheã¨memcachedã‚’ä¸¦ã¹ã‚‹ã“ã¨ã§ã€å„ã‚µãƒ¼ãƒã§ãƒ¦ãƒ¼ã‚¶ã®SSL Session Cacheã‚’å…±æœ‰ã—ãªãŒã‚‰HTTPSãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’è² è·åˆ†æ•£ã§ãã‚‹æ§‹æˆã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ Webã‚µãƒ¼ãƒã§SSLã‚ªãƒ•ãƒãƒ¼ãƒ‰ å¸¸æ™‚SSLã‚’åˆ©ç”¨ã—ãŸWebã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã«ã€SSLã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã„ã£ãŸã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹è£½å“ã ã¨ã‹ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã¨Apacheã‚„Nginxã®SSLãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã†
shodai 2018/11/18
ssl

nginx
ãƒªãƒ³ã‚¯
Nginxã§æµ·å¤–ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã™ã‚‹ | ç¨²è‘‰ã‚µãƒ¼ãƒãƒ¼ãƒ‡ã‚¶ã‚¤ãƒ³
åŒ—æµ·é“æœå¹Œå¸‚åœ¨ä½ã€ã‚µãƒ¼ãƒãƒ¼å°‚é–€ã®ãƒ•ãƒªãƒ¼ãƒ©ãƒ³ã‚¹ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã§ã™ã€‚ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã—ã¦Webã‚µã‚¤ãƒˆã€ITã‚·ã‚¹ãƒ†ãƒ ã®ã‚µãƒ¼ãƒãƒ¼æ§‹æˆè¨è¨ˆã¨ã‚µãƒ¼ãƒãƒ¼æ§‹ç¯‰ã‚’è¡Œã„ã¾ã™ã€‚ ï¼ˆ2014.7.17è¿½è¨˜ï¼‰ Apacheã®å ´åˆã®æ‹’å¦ãƒ«ãƒ¼ãƒ«ãŒé–“é•ã£ã¦ã„ãŸã®ã§ä¿®æ£ã—ã¾ã—ãŸã€‚ ã“ã®Webã‚µã‚¤ãƒˆã¯ã‚¢ã‚¯ã‚»ã‚¹è§£æžãƒ„ãƒ¼ãƒ«AWStatsã§ã‚¢ã‚¯ã‚»ã‚¹è§£æžã‚’è¡Œã£ã¦ã„ã¦ã€ã¨ããŠã‚Šã‚¢ã‚¯ã‚»ã‚¹æƒ…å ±ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ã„ã‚‹ã®ã§ã™ãŒã€å…ˆé€±åŠã°ã®6æœˆ11æ—¥ã€12æ—¥ã¯ã€PVãŒãµã ã‚“ã®4å€ã‹ã‚‰8å€ç¨‹åº¦ã¾ã§å¢—ãˆã¦ã„ã¾ã—ãŸã€‚ èª¿ã¹ã¦ã¿ãŸã¨ã“ã‚ã€æµ·å¤–ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒæ¥µç«¯ã«å¢—ãˆãŸã‚ˆã†ã§ã™ã€‚ ã©ã®ã‚¢ã‚¯ã‚»ã‚¹å…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚‚ã€PVã¨ãƒ’ãƒƒãƒˆæ•°ã®æ•°å€¤ãŒåŒã˜ã“ã¨ã‹ã‚‰ã€æ„å›³ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ãŒä½•ã‚‰ã‹ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã«ã‚ˆã‚‹æ©Ÿæ¢°çš„ãªã‚¢ã‚¯ã‚»ã‚¹ã ã¨æ€ã„ã¾ã™ã€‚ ãã‚Œãªã®ã«ã€User AgentãŒä¸€èˆ¬çš„ãªWebãƒ–ãƒ©ã‚¦ã‚¶ã¨åŒã˜ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã®ã§ã€AWStatsã§ã¯ã€Œãƒãƒœãƒƒãƒˆ/ã‚¹ãƒ‘ã‚¤ãƒ€ãƒ¼ã€ã¨ã¯ã¿ãª
shodai 2018/08/22
nginx
ãƒªãƒ³ã‚¯
nginxã§IPã‚¢ãƒ‰ãƒ¬ã‚¹æŒ‡å®šã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¼¾ã - YoshinoriN's Memento
nginxã§IPã‚¢ãƒ‰ãƒ¬ã‚¹æŒ‡å®šã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¼¾ãTue, 05 Jun 2018 12:27:51 GMTnginx Webã‚µãƒ¼ãƒãƒ¼ ã¤ã„ã•ã£ãã¾ã§ã“ã®ã‚µã‚¤ãƒˆã¯IPã‚¢ãƒ‰ãƒ¬ã‚¹æŒ‡å®šã§ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¦ã—ã¾ã£ã¦ã„ãŸã®ã§ã™ãŒã€å¼¾ãã‚ˆã†ã«ã—ã¾ã—ãŸã€‚ ã‚„ã‚Šæ–¹ ã¯ã˜ã‚ã¯ã“ã®æŠ•ç¨¿ã‚’å‚è€ƒã«ã—ã¦ã„ãŸã®ã§ã™ãŒã€ãã®ä¸ã§è¨€åŠã•ã‚Œã¦ã„ãŸå…¬å¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®ã»ã†ãŒã¡ã‚ƒã‚“ã¨ã—ã¦ãã†ã ã£ãŸã®ã§ã€æœ€çµ‚çš„ã«å…¬å¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ã‚‚ã¨ã«è¨å®šã—ã¾ã—ãŸã€‚ è¨˜è¿°ã®ãªã„ãƒ‰ãƒ¡ã‚¤ãƒ³ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’åˆ¤å®šã™ã‚‹ nginxã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã«è¨˜è¼‰ã—ã¦ã„ãªã„server_nameã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å…¨ã¦å¼¾ã‘ã°ã‚ˆã„ã®ã§ã™ãŒã€ã©ã†ã™ã‚Œã°ã‚ˆã„ã®ã§ã—ã‚‡ã†ã‹ã€‚ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã¯ä¸‹è¨˜ã®ã‚ˆã†ã«æ›¸ã„ã¦ã‚ã‚Šã¾ã™ã€‚ In catch-all server examples the strange name â€œ_â€ can be seen. There is nothing special a
shodai 2018/08/22
nginx
ãƒªãƒ³ã‚¯
ELBã‚’ä½¿ã£ã¦nginxã§ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚’ã—ãŸã„ã¨ãã«æ°—ã‚’ã¤ã‘ã‚‹ã“ã¨ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
shodai 2018/08/22
nginx
ãƒªãƒ³ã‚¯
ELBé…ä¸‹ã®nginxã§æ£è¦è¡¨ç¾ã‚’ä½¿ã£ãŸIPåˆ¶é™ã‚’ã™ã‚‹ - Qiita
ã‚¿ã‚¤ãƒˆãƒ«ã®é€šã‚Šã€ELBé…ä¸‹ã®nginxã§æ£è¦è¡¨ç¾ã‚’ä½¿ã£ãŸIPåˆ¶é™ã‚’ã™ã‚‹å¿…è¦ãŒã‚ã£ãŸã®ã§ãƒ¡ãƒ¢ã€‚ ç’°å¢ƒ Amazon Linux nginx1.8.0 ELBã«æµã‚ŒãŸãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãŒEC2ã«æµã‚Œã‚‹ã‚ˆã†ã«è¨å®š å‰æçŸ¥è˜ ELBã‚’çµŒç”±ã™ã‚‹ã¨ã‚¢ã‚¯ã‚»ã‚¹å…ƒã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ˜ãƒƒãƒ€ã®X-Forwarded-Forã«è¨˜è¼‰ã•ã‚Œã‚‹ã€‚nginxã§ã¯çµ„ã¿è¾¼ã¿å¤‰æ•°ã¨ã—ã¦$http_x_forwarded_forã¨ã—ã¦å–å¾—å¯èƒ½ æ£è¦è¡¨ç¾ã§ãªã„IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®è¨±å¯ã¯allow,denyãƒ‡ã‚£ãƒ¬ãƒ†ã‚£ãƒ–ã‚’è¨å®šã™ã‚‹ã“ã¨ã§å¯èƒ½ï¼ˆãã‚‚ãã‚‚SecurityGroupã§åˆ¶é™ã¯ã§ãã‚‹ï¼‰ nginxã§ã¯setãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ã§è‡ªåˆ†ã§å¤‰æ•°ã‚’è¨å®šã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ ifãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ä½¿ã†ã“ã¨ã§æ¡ä»¶åˆ†å²ãŒå‡ºæ¥ã‚‹ã€‚ãŸã ã—ã€å…¬å¼ã‚µã‚¤ãƒˆã§ã‚‚åˆ©ç”¨æ™‚ã®æ³¨æ„ãŒæ›¸ã„ã¦ã‚ã‚‹ã®ã§ä¸€åº¦åˆ©ç”¨ã™ã‚‹å ´åˆã«ã¯è¦‹ã¦ãŠã„ãŸã»ã†ãŒè‰¯ã„ï¼ˆæ¬¡é …ã§è¨˜è¼‰ï¼‰ ifãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£
shodai 2018/08/22
IPåˆ¶é™

nginx
ãƒªãƒ³ã‚¯
Nginxã§å›½å¤–ã‹ã‚‰ã®WEBã‚¢ã‚¯ã‚»ã‚¹ã‚’é®æ– - Qiita
äº‹ã®ç™ºç«¯ ã‚µãƒ¼ãƒãŒè½ã¡ã¦ãŸã®ã§ä½•æ°—ã«å†èµ·å‹•ã•ã›ãŸã‚“ã§ã™ãŒã€ãã®æ•°æ™‚é–“å¾Œã¾ãŸè½ã¡ã‚‹ãƒ»ãƒ»ãƒ»ã€‚ ä½•æ•…ãƒ¼ï¼Ÿã¨æ€ã£ã¦åŽŸå› ã‚’èª¿ã¹ã¦ã¿ãŸã¨ã“ã‚ã€å›½å¤–ã‹ã‚‰ã®ã‚¹ãƒ‘ãƒ ãŒãƒ’ãƒ‰ãã¦è½ã¡ã¦ãŸã‚ˆã†ã§ã™ã€‚ ä»¥å‰ã¡ã‚‡ã‚ã£ã¨ã‚¹ãƒ‘ãƒ å¯¾ç–ã—ã¦ãŸã®ã§å‰²ã¨æ”¾ç½®ã—ã¦ãŸã‚“ã§ã™ãŒç”˜ã‹ã£ãŸã§ã™ã€‚ ä»Šå›žæ›´ã«ã‚¹ãƒ‘ãƒ å¯¾ç–ã‚’è‰²ã€…è©¦ã—ã¦ã¿ãŸã‚“ã§ã™ãŒã€ãƒœãƒƒãƒˆã®æŠ•ç¨¿ãŒã‚¦ã‚¶ã„ã¨ã‹ãã†ã„ã†å•é¡Œã˜ã‚ƒãªã„ã‚“ã§ã™ãƒ»ãƒ»ãƒ»ã€ã‚¢ã‚¿ãƒƒã‚¯ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒå¤šã™ãŽã¦ã‚µãƒ¼ãƒè½ã¡ã‚‹ã®ãŒå•é¡Œã€‚ å¯¾ç–ã®æ–¹é‡ WPã®ã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ã‚‹ã®ãŒè‰¯ããªã„ã‚ˆã†ã§ã‹ãªã‚Šæ”»æ’ƒã•ã‚Œã¾ã™ã€‚ ç›¸å½“é ã«æ¥ãŸã®ã§ã€ãƒ–ãƒåˆ‡ã‚Œãƒ¢ãƒ¼ãƒ‰ã§æµ·å¤–ã‹ã‚‰ã®WEBã‚¢ã‚¯ã‚»ã‚¹ã‚’å…¨ã¦é®æ–ã—ã¦ã‚„ã‚Šã¾ã—ã‚‡ã†ï¼ï½— ä»Šå›žã®å¯¾ç–ã¯Nginxå´ã§å›½å†…IPã®ã‚¢ã‚¯ã‚»ã‚¹ã®ã¿ã‚’è¨±å¯ã—ã¦ä»–ã‚’å…¨ã¦åˆ‡ã‚Šæ¨ã¦ã‚‹ã¨ã„ã†å¼·å¼•ãªæ–¹æ³•ã«ãªã‚Šã¾ã™ã€‚ å¯¾å¿œå†…å®¹ ã¾ãšã€IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒªã‚¹ãƒˆã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¾ã™ã€‚ ã“ã®ã‚µã‚¤ãƒˆã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãã¾ã™ãã€ä»Šå›žã¯ã€Œcidr.txt.
shodai 2018/08/22
nginx
ãƒªãƒ³ã‚¯
Nginxã§ã®ã‚¢ã‚¯ã‚»ã‚¹æµé‡åˆ¶å¾¡ã‚’æ¤œè¨¼ã—ã¦ã¿ãŸ - Qiita
çš†ã•ã‚“ã“ã‚“ã«ã¡ã¯ Webã‚µãƒ¼ãƒ“ã‚¹ã‚’é‹ç”¨ã—ã¦ã„ã‚‹ã¨ã€æ™‚ã«å¤§é‡ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒé™ã£ã¦ãã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ã“ã‚Œã®ç†ç”±ã¯ã€æ”»æ’ƒç›®çš„ã ã£ãŸã‚Šä½•ã‚‰ã‹ã®ãƒˆãƒ¬ãƒ³ãƒ‰ã ã£ãŸã‚Šã—ã¾ã™ãŒã€ãªã‚“ã«ã›ã‚ˆå¤§é‡ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒç™ºç”Ÿã—ãŸå ´åˆã€Webã‚µãƒ¼ãƒã«ã¯å¤§ããªè² è·ãŒç™ºç”Ÿã—ã¾ã™ã€‚ ã‚¯ãƒ©ã‚¦ãƒ‰ç’°å¢ƒã§ã‚ã‚Œã°ã€ã¾ã‚ã€ã‚ªãƒ¼ãƒˆã‚¹ã‚±ãƒ¼ãƒ«ã§å¯¾å¿œã™ã‚‹ã¨ã„ã†ã®ãŒã‚ˆãè¨€ã‚ã‚Œã‚‹ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã§ã¯ã‚ã‚Šã¾ã™ãŒã€å¿…ãšã—ã‚‚ã‚ªãƒ¼ãƒˆã‚¹ã‚±ãƒ¼ãƒ«ãŒã§ãã‚‹ç’°å¢ƒã§ã¯ãªã‹ã£ãŸã‚Šã€ã‚¹ã‚±ãƒ¼ãƒ«ã®æ™‚é–“ãŒã‹ã‹ã£ãŸã‚Šã€ã‚¹ã‚±ãƒ¼ãƒ«ã—ã¾ãã£ã¦è²»ç”¨ãŒã‹ã‹ã£ãŸã‚Šã—ã¾ã™ã€‚ DDoSã®ã‚ˆã†ã«é›†ä¸æ”»æ’ƒãŒæ¥ãŸå ´åˆã¯ã€ã‚¹ã‚±ãƒ¼ãƒªãƒ³ã‚°ã§ã¯è³„ãˆãšã€ã‚µãƒ¼ãƒãƒ€ã‚¦ãƒ³ã¾ã§ã‚ã‚Šã¾ã™ã€‚ ãã“ã§ã€Nginxã®ngx_http_limit_req_module ã¨ã„ã†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã†ã“ã¨ã§ã€ã‚¢ã‚¯ã‚»ã‚¹æµé‡ã‚’è¦åˆ¶ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ãªã®ã§ã€ã“ã„ã¤ã®ä½¿ã„æ–¹ã‚’è¦‹ã¦ã„ãã¾ã—ã‚‡ã†ã€‚ TL;DR Nginxã§rate limitã‚’è¨å®šã™ã‚‹ã¨ã€
shodai 2018/08/21
k8sã§ã‚‚ä½¿ãˆã‚‹ã‹ãªã

nginx
ãƒªãƒ³ã‚¯
ãƒ•ãƒªãƒ¼ã®Linuxãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼3ã¤ã‚’æ¯”è¼ƒã™ã‚‹ (1/2)
é–¢é€£ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ Linux | ãƒ—ãƒã‚ã‚· | Apache | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µ | è² è·åˆ†æ•£ Nginxã®Webã‚µã‚¤ãƒˆã€Šã‚¯ãƒªãƒƒã‚¯ã§æ‹¡å¤§ã€‹ è¤‡æ•°å°ã®ã‚µãƒ¼ãƒã‚’é‹ç”¨ã—ã¦è†¨å¤§ãªè² è·ã‚’å‡¦ç†ã—ã¦ã„ã‚‹ãªã‚‰ã€ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ãŒå½¹ç«‹ã¤ã ã‚ã†ã€‚ãƒ™ãƒ³ãƒ€ãƒ¼ã¯ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã¨ã—ã¦ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã‚’æä¾›ã—ã¦ã„ã‚‹ãŒã€ç„¡æ–™ã§åˆ©ç”¨ã§ãã‚‹Linuxã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚‚ã‚ã‚‹ã€‚ ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¯ã€é«˜ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’å‡¦ç†ã™ã‚‹ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã®å¿œç”æ™‚é–“ã‚’å‘ä¸Šã™ã‚‹ã€‚ä¼æ¥ã¯ä¸€èˆ¬çš„ã«ã€è¤‡æ•°ã®ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã§å‹•ä½œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã¨ã—ã¦ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã‚’ä½¿ç”¨ã™ã‚‹ã€‚ç†è«–ä¸Šã€è² è·åˆ†æ•£ã¯ã‚ã‚‰ã‚†ã‚‹ç¨®é¡žã®ã‚µãƒ¼ãƒ“ã‚¹ã§å¯èƒ½ã ã€‚ã ãŒã€å®Ÿéš›ã«è² è·åˆ†æ•£ã®æ©æµã‚’å—ã‘ã‚‰ã‚Œã‚‹ã®ã¯ã€HTTPã‚µãƒ¼ãƒã¨HTTPSã‚µãƒ¼ãƒã§è¡Œã£ãŸå‡¦ç†ã®å ´åˆã ã€‚ ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¯å˜ä¸€éšœå®³ç‚¹ã‚’ã‚‚ãŸã‚‰ã™ã€‚ã ãŒã€é«˜å¯ç”¨æ€§ï¼ˆHAï¼‰æ§‹æˆã§ãƒ
shodai 2018/08/08
nginx
ãƒªãƒ³ã‚¯
NGINX,NGINX Plusã‚’ä½¿ã£ãŸæµé‡åˆ¶å¾¡ (from Official Blog) - ãªã‚‹ã¹ãã‚·ãƒ³ãƒ—ãƒ«ã«
æœ¬è¨˜äº‹ã¯ã€ä¸‹è¨˜ãƒ–ãƒã‚°è¨˜äº‹ã‚’ç¿»è¨³ã—ãŸã‚‚ã®ã§ã™ã€‚ www.nginx.com å®Ÿæ¡ˆä»¶ã§åŒæ§˜ã®æ©Ÿèƒ½ã‚’å®Ÿè£…ã—ã¦ãŠã‚Šã€ãœã²ä¾¿åˆ©ã•ã‚’åºƒã‚ãŸãã€ åŸ·ç†è€…ã®æ–¹ã«è¨±å¯ã‚’ã¨ã£ã¦ç¿»è¨³ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ ã‚‚ã—ç¿»è¨³èª¤ã‚Šãªã©ã‚ã‚Šã¾ã—ãŸã‚‰ã€ä¸‹è¨˜ã¾ã§ã”é€£çµ¡ã„ãŸã ã‘ã‚Œã°å¹¸ã„ã§ã™ã€‚ twitter.com Queueing with nodelay,White Listingã¯å¤§å¥½ããªä½¿ã„æ–¹ãªã®ã§ã€ ãœã²ã”è¦§ã„ãŸã ããŸã„ã¨æ€ã„ã¾ã™ã€‚ (nodelayã¯ã€ç¿»è¨³èƒ½åŠ›ã®å•é¡Œã§è¡¨ç¾ãŒã‹ãªã‚Šã‚ã‹ã‚Šã«ãã„ã®ã§ã€åˆ¥è¨˜äº‹ã§æ›¸ã“ã†ã¨æ€ã„ã¾ã™ã€‚ã€‚ã€‚) ä»¥ä¸‹æœ¬æ–‡ã§ã™ã€‚ How NGINX Rate Limiting Works Configuring Basic Rate Limiting Handling bursts Queueing with No Delay Advanced Configuration Examples WhileL
shodai 2018/03/30
nginx
ãƒªãƒ³ã‚¯
[Kubernetes] ã‚ªãƒ³ãƒ—ãƒ¬ã§ã‚‚ GKE Like ãª Ingress ã‚’ä½¿ã†ãŸã‚ã« è‡ªä½œ Ingress Controller ã‚’å®Ÿè£…ã—ã¦ã¿ãŸ | AI tech studio
2017.12.1 [Kubernetes] ã‚ªãƒ³ãƒ—ãƒ¬ã§ã‚‚ GKE Like ãª Ingress ã‚’ä½¿ã†ãŸã‚ã« è‡ªä½œ Ingress Controller ã‚’å®Ÿè£…ã—ã¦ã¿ãŸ ã“ã‚“ã«ã¡ã¯ã€‚ CIA ã®é’å±± çœŸä¹Ÿã§ã™ã€‚ ã“ã®è¨˜äº‹ã¯ Kubernetes Advent Calendar ï¼‘æ—¥ç›®ã®è¨˜äº‹ã«ãªã‚Šã¾ã™ã€‚ ã¡ãªã¿ã« CyberAgent Advent Calndar ï¼‘æ—¥ç›®ã®è¨˜äº‹ã‚‚ã€ŒGKE äº’æ›ã®ã‚ªãƒ³ãƒ—ãƒ¬ã‚³ãƒ³ãƒ†ãƒŠåŸºç›¤ AKE (Adtech Container Engine) èª•ç”Ÿç§˜è©±ã¨ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£å®Œå…¨å…¬é–‹ï¼ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§æ›¸ã„ã¦ãŠã‚Šã€ã¾ã‚‹ã§å¤ä¼‘ã¿æœ€çµ‚æ—¥ã®æ°—åˆ†ã§ã™ã€‚ å¼Šç¤¾ã®ã‚ªãƒ³ãƒ—ãƒ¬ã‚³ãƒ³ãƒ†ãƒŠåŸºç›¤ AKE ã®è©±ã‚’è©³ç´°ã«ã¾ã¨ã‚ã¦ã‚ã‚Šã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‚‚æ˜¯éžãŠèªã¿ä¸‹ã•ã„ã€‚ ä»Šå›žã¯ã€SSL çµ‚ç«¯ã‚„ L7 ãƒ‘ã‚¹ãƒ™ãƒ¼ã‚¹ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°åŠã³ L7 ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚·ãƒ³ã‚°ã‚’è¡Œã£ã¦ãã‚Œã‚‹ Ingress ãƒªã‚½ãƒ¼ã‚¹ã®è©±ã‚’
shodai 2018/03/25
k8s

Ingress

nginx
ãƒªãƒ³ã‚¯
AKSã®NGINX Ingress Controllerã®ãƒ‡ãƒ—ãƒã‚¤ã§æ‚©ã‚“ã ã‚‰
æ¥½ã—ãŸã„ãªã‚‰helmã§å…¥ã‚Œã¾ã—ã‚‡ã† AKSã«é™ã£ãŸè©±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€Kubernetesã«ã¶ã‚‰ä¸‹ã’ã‚‹ã‚¢ãƒ—ãƒªã®æ•°ãŒå¤šããªã£ã¦ãã‚‹ã¨ã€URLãƒžãƒƒãƒ”ãƒ³ã‚°ã‚„TLSçµ‚ç«¯ãŒã—ãŸããªã‚Šã¾ã™ã€‚æ–¹æ³•ã¯è‰²ã€…ã‚ã‚‹ã®ã§ã™ãŒã€ã‚·ãƒ³ãƒ—ãƒ«ãªé¸æŠžè‚¢ã¯NGINX Ingress Controllerã§ã—ã‚‡ã†ã€‚ ã•ã¦ã€ãã®NGINX Ingress Controllerã®ãƒ‡ãƒ—ãƒã‚¤ã¯GitHubã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆé€šã‚Šã«æ·¡ã€…ã¨ã‚„ã‚Œã°ã„ã„ã®ã§ã™ãŒã€helmã‚’ä½¿ãˆã°ã‚³ãƒžãƒ³ãƒ‰ä¸€ç™ºã§ã™ã€‚ãã®ã‚ˆã†ã«ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã‚‚æ›¸ã„ã¦ã‚ã‚‹ã®ã§ã™ãŒã€æœ€å¾Œã®æ–¹ã§å‡ºã¦ãã‚‹ã®ã§ã€Œãã‚Œæ—©ãè¨€ã£ã¦ã‚ˆã€ãªæ„Ÿã˜ã§ã™ã€‚ ã›ã£ã‹ããªã®ã§ã€Azure(AKS)ã§ã®ä½¿ã„æ–¹ã‚’ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚é–‹ç™ºãƒšãƒ¼ã‚¹ã‚„ã‚¨ã‚³ã‚·ã‚¹ãƒ†ãƒ ã®å¤‰åŒ–ãŒé€Ÿã„ã®ã§è¦æ³¨æ„ã€‚ã“ã®è¨˜äº‹ã¯2018/2/10ã«æ›¸ã„ã¦ã„ã¾ã™ã€‚ ä½¿ã„æ–¹ AKSã‚¯ãƒ©ã‚¹ã‚¿ãƒ¼ã¨ã€Azure DNSä¸Šã«åˆ©ç”¨å¯èƒ½ãªã‚¾ãƒ¼ãƒ³ãŒã‚ã‚‹ã“ã¨ã‚’å‰æã«ã—ã¾ã™ã€‚ãªã„
shodai 2018/03/25
Ingress

nginx

k8s
ãƒªãƒ³ã‚¯
HTTP2 æ™‚ä»£ã®ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£è€ƒå¯Ÿ - Block Rockinâ€™ Codes
update è‰²ã€…ã¨ twitter ã§è°è«–ãŒèµ·ã“ã£ãŸã®ã§ã¾ã¨ã‚ã¦è²¼ã£ã¦ãŠãã¾ã™ã€‚ togetter.com ã¿ãªã•ã‚“ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ intro HTTP2 ã® RFC åŒ–ã‚‚ç›®å‰ã¨ã„ã†ã“ã¨ã§ã€ãã‚ãã‚å®Ÿéš›ã« HTTP2 ã‚’å°Žå…¥ã—ã¦ã„ãã«ã‚ãŸã£ã¦ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã®æ§‹æˆã«ã¤ã„ã¦ã‚‚ã€å…·ä½“çš„ã«ã©ã†å¤‰ã‚ã£ã¦ã„ãã‹ã¨ã„ã†ç‚¹ã‚’è€ƒãˆå§‹ã‚ã¦ã„ãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãã‚“ãªè©±ã‚’ @koichik ã•ã‚“ã¨ã—ã¦ã„ãŸã‚‰ã€è‰²ã€…ã¨è€ƒãˆãŒè†¨ã‚‰ã‚“ã ã®ã§ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ å‰æ ä»Šå›žã¯ã€ä¸è¦æ¨¡ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’æƒ³å®šã—ã€ç‰¹ã« HTTP2 ã®ã‚µãƒ¼ãƒãƒ—ãƒƒã‚·ãƒ¥ã‚’è¸ã¾ãˆãŸä¸Šã§ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ãªã©ã«ã€ã©ã†ã„ã†æ§‹æˆãŒè€ƒãˆã‚‰ã‚Œã‚‹ã‹ã‚’è€ƒãˆã¦ã„ãã¾ã™ã€‚ ã¾ãŸã€æœ¬ã‚¨ãƒ³ãƒˆãƒªå†…ã§ã¯ç‹¬è‡ªã«ä»¥ä¸‹ã®è¡¨è¨˜ã‚’æŽ¡ç”¨ã—ã¾ã™ã€‚ HTTP/1.1 = HTTP/1.1 (å¹³æ–‡) HTTP/2 = HTTP/2 (å¹³æ–‡) HTTPS/1.1 = HTTP/1.1 over
shodai 2018/03/18
nginx

http2
ãƒªãƒ³ã‚¯
Minikube ã§å¿«é©ã« Ingress ã‚’åˆ©ç”¨ã™ã‚‹ - Qiita
TL;DR minikube addons enable ingress ã§ Minikube ã§ç°¡å˜ã« Ingress ã‚’ä½¿ã„ã¯ã˜ã‚ã‚‹ã“ã¨ãŒã§ãã‚‹ ãƒãƒ¼ã‚«ãƒ«ã®ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã§ Ingress ã«è¨å®šã—ãŸãƒ›ã‚¹ãƒˆåã‚’åå‰è§£æ±ºã•ã›ã¦ã‚ˆã‚Šå¿«é©ã«åˆ©ç”¨ã™ã‚‹ Minikube æ¨™æº–ã® Ingress Controller ã®ä»£ã‚ã‚Šã« nghttpx-ingress-controller ã‚’ä½¿ã†ã®ã‚‚ç°¡å˜ã€ãã®ã¨ãã‚«ã‚¹ã‚¿ãƒ Cluster Add-on ã‚’ä½¿ã†ã¨ã‚ˆã‚Šå¿«é©ã«åˆ©ç”¨ã§ãã‚‹ ã¯ã˜ã‚ã« ãƒ—ãƒãƒ€ã‚¯ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦ Ingress ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãªã‚‰ãƒãƒ¼ã‚«ãƒ«ã® Minikube ã«ãŠã„ã¦ã‚‚ Ingress ã‚’åˆ©ç”¨ã—ã¦å‹•ä½œã‚’æ¤œè¨¼ã—ãŸã„ã€‚Minikube ã¯ã€ãƒãƒ¼ã‚«ãƒ«ã«ã‚·ãƒ³ã‚°ãƒ«ãƒŽãƒ¼ãƒ‰æ§‹æˆã® Kubernetes ã‚¯ãƒ©ã‚¹ã‚¿ã‚’ç°¡å˜ã«æ§‹ç¯‰ã§ãã‚‹ãƒ„ãƒ¼ãƒ«ã§ã‚ã‚‹ã€‚ Ingress ã‚’ä½¿ã†ã«ã¯ã€ä½œæˆã•ã‚Œã¦ã„ã‚‹ Ingress
shodai 2018/03/18
k8s

Ingress

nginx
ãƒªãƒ³ã‚¯
Kubernetesã®Nginx Ingress Controllerã‚’ä½¿ã£ã¦ã¿ãŸã‚‰ã‚ã£ã¡ã‚ƒä¾¿åˆ©ã ã£ãŸè©± | Shohhei1126's Blog
Kubernetesã®serviceã§ type: LoadBalancer ã¨ã™ã‚‹ã¨å¤–éƒ¨ã«å…¬é–‹ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã‚‹ã€‚ AWSã®å ´åˆè‡ªå‹•ã§ELBãŒä½œã‚‰ã‚Œã‚‹ï¼ˆãŸã ã—Route53ã¾ã§ã¯è¨å®šã§ããªã•ãã†ï¼‰ã€‚ ã¡ã‚‡ã£ã¨ãšã‚Œã¦ã‚‹ã‘ã©EXTERNAL-IPã«ELBã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒå…¥ã£ã¦ã‚‹ã€‚ $ kubectl version Client Version: version.Info{...GitVersion:"v1.7.2"...} Server Version: version.Info{...GitVersion:"v1.7.2"...} $ kubectl -n kube-system get svc -l k8s-app=kubernetes-dashboard -o wide NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR kubernetes-
shodai 2018/03/18
k8s

nginx

Ingress
ãƒªãƒ³ã‚¯
Introducing gRPC Support with NGINX 1.13.10 â€“ NGINX Community Blog
Today, weâ€™re excited to share the first native support for gRPC traffic, released in NGINX Open SourceÂ 1.13.10. NGINX Plus Release 15 includes gRPC support as well as the support for HTTP/2 server push introduced in NGINXÂ 1.13.9. NGINX can already proxy gRPC TCP connections. With this new capability, you can terminate, inspect, and route gRPC method calls. You can use it to: Publish a gRPC service
shodai 2018/03/18
grpc

nginx

k8s
ãƒªãƒ³ã‚¯
1