nginx.conf ã§ç’°å¢ƒå¤‰æ•°ã‚’èªã¿è¾¼ã‚€ - Qiita
Docker container 㧠nginx ã‚’èµ·å‹•ã™ã‚‹ã¨ãã¨ã‹ã€nginx.conf ã§ä½•ã‹ã—らã®ãƒ‘ラメータを動的ã«è¨å®šã—ãŸã„ã“ã¨ãŒã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚server_name ã¨ã‹ã€‚ 今回㯠nginx.conf ã§ä½•ã¨ã‹ã—ã¦ç’°å¢ƒå¤‰æ•°ã‚’èªã¿è¾¼ã‚€æ‰‹æ³•ã‚’紹介ã—ã¾ã™ã€‚ TL;DR env ディレクティブ㨠ngx_http_perl_module (or lua_nginx_module) を使ã£ã¦ã€ç’°å¢ƒå¤‰æ•°ã‚’ nginx 変数ã«è¨å®šã™ã‚‹ã€‚ Example server_name を環境変数 SERVER_NAME ã‹ã‚‰å‹•çš„ã«èªã¿è¾¼ã‚€ä¾‹ã‚’示ã—ã¾ã™ã€‚ user nginx; worker_processes 4; env SERVER_NAME; http { perl_set $server_name_from_env 'sub { return $ENV{"SERVER_NAME"}; }'
nginxã§Server Name Indication(sni) - Qiita
TLS SNI support enabledã¨ãªã£ã¦ã‚Œã°OK。 ã“ã‚Œã§SSLã®ClientHelloã«ãã£ã¤ã„ã¦ããŸã‚µãƒ¼ãƒåを拾ã£ã¦ãれる。 nginxã®è¨å®š nginxã«ã‚¤ãƒ³ã‚¯ãƒ«ãƒ¼ãƒ‰ã™ã‚‹ã‚³ãƒ³ãƒ•ã‚£ã‚°ã®ä¾‹ã€æœ¬å®¶ãƒ‰ã‚ュメント案内通りã€æ™®é€šã«è¨å®šã—ã¦ã‚ˆã„。 ファイルを用æ„ã™ã‚‹ã®ãŒé¢å€’ãªã®ã§HttpLuaModuleã§ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¿”å´ã—ã¦ã„ã¾ã™ã€‚ server { listen 443; server_name cert1.example.com; root html; index index.html index.htm; ssl on; ssl_certificate certs/cert1.example.com.cert; ssl_certificate_key certs/cert1.example.com.key; location / { default_type 'text/pl
How to Implement Nginx Client Certificate Authentication - TORIPIYO DIARY
When we need to collaborate with outside companies to manage web site's content, admin tool site is sometimes used. So admin tool has to be exposed on the Internet network. In this case password authentication function is often used to restrict other client's access. But Nginx can also use client certificate authentication function. So I would like to introduce client certificate implementation in
我々ã¯ã©ã®ã‚ˆã†ã«ã—ã¦å®‰å…¨ãªHTTPS通信をæä¾›ã™ã‚Œã°è‰¯ã„ã‹ - Qiita
Modern Ciphersuite: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES1
Introducing gRPC Support with NGINX 1.13.10 – NGINX Community Blog
Today, we’re excited to share the first native support for gRPC traffic, released in NGINX Open Source 1.13.10. NGINX Plus Release 15 includes gRPC support as well as the support for HTTP/2 server push introduced in NGINX 1.13.9. NGINX can already proxy gRPC TCP connections. With this new capability, you can terminate, inspect, and route gRPC method calls. You can use it to: Publish a gRPC service
３ã¤ã®nginxã‚’ã†ã¾ã使ã„分ã‘よã†ã€œnginxã€OpenRestyã€Tengine〜
OpenRestyã¯nginxã®ã»ã‹ã«ngx_luaã‚’ã¯ã˜ã‚ã¨ã™ã‚‹Cã§æ›¸ã‹ã‚ŒãŸå„種サードパーティモジュールã¨ngx_luaã®APIを利用ã—ãŸrestyモジュールã€ãã—ã¦Lua/LuaJITã§æ§‹æˆã•ã‚Œã¦ã„ã¾ã™ã€‚ OpenRestyã«å«ã¾ã‚Œã¦ã„ã‚‹nginx自体ã¯æœ¬å®¶ã®nginxã¨åŸºæœ¬åŒã˜ãªã®ã§ã€åˆ¥ã«OpenRestyを利用ã—ãªãã¦ã‚‚自分ã§ngx_luaを組ã¿è¾¼ã‚“ã ã‚Šã€ã‚µãƒ¼ãƒä¸Šã«restyモジュールをé…布ã™ã‚‹ã“ã¨ã§ä¼¼ãŸã‚ˆã†ãªç’°å¢ƒã‚’構築ã™ã‚‹ã“ã¨ã¯å¯èƒ½ã§ã™ãŒã€OpenRestyã§ã‚ã‚Œã°ä¸»è¦ãªãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚„ライブラリãŒ./configureã€makeã€make installã®ä¸€é€£ã®æµã‚Œã§ã™ã¹ã¦ã‚´ã‚½ãƒƒã¨ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¾ã™ã—ã€OpenRestyã®configureスクリプトã¯nginxã®configureスクリプトを継承ã—ãŸã‚‚ã®ãªã®ã§nginxã®configureオプションをã»ã¼ãã®ã¾ã¾åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚‚ã§
Nginxã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’複製ã™ã‚‹mirrorモジュールãŒæ¨™æº–æ載ã•ã‚ŒãŸ - ASnoKaze blog
[20170809追記] nginx-1.13.4ã« ngx_http_mirror_module ã¯å«ã¾ã‚Œã¾ã—㟠Nginxã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’複製ã™ã‚‹mirrorモジュールãŒã‚³ãƒŸãƒƒãƒˆã•ã‚Œã€ä½•ã‚‚ã›ãšã¨ã‚‚使用ã§ãるよã†ã«ãªã‚Šãã†ã§ã™(ç¾çŠ¶æœ€æ–°ã‚³ãƒŸãƒƒãƒˆã‚’ビルドã™ã‚‹å¿…è¦ã‚ã‚Š)。 例ãˆã°æœ¬ç•ªç’°å¢ƒã®proxyã‹ã‚‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’複製ã—ã¦é–‹ç™ºç’°å¢ƒã«æµã™ã‚ˆã†ãªäº‹ã‚‚出æ¥ã¾ã™ã€‚ã‚‚ã¡ã‚ん複製処ç†ã¯æœ¬æ¥ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã‚’ブãƒãƒƒã‚¯ã—ã¾ã›ã‚“。 例ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ã«ã€mirrorã«æ¥ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’複製ã—ã¦ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚µãƒ¼ãƒã«æŠ•ã’るよã†ã«ã—ã¦ã¿ã¾ã™ conf server { listen 80 ; server_name localhost; mirror_request_body on; log_subrequest on; location /mirror { mirror /proxy; #/proxyå®›ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’
nginxã«ã‚ˆã‚‹TCPãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ | メルカリエンジニアリング
SREãƒãƒ¼ãƒ ã®@cubicdaiyaã§ã™ã€‚今回ã¯nginxã«ã‚ˆã‚‹TCPレイヤーã§ã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¨ã—ã¦ã®nginx nginxã¯HTTPã‚„TCPã€UDPç‰ã®è¤‡æ•°ã®ãƒ¬ã‚¤ãƒ¤ãƒ¼ã§ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¨ã—ã¦ç¨¼åƒã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚（TCPãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¯1.9.0以é™ã€UDPãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã¯1.9.13以é™ã§åˆ©ç”¨å¯èƒ½ã§ã™ï¼‰ ã¾ãŸã€ngx_http_ssl_module ã‚„ ngx_stream_ssl_module を利用ã™ã‚‹ã“ã¨ã§ãã‚Œãžã‚Œã®ãƒ¬ã‚¤ãƒ¤ãƒ¼ã§TLSを有効化ã™ã‚‹ã“ã¨ã‚‚å¯èƒ½ã§ã™ã€‚ TCPãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ç”¨ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’有効ã«ã™ã‚‹ HTTPレイヤーã§ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§çµ„ã¿è¾¼ã¾ã‚Œã¾ã™ãŒã€TCP(ã¨UDP)レイヤーã§ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã‚‹ã«ã¯nginxã®configureスクリプトã«--with-stream(ã‚ã‚‹ã„㯠--with
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generator…
main
コンテンツã¸ã‚¹ã‚ップ 登録ã¯ç„¡åŠ¹åŒ–ã•ã‚Œã¾ã—ãŸã€‚
nginx最大パフォーマンスを出ã™ãŸã‚ã®åŸºæœ¬è¨å®š | Node.js技術
解説 worker_processes auto; - Nginx本体ã®ãƒ—ãƒã‚»ã‚¹æ•°ã€autoã«ã—ã¦nginx内部判定ã«ä»»ã›ã‚‹ã®ã¯è³¢æ˜Ž worker_rlimit_nofile 100000; - workerプãƒã‚»ã‚¹ãŒæœ€å¤§ã«é–‹ã‘るファイル数ã®åˆ¶é™ã€‚ã“ã®ã‚ˆã†ã«è¨å®šã—ãŸã‚‰ã€ulimit -a以上ã®ãƒ•ã‚¡ã‚¤ãƒ«æ•°ã‚’処ç†ã§ãるよã†ã«ãªã‚Šã€too many open fileså•é¡Œã‚’回é¿ã§ãã‚‹ worker_connections 2048; - 一ã¤ã®workerプãƒã‚»ã‚°ãŒé–‹ã‘る最大コãƒã‚¯ã‚·ãƒ§ãƒ³æ•° multi_accept on; - ã§ãã‚‹ã ã‘クライアントã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã‚‹ use epoll; - Linuxカーãƒãƒ«2.6以上ã®å ´åˆã¯epollã€BSDã®å ´åˆkqueue server_tokens off; - ã‚»ã‚ュリティ対ç–ã§ã™ã€ã‚¨ãƒ©ãƒ¼ç”»é¢ã®nginxãƒãƒ¼ã‚¸ãƒ§ãƒ³ç•ªå·ã‚’éžè¡¨ç¤º sendf
NGINX Documentation
DevCentral Connect & learn in our hosted community MyF5 Your key to everything F5, including support, registration keys, and subscriptions NGINX Learn more about NGINX Open Source and read the community blog NGINX Product Documentation Learn how to deliver, manage, and protect your applications using F5 NGINX products.
Nginx Caching
Nginx Caching See how to cache both dynamic and static content using Nginx! Like Varnish, Nginx is a very capable web cache. Many administrators reach for Varnish, often before it's really needed. However, there are two things to know about Nginx: Nginx can serve static content (directly) very, very efficiently. This is good when the static files are on the same server as Nginx. Nginx can also act
Nginxã¨åå‰è§£æ±ºã®è©± - Masteries
Nginxã§ã¯, serverコンテã‚ストã®locationコンテã‚ストã«ãŠã„ã¦, proxy_passディレクティブを利用ã™ã‚‹ã“ã¨ã§ä»»æ„ã®ãƒ›ã‚¹ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’転é€ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™. 例ãˆã°, serverコンテã‚ストã«ãŠã„ã¦, location / { proxy_pass http://127.0.0.1:5000; } ã¿ãŸã„ã«æ›¸ã„ã¦ã‚ã’ã‚Œã°, localhostã®5000番ãƒãƒ¼ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’転é€ã™ã‚‹ã“ã¨ãŒå‡ºæ¥ã¾ã™. Webサービスã§ã¯, ã“ã†ã„ã†æ„Ÿã˜ã§NginxãŒ443番(HTTPS)ã‚„80番ãƒãƒ¼ãƒˆ(HTTP)ã§å—ã‘ãŸã‚¢ã‚¯ã‚»ã‚¹ã‚’5000番ãƒãƒ¼ãƒˆãªã©ã§å‹•ã„ã¦ã„ã‚‹Webアプリケーションã«è»¢é€ã—ã¦ã„る訳ã§ã™. ã§, ã“ã®proxy_passディレクティブã¯, IPã‚’ãã®ã¾ã¾æ›¸ãã®ã§ã¯ãªã, 次ã®ã‚ˆã†ã«ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’書ãã“ã¨ã‚‚ã§ãã¾ã™. location / { proxy_pass http
nginxã®ãƒ‘フォーマンスãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°
@shibuya.pm#17
Nginx 㧠location ã®åˆ¤å®šæ–¹æ³•ã¨å„ªå…ˆé †ä½ã‚’調ã¹ã‚‹Â | レンタルサーãƒãƒ¼ãƒ»è‡ªå®…サーãƒãƒ¼è¨å®šãƒ»æ§‹ç¯‰ã®ãƒ’ント
Nginx 㧠location ã®åˆ¤å®šæ–¹æ³•ã¨å„ªå…ˆé †ä½ã‚’調ã¹ã‚‹
Nginxã®ãƒ‘フォーマンスを極é™ã«ã™ã‚‹ãŸã‚ã®è€ƒå¯Ÿ - Qiita
ピクセルトラッã‚ングを想定ã—ãŸè¨å®šã§ã€Nginx on EC2(c3.large) ã¨ã„ã†ç’°å¢ƒã§ã€æ¥µé™ã¾ã§è¨å®šã‚’ã—ã¦ã€ã©ã‚Œãらã„ã•ã°ã‘ã‚‹ã®ã‹é‹ç”¨ä¸ã€ãƒ‘フォーマンステストã—ã¦ã‚‹æ™‚ã¯ã€åˆ¥ã®ã¨ã“ã‚ã«å•é¡ŒãŒã‚ã‚Šã€Nginx自体ã®æ€§èƒ½é™ç•Œã¾ã§ãƒ†ã‚¹ãƒˆã§ããªã‹ã£ãŸã®ã§ã€å®Ÿéš›ã©ã“ã¾ã§ã„ã‘ã‚‹ã®ã‹ã¯è¨ˆæ¸¬ã§ãã¦ãªã„。 秒間1万ã¨ã‹2万ã¯è¡Œã‘ã¦ãŸã¨æ€ã†ã€ã¡ãªã¿ã«å®Ÿéš›ã®é‹ç”¨ã§ã¯ç§’é–“9000以上ã¨ã‹ã‚’記録ã—ã¦ã„ã¦ã€ã‚µãƒ¼ãƒè‡ªä½“ã«ã¯ã‹ãªã‚Šä½™è£•ãŒã‚ã‚‹ã®ã§ã€è¨˜éŒ²ã¯ã¾ã ã¾ã 伸ã³ã‚‹ã¨æ€ã†ã€‚ ã¡ãªã¿ã« empty_gif ã¯å¿œç”ãŒçŸã™ãŽã¦ã€Nginx ã® $request_time ã§ã¯è¨˜éŒ²ã§ããªã„... 全部 "0.000" ã ã‹ã‚‰ã€ã©ã‚Œãらã„掛ã‹ã£ã¦ã‚‹ã®ã‹åˆ†ã‹ã‚‰ã‚“...。 nginx.confã®è¨å®š user nginx; worker_processes auto; error_log /var/log/nginx/erro
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Optimizing Nginx Configuration for High Loads - Fresh Blurbs by Irakli Nadareishvili
SSTtechlog 03 nginxã§SNI(Server Name Indication)を使ã£ã¦ã¿ã‚ˆã†ï¼ | SST æ ªå¼ä¼šç¤¾ã‚»ã‚ュアスカイ・テクノãƒã‚¸ãƒ¼
nginxã®ãƒ‘ラメータãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¨h2o - Qiita
{{#tags}}- {{label}}
{{/tags}}