[B! nginx] hasegawayosukeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hasegawayosuke id:hasegawayosuke

nginxã«é–¢ã™ã‚‹hasegawayosukeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Let's Encryptã¨nginxã§HTTP/2ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹ - pixiv inside [archive]
ã“ã®è¨˜äº‹ã¯ ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ Advent Calendar 2015 10æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ qiita.com ã“ã‚“ã«ã¡ã¯ã€‚Androidã‚¢ãƒ—ãƒªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã„ã¨ãŠã¡ã‚ƒã‚“ã§ã™ã€‚ é«˜æ ¡ç”Ÿã®é ƒã‹ã‚‰ã‚¢ãƒ«ãƒã‚¤ãƒˆã¨ã—ã¦ãƒ”ã‚¯ã‚·ãƒ–ã«å…¥ç¤¾ã—ã¦ã‹ã‚‰4å¹´ç›®ã«ãªã‚Šã¾ã—ãŸã€‚æ˜¨å¹´ã¯è‹¥æ‰‹ã‚¢ãƒ«ãƒã‚¤ãƒˆã¨åä¹—ã£ã¦ã„ã¾ã—ãŸãŒã€æ°—ã¥ã„ãŸã‚‰ã‚‚ã†å¤§å¦ç”Ÿã§ã™ã€‚æœ€è¿‘ã¯pixivãƒžãƒ³ã‚¬ã‚¢ãƒ—ãƒªã®é–‹ç™ºã‚’ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žã¯Androidã‚¢ãƒ—ãƒªé–‹ç™ºã®è©±ã§ã¯ãªãã€å€‹äººçš„ã«æœ€ã‚‚ã‚¢ãƒ„ã„ã¨æ„Ÿã˜ã¦ã„ã‚‹Let's Encryptã‚’ä½¿ã£ã¦nginxã§HTTP/2ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹è©±ã‚’ã—ã¾ã™ã€‚ Letâ€™s Encryptã‚’ä½¿ãŠã† Let's Encryptã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ç„¡æ–™ã§èªè¨¼ã•ã‚ŒãŸSSLè¨¼æ˜Žæ›¸ã‚’ç°¡å˜ã«ç™ºè¡Œã™ã‚‹ã“ã¨ãŒã§ãã€ã“ã“æœ€è¿‘è©±é¡Œã‚’é›†ã‚ã¦ã„ã¾ã™ã€‚ä»Šæœˆã€Let's Encryptã¯ã‚ˆã†ã‚„ãPublic Betaã«ãªã‚Šã¾ã—ãŸã€‚ãã“ã§ã€ã¾ã•ã«ä»ŠãŒæ—¬ã¨ã‚‚ã„ãˆã‚‹Le
hasegawayosuke 2015/12/11
let's encrypt

https

http2

nginx
ãƒªãƒ³ã‚¯
nginx ã®è¨å®šã‚’ãƒ¬ãƒ“ãƒ¥ãƒ¼ã™ã‚‹ã¨ãã®è¦³ç‚¹ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - Cybozu Inside Out | ã‚µã‚¤ãƒœã‚¦ã‚ºã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€‚ ã‚¤ãƒ³ãƒ•ãƒ©ãƒãƒ¼ãƒ ã®é‡Žå³¶ï¼ˆ@nojimaï¼‰ã§ã™ã€‚ ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã« nginx ã®è¨å®šã«ã¤ã„ã¦æ°—ã‚’ã¤ã‘ã‚‹ã¹ãç‚¹ã‚’å…±æœ‰ã™ã‚‹ãŸã‚ã«ã€ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ã‚’æ›¸ãã¾ã—ãŸã€‚ ã›ã£ã‹ããªã®ã§ã“ã“ã§å…¬é–‹ã—ã¾ã™ã€‚ ã»ã¨ã‚“ã©ã®é …ç›®ã¯è‡ªåˆ†ã‚„ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã®å®Ÿä½“é¨“ã«åŸºã„ã¦ã„ã¾ã™ã€‚ ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ server server_name ãŒä»–ã®ã‚„ã¤ã¨è¢«ã£ã¦ã„ãªã„ã‹ã€‚ listen ã™ã‚‹ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒåŒã˜å ´åˆã€server_name ã§åŒºåˆ¥ã§ããªã„ã¨ã„ã‘ãªã„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€SNI ã‚’ã‚µãƒãƒ¼ãƒˆã—ãªã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã¯ TLS ç”¨ã®è¨å®šãŒ default_server ã®ã‚‚ã®ãŒä½¿ã‚ã‚Œã‚‹ç‚¹ã«ã‚‚æ³¨æ„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€listen ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã« ssl ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’æ›¸ã„ã¦ã„ã‚‹ã‹ã€‚ location location ã®ãƒžãƒƒãƒã®é †ç•ªã«æ³¨æ„ æ£è¦è¡¨ç¾ã® location ã¯å‰æ–¹ä¸€è‡´ã® location ã‚ˆã‚Š
hasegawayosuke 2015/11/20
nginx
ãƒªãƒ³ã‚¯
æˆ‘ã€…ã¯ã©ã®ã‚ˆã†ã«ã—ã¦å®‰å…¨ãªHTTPSé€šä¿¡ã‚’æä¾›ã™ã‚Œã°è‰¯ã„ã‹ - Qiita
Modern Ciphersuite: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES1
hasegawayosuke 2014/05/21
nginx

ssl
ãƒªãƒ³ã‚¯
SPDYå¯¾å¿œã™ã‚‹ãŸã‚ã«è€ƒãˆã¦ã‚‹ã“ã¨ - ASnoKaze blog
æ¦‚è¦ è‹¥è€…ã®é–“ã§ã‚‚ã€SPDYã«å¯¾å¿œã™ã‚‹ãŸã‚ã®ãƒŽã‚¦ãƒã‚¦ãŒå…±æœ‰ã•ã‚Œã¦ã„ãªã„ã“ã¨ã¯æœ‰åã§ã‚ã‚‹ã€‚ ãã“ã§ã€ä¸è¦æ¨¡ã‚µã‚¤ãƒˆã§SSLåŒ–ã€SPDYå¯¾å¿œã¨ã„ã†è¦³ç‚¹ã§å€‹äººçš„ã«è€ƒãˆã¦ã„ã‚‹ã“ã¨ã‚’æ›¸ãå‡ºã—ã¦ã¿ã‚‹ã€‚ HTTP2ã¯æš—å·åŒ–ã®è°è«–ã‚„ã€ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã€ãƒ˜ãƒƒãƒ€åœ§ç¸®ãªã©ç´°éƒ¨ãŒé•ã†ãŸã‚åˆ¥é€”è€ƒæ…®ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ãŒã€ä»Šå›žã®è©±ã‚‚æ¦‚ãé©å¿œã§ãã‚‹ã ã‚ã†ã€‚ ä»Šå›žä¸»ã«è€ƒãˆã‚‹æ§‹æˆã¨ã—ã¦ã¯ã€ä»¥ä¸‹ã®æ§˜ã«å‰æ®µã«ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚’ç½®ãæ§‹æˆã§ã‚ã‚‹ã€‚ å¹¾ã¤ã‹SPDYå¯¾å¿œã—ã¦ã„ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒã‚ã‚‹ãŒã€ç¾çŠ¶NGINXãŒç„¡é›£ã ã¨è€ƒãˆã¦ã„ã‚‹ã®ã§ã€NGINXå‰æã§è©±ã‚’é€²ã‚ã‚‹ã€‚ ï¼ˆSPDYå¯¾å¿œã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µè£½å“ã®å°Žå…¥ã‚‚å‡ºæ¥ã‚‹ã ã‚ã†ãŒã€ä»Šå›žã¯è€ƒæ…®ã—ãªã„ï¼‰ SSLåŒ–ã¨SPDYå¯¾å¿œ SDPYã§ã¯SSLåŒ–ãŒå¿…é ˆã§ã‚ã‚‹ã€‚ã“ã‚Œã¯ã€SSLãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯æ™‚ã«HTTPSã¨SPDYã®ã©ã¡ã‚‰ã§é€šä¿¡ã‚’è¡Œã†ã‹ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã—ã¦ã„ã‚‹ãŸã‚ã§ã‚ã‚‹ï¼ˆTLSä¸Šã§ã®ãƒ—ãƒãƒˆã‚³ãƒ«ãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§
hasegawayosuke 2014/03/10
spdy

http2

nginx
ãƒªãƒ³ã‚¯
nginx(1.3.13)ã§WebSocketã‚’ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã—ã¦ã¿ã‚‹ - äººã¨æŠ€è¡“ã®ãƒžãƒƒã‚·ãƒ¥ã‚¢ãƒƒãƒ—
nginx(1.3.13)ã§WebSocketã®ãƒ—ãƒã‚ã‚·ã‚’è©¦ã—ã¦ã¿ã¾ã—ãŸ 2013/2/19ã«nginxãŒæ£å¼ã«WebSocketã«å¯¾å¿œã—ãŸã¨ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒã‚ã£ãŸã®ã§ã€è©¦ã—ã«ä½¿ã£ã¦ã¿ã¾ã—ãŸã€‚ ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãƒ»ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã“ã“ã‹ã‚‰nginx-1.3.13ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ãã¦ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ã‚ãˆã¦ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ $ wget http://nginx.org/download/nginx-1.3.13.tar.gz $ tar xvf nginx-1.3.13.tar.gz $ cd nginx-1.3.13 $ ./configure $ make $ sudo make install è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æ›¸ãæ›ãˆ æ¬¡ã«nginx.confã‚’æ›¸ãæ›ãˆã¾ã™ã€‚æ§‹æˆã¯ ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·: 192.168.0.8:80 ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒ: 192.168.0.2:3000
hasegawayosuke 2013/02/25
nginx

websocket
ãƒªãƒ³ã‚¯
Projects/OWASP NAXSI Project - OWASP
Purpose: Naxsi (Nginx Anti Xss Sql Injection) is an open source, high performance, low rules maintenance, Web Application Firewall module for Nginx, the infamous web server and reverse-proxy.Its goal is to help people securing their web applications against attacks like SQL Injections, Cross Site Scripting, Cross Site Request Forgery, Local & Remote file inclusions.The difference with most WAF (We
hasegawayosuke 2011/09/27
Nginxç”¨ã®WAFãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚

nginx

waf

security
ãƒªãƒ³ã‚¯
1