[B! nginx] miya-janã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

miya-jan id:miya-jan

nginxã«é–¢ã™ã‚‹miya-janã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Nginxã§HTTPS : ã‚¼ãƒã‹ã‚‰å§‹ã‚ã¦SSLã®è©•ä¾¡ã‚’A+ã«ã™ã‚‹ã¾ã§ Part 1 | POSTD
æ•°å¹´å‰ã€Webã¯å…¨ä½“çš„ã«æš—å·åŒ–ã•ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚HTTPSã¯Webãƒšãƒ¼ã‚¸ã®æœ€ã‚‚é‡è¦ãªéƒ¨åˆ†ã ã‘ã®ãŸã‚ã«ç¢ºä¿ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚æš—å·åŒ–ãŒå¿…è¦ãªã®ã¯å¤§åˆ‡ãªãƒ¦ãƒ¼ã‚¶ãƒ‡ãƒ¼ã‚¿ã ã‘ã§ã€Webãƒšãƒ¼ã‚¸ã®å…¬é–‹ã•ã‚Œã‚‹éƒ¨åˆ†ã¯æš—å·åŒ–ã›ãšã«é€ã£ã¦ã‚‚ã„ã„ã¨ã„ã†ã“ã¨ã§æ„è¦‹ãŒä¸€è‡´ã—ã¦ã„ã¾ã—ãŸã€‚ ã—ã‹ã—ã€ ä»Šã¯ çŠ¶æ³ ãŒ é•ã„ã¾ã™ ã€‚ç¾åœ¨ã§ã¯ã€ã©ã‚“ãªWebãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§ã‚‚æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ã®ã¯è‰¯ããªã„ã¨ã„ã†ã“ã¨ãŒåˆ†ã‹ã£ã¦ã„ã‚‹ã®ã§ã€Webã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹èª°ã‚‚ãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«é–¢ä¿‚ãªãå¼·å›ºãªHTTPSã‚’è¨å®šã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ ãŠæ¥ãšã‹ã—ã„è©±ã§ã™ãŒã€ç§è‡ªèº«ã®Webã‚µã‚¤ãƒˆã¯2å¹´è¿‘ãã‚‚å…¨ãHTTPSã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“ã§ã—ãŸ ^(1) ã€‚ Eric Mill ã® ä»Šã™ãç„¡æ–™ã§HTTPSã«åˆ‡ã‚Šæ›¿ãˆã‚ˆã† ã¨ã„ã†ç´ æ™´ã‚‰ã—ã„è¨˜äº‹ãŒæœ€çµ‚çš„ã«ç§ã«å–ã‚’å…¥ã‚Œã¦ãã‚Œã¾ã—ãŸã€‚ç§ã¯ä¼‘æš‡ä¸ã€HTTPSã‚’ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã—ã¦ Qualys SSL Report ã§
miya-jan 2016/02/10
HTTP

SSL

security

Nginx

SSL Labs
ãƒªãƒ³ã‚¯
nginx ã§ SSL ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚’æ§‹ç¯‰ - WebOS Goodies
æœ€è¿‘ã‚ã¾ã‚Šãƒã‚¿ãŒãªã„ã®ã§ãŒã€ã“ã®ã¾ã¾ã ã¨ã¾ãŸä½•é€±é–“ã‚‚æŠ•ç¨¿ãªã—ã«ãªã‚Šãã†ãªã®ã§ã€ä»¥å‰ã‚„ã£ãŸ nginx ã«ã‚ˆã‚‹ SSL ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®æ§‹ç¯‰æ–¹æ³•ã‚’å‚™å¿˜éŒ²çš„ã«æ›¸ã„ã¦ã¿ã¾ã™ã€‚é–‹ç™ºç›®çš„ã§ GAE ã® dev_appserver.py ã‚’ SSL åŒ–ã™ã‚‹ãŸã‚ã«ä½¿ã£ãŸã ã‘ã§ã™ãŒã€ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚·ã‚¹ãƒ†ãƒ ç‰ã‚’ä½¿ã‚ãšã«ã‚½ãƒ¼ã‚¹ã‹ã‚‰ãƒ“ãƒ«ãƒ‰ã—ã€ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼æ¨©é™ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹æ–¹æ³•ã«ã—ã¦ã„ã¾ã™ã€‚ã”ãåŸºæœ¬çš„ãªå†…å®¹ã§ã™ãŒã€å‚è€ƒã«ã—ã¦ã„ãŸã ã‘ã‚Œã°å¹¸ã„ã§ã™ã€‚ nginx ã¨ã¯ nginx ã¯ Tornado ãªã©ã¨åŒæ§˜ã®éžåŒæœŸã‚¤ãƒ™ãƒ³ãƒˆãƒ‰ãƒªãƒ–ãƒ³ãƒ¢ãƒ‡ãƒ«ã‚’æŽ¡ç”¨ã—ãŸ HTTP ã‚µãƒ¼ãƒãƒ¼ã§ã™ã€‚ BSD ã«ä¼¼ãŸãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¨ã—ã¦å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ãƒ—ãƒã‚»ã‚¹ãƒ»ã‚¹ãƒ¬ãƒƒãƒ‰ãƒ¢ãƒ‡ãƒ«ã‚’æŽ¡ç”¨ã—ãŸ Apache ãªã©ã‚ˆã‚Šã‚‚å¤šæ•°ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’åŠ¹çŽ‡ã‚ˆãå‡¦ç†ã§ãã‚‹ãŸã‚ã€å¤šãã®é«˜è² è·ã‚µã‚¤ãƒˆã§æŽ¡ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ç¾åœ¨ Apache, I
miya-jan 2015/12/16
nginx

ssl

reverseproxy
ãƒªãƒ³ã‚¯
nginx ã§ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã™ã‚‹ã¨ãã® Tips
è‡ªå®…ã‚µãƒ¼ãƒã‚’ KVM ã§ä»®æƒ³åŒ–ã—ã¦è¤‡æ•°ã® VM ã‚’ç¨¼åƒã•ã›ã¦ã„ã‚‹ãŒã€ã‚°ãƒãƒ¼ãƒãƒ« IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒä¸€ã¤ã—ã‹ãªã„ãŸã‚ã€å¤–éƒ¨ã‹ã‚‰è¦‹ã¦1ãƒãƒ¼ãƒˆã«ã¤ã1ã¤ã®ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã«ã—ã‹ NAPT ã§ããªã„ã€‚ ãã“ã§ HTTP (80), HTTPS (443) ã«é–¢ã—ã¦ã¯ nginx ã‚’ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦å‹•ä½œã•ã›ã€ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆ IP ã‚’æŒ¯ã£ãŸ VM (ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ Web ã‚µãƒ¼ãƒ) ã«ä¸ç¶™ã™ã‚‹ã“ã¨ã«ã—ãŸã€‚ãã®ã¨ãã®è¨å®šã‚’ã¾ã¨ã‚ã¦ãŠãã€‚OS ã¯ Ubuntu 12.04 ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã€‚ åŸºæœ¬çš„ãªè¨å®š å˜ã« HTTP ã‚’ä¸ç¶™ã™ã‚‹ã ã‘ãªã‚‰ã€æ¬¡ã®æ‰‹é †ã‚’å®Ÿæ–½ã™ã‚Œã°è‰¯ã„ã€‚ ã¾ãšãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦å‹•ä½œã•ã›ã‚‹ãƒ›ã‚¹ãƒˆã« nginx ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã€‚ $ sudo apt-get install -y nginx ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã”ã¨ã«è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½œæˆã™ã‚‹ã€‚ $ sudo vi /etc/ngin
miya-jan 2015/12/16
nginx

reverseproxy
ãƒªãƒ³ã‚¯
ubuntuã§lua-nginx-moduleã‚’è©¦ã—ã¦ã¿ã‚‹ - ASnoKaze blog
2é€šã‚Šã®æ‰‹æ®µãŒã‚ã‚‹ã€‚ nginx-extrasãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’å…¥ã‚Œã‚‹ ãƒ“ãƒ«ãƒ‰ã™ã‚‹ å‰è€…ãŒç°¡å˜ã ãŒã€ä»Šå›žã¯ãƒ“ãƒ«ãƒ‰ã—ãŸã®ã§ã–ã£ã¨æ‰‹é † å¿…è¦ãªãƒ¢ãƒŽå…¥ã‚Œã‚‹ sudo apt-get update sudo apt-get install -y lua5.1 liblua5.1-0 liblua5.1-0-dev sudo apt-get install build-essential openssl git è½ã¨ã—ã¦ãã¦è§£å‡ã™ã‚‹ wget 'http://nginx.org/download/nginx-1.7.4.tar.gz' tar -xzvf nginx-1.7.4.tar.gz cd nginx-1.7.4/ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’cloneã™ã‚‹ git clone https://github.com/openresty/lua-nginx-module.git git clone https://
miya-jan 2015/12/16
ubuntu

lua

nginx
ãƒªãƒ³ã‚¯
nginxã‚’dockerã§å‹•ã‹ã™æ™‚ã®Tips 3é¸
ã“ã‚“ã«ã¡ã¯ã€‚CTOã®é¦¬å ´ã§ã™ã€‚ æœ€è¿‘åˆ©ç”¨ã™ã‚‹æ©Ÿä¼šãŒå¢—ãˆã¦ããŸdockerãƒã‚¿ã§ã™ã€‚ nginxã‚’å‹•ã‹ã™ã¨ãã®Tipsã‚’3ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ foregroudã§èµ·å‹•ã™ã‚‹ dockerã§ã¯ã‚³ãƒžãƒ³ãƒ‰ã‚’foregroundã§å‹•ã‹ã•ãªã„ã¨ã‚³ãƒ³ãƒ†ãƒŠãŒåœæ¢ã—ã¦ã—ã¾ã„ã¾ã™ã€‚ nginxã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯ãƒ‡ãƒ¼ãƒ¢ãƒ³ã¨ã—ã¦å‹•ãã®ã§ã€foregroundã§å‹•ãã‚ˆã†ã«è¨å®šã—ã¾ã—ã‚‡ã†ã€‚ nginx.confã§è¨å®šã™ã‚‹ãªã‚‰ã“ã†ã§ã™ã€‚ daemon off; Dockerfileã®èµ·å‹•ã‚³ãƒžãƒ³ãƒ‰ã§æŒ‡å®šã™ã‚‹ãªã‚‰ã“ã†ã§ã™ã€‚ CMD ["/usr/sbin/nginx", "-g", "daemon off;"] å‹•çš„ãªè¨å®šã‚’å¤–éƒ¨åŒ–ã™ã‚‹ ã‚¤ãƒ¡ãƒ¼ã‚¸ã®ä¸ã«è¨å®šå€¤ã‚’å…¥ã‚Œã¡ã‚ƒã†ã®ã¯ãƒ€ã‚µã„ã§ã™ã‚ˆãã€‚ ã‚³ãƒ³ãƒ†ãƒŠèµ·å‹•æ™‚ã«å‹•çš„ã«è¨å®šã—ãŸã„ã‚‚ã®ã§ã™ã€‚ dockerã®å ´åˆã¯ docker run æ™‚ã« -e ã§ç’°å¢ƒå¤‰æ•°ã‚’æŒ‡å®šã§ãã‚‹ã®ã§ä½¿ã„ã¾ã—ã‚‡ã†ã€‚ do
miya-jan 2015/12/16
daemon off

docker

lua

nginx
ãƒªãƒ³ã‚¯
nginxã§ãƒ€ã‚¤ãƒŠãƒŸãƒƒã‚¯ã«ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã™ã‚‹ã‚„ã¤ - ã¯ã‚ã‚ãƒ¼ã£
SD12æœˆå·ã®dockerç‰¹é›†ã«ã‚ã£ãŸã‚„ã¤ã€‚ ngixnxã‚’ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ç›®çš„ã®dockerã®ã‚³ãƒ³ãƒ†ãƒŠã«ãƒ—ãƒã‚ã‚·ã™ã‚‹ã€‚ dockerã®ã‚³ãƒ³ãƒ†ãƒŠã®ç®¡ç†ã¨ã‹ã¯figä½¿ã£ãŸã€‚ meu@u01:~/docker/dproxy$ find . -type f ./linkd/Dockerfile ./linkd/linkd ./fig.yml ./redis/Dockerfile ./redis/redis.conf ./nginx/Dockerfile ./nginx/nginx.confmeu@u01:~/docker/dproxy$ cat fig.yml nginx: build: nginx command: /usr/sbin/nginx ports: - "80:80" links: - redis redis: build: redis command: /usr/bin/r
miya-jan 2015/12/16
nginx

redis

docker

reverseproxy
ãƒªãƒ³ã‚¯
Luaã¨Nginxã¨Redisã«ã¤ã„ã¦ - Qiita
sudo apt-get install zip cd /usr/local/src wget https://nodeload.github.com/keplerproject/luarocks/zip/master mv master master.zip cd luarocks-master # é©å½“ã«ç’°å¢ƒå¤‰æ•°ã¯è¨å®šã™ã‚‹ ./configure --with-lua=/usr/local/bin/luajit --with-lua-lib=/usr/local/lib/ --with-lua-include=/usr/local/include/luajit-2.0 make sudo make install # LuaRockså†…ã®ShebangãŒæ£ã—ãLuaJITã‚’å‚ç…§ã—ãªã„ã®ã§ç½®æ›ã™ã‚‹ sudo perl -pi -e 's|/usr/local/bin/luajit/bin
miya-jan 2015/12/16
Luaã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ç®¡ç†ã‚’ã™ã‚‹LuaRocksã«ã¤ã„ã¦æ›¸ã„ã¦ã‚ã‚‹

lua

nginx

redis

luarocks
ãƒªãƒ³ã‚¯
lua-nginx-module ã®ç´¹ä»‹ ãªã‚‰ã³ã« Nginx+Lua+Redisã«ã‚ˆã‚‹å‹•çš„ãªãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®å®Ÿè£…æ¡ˆ - hibomaã®æ—¥è¨˜
Nginxã¯éžå¸¸ã«å¼·åŠ›ãªhttpdã§ã™ãŒã€ç‹¬è‡ªã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’å®Ÿè£…ã—ã‚ˆã†ã¨ã™ã‚‹ã¨ã“ã‚Œã¾ãŸéžå¸¸ã«æ•·å±…ãŒé«˜ã„å°è±¡ã§ã™ã€‚ è¿½è¨˜ ã“ã®è¨˜äº‹ã‚ˆã‚Šã‚‚å‰ã« http://openresty.org/#DynamicRoutingBasedOnRedis ã§ã»ã¨ã‚“ã©åŒã˜å†…å®¹ã®ã‚¨ãƒ³ãƒˆãƒªãŒæ›¸ã‹ã‚Œã¦ã„ã¾ã—ãŸã€‚ã“ã¡ã‚‰ã‚‚å‚ç…§ãã ã•ã„ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®é–‹ç™ºã¯ã‚€ãšã‹ã—ã„ ã¾ãšé–‹ç™ºç”¨ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ã»ã¨ã‚“ã©ã‚ã‚Šã¾ã›ã‚“ã€‚å¿…ç„¶ æ—¢å˜ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ãŠæ‰‹æœ¬ã¨ã—ã¾ã™ãŒã€ã‚³ãƒ¡ãƒ³ãƒˆã‚‚å°‘ãªã„ã®ã§ã‚½ãƒ¼ã‚¹ã ã‘ãŒé ¼ã‚Šã§ã™ã€‚ {ãƒ•ã‚¡ã‚¤ãƒ«,ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯} I/O ã‚’ä¼´ã†å‡¦ç†ã§ã¯ã€Nginxã®ãƒŽãƒ³ãƒ–ãƒãƒƒã‚ãƒ³ã‚°/ã‚¤ãƒ™ãƒ³ãƒˆãƒ‰ãƒªãƒ–ãƒ³ã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã«ã®ã£ã¨ã£ã¦ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯ã‚’é§†ä½¿ã—ãŸCã§å®Ÿè£…ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã€LLã§è‚²ã£ãŸã‚†ã¨ã‚Šè„³ã§ã¯å¤ªåˆ€æ‰“ã¡ã§ãã¾ã›ã‚“ã§ã—ãŸ lua-nginx-module ãŒä»£ã‚ã‚Šã«ãªã‚‹ã‹ã‚‚ ãªã‚“ã‚‰ã‹ã®Nginxãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’é–‹ç™ºã—ãªã‘ã‚Œã°ãªã‚‰ãªã„
miya-jan 2015/12/16
nginx

lua

redis

reverseproxy
ãƒªãƒ³ã‚¯
nginx, Dockerã§å‹•çš„ãƒ—ãƒã‚ã‚·ç’°å¢ƒ - Qiita
nginxã§å‹•çš„ãƒ—ãƒã‚ã‚·ç’°å¢ƒã‚’ä½œã‚Šã¾ã™ ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®ã‚¢ãƒ—ãƒªã¯dockerã‚’ä½¿ç”¨ã—ã¦ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã§å‹•ãwebã‚µãƒ¼ãƒãƒ¼ã‚³ãƒ³ãƒ†ãƒŠã‚’ç«‹ã¦ã¦ãã‚Œã‚’å‹•çš„ã«ãƒ—ãƒã‚ã‚·ã—ã¦ã¿ã¾ã™ã€‚ ã‚·ã‚¹ãƒ†ãƒ æ§‹æˆ OS ubuntu 14.04 LTS Middleware nginx ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ã¦ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã¸ãƒ—ãƒã‚ã‚·ã—ã¾ã™ docker ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®ã‚¢ãƒ—ãƒªã‚’å‹•ã‹ã™ç’°å¢ƒã¨ã—ã¦ä½¿ç”¨ã—ã¾ã™ redis ãƒ‰ãƒ¡ã‚¤ãƒ³ã¨ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®ã‚¢ãƒ—ãƒªã®ãƒãƒ¼ãƒˆã‚’ç´ä»˜ã‘ã¾ã™ lua nginxã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸ã§redisã«æŽ¥ç¶šã—ã¦å‹•çš„ã«å€¤ã‚’è¿”ã™å½¹å‰² ã¾ãšã¯ubuntuã®è¨å®š # ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆ apt-get -y update && apt-get -y upgrade # å¿…è¦ãªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ apt-get install -y build-essential autoconf libssl-dev curl lib
miya-jan 2015/12/16
reverse proxy

nginx

docker

lua

redis
ãƒªãƒ³ã‚¯
nginx ã§ SSLè§£ããƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ãªè¨å®šã®ãŠä½œæ³• - Qiita
ãƒ•ãƒãƒ³ãƒˆã§SSLè§£ã„ã¦ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã£ã¦ã®ã¯å‰²ã¨è‰¯ãä½œã‚‹ã®ã ã‘ã©ã€ã‚ã‚Œã‚Œ...? nginx, ã¨ãã©ã httpd ã§å‡ºæ¥ã¦ãŸã“ã¨ãŒå‡ºæ¥ãªãã¦ã€Œãˆã£ï¼Ÿã€ã¦ãªã‚‹ã€‚ä»Šå¾Œã®ãŸã‚ã«ãƒ¡ãƒ¢ã€‚ server { listen 80; server_name www.example.com; rewrite ^ https://$http_host$request_uri? permanent; } server { listen 443; server_name www.example.com; ssl on; ssl_certificate ... ssl_certificate_key ... : location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header
miya-jan 2015/12/16
nginx

reverseproxy

ssl
ãƒªãƒ³ã‚¯
Nginxã¨Luaã‚’ç”¨ã„ãŸå‹•çš„ãªãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§ãƒ‡ãƒ—ãƒã‚¤ã‚’ 100 å€é€Ÿãã—ãŸ
2. è‡ªå·±ç´¹ä»‹ â€¢ æ·±è°· æ•é‚¦ â€¢ 2012å¹´ã‚µã‚¤ãƒœã‚¦ã‚ºæ ªå¼ä¼šç¤¾å…¥ç¤¾ â€¢ ã‚¤ãƒ³ãƒ•ãƒ©ãƒãƒ¼ãƒ Hazama æ‰€å±ž (2012/09~) â€¢ ãŠä»•äº‹ â€¢ ãƒ‡ãƒ—ãƒã‚¤ãƒ„ãƒ¼ãƒ«ã®ä½œæˆ â€¢ MySQL HA ç’°å¢ƒã®æ§‹ç¯‰ â€¢ Apache ã®ãƒ‡ãƒãƒƒã‚°ãƒ»ãƒ‘ãƒƒãƒã®ä½œæˆ â€¢ Nginx ã‚’ä½¿ã£ãŸãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®æ§‹ç¯‰ 2
miya-jan 2015/12/16
nginxã¨luaã‚’ç”¨ã„ãŸå‹•çš„ãªreverse proxyã®è©±

nginx

cybozu

ã¨ã£ã—ãƒ¼
ãƒªãƒ³ã‚¯
nginx ã®è¨å®šã‚’ãƒ¬ãƒ“ãƒ¥ãƒ¼ã™ã‚‹ã¨ãã®è¦³ç‚¹ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - Cybozu Inside Out | ã‚µã‚¤ãƒœã‚¦ã‚ºã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€‚ ã‚¤ãƒ³ãƒ•ãƒ©ãƒãƒ¼ãƒ ã®é‡Žå³¶ï¼ˆ@nojimaï¼‰ã§ã™ã€‚ ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã« nginx ã®è¨å®šã«ã¤ã„ã¦æ°—ã‚’ã¤ã‘ã‚‹ã¹ãç‚¹ã‚’å…±æœ‰ã™ã‚‹ãŸã‚ã«ã€ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ã‚’æ›¸ãã¾ã—ãŸã€‚ ã›ã£ã‹ããªã®ã§ã“ã“ã§å…¬é–‹ã—ã¾ã™ã€‚ ã»ã¨ã‚“ã©ã®é …ç›®ã¯è‡ªåˆ†ã‚„ãƒãƒ¼ãƒ ã®ãƒ¡ãƒ³ãƒãƒ¼ã®å®Ÿä½“é¨“ã«åŸºã„ã¦ã„ã¾ã™ã€‚ ãƒ¬ãƒ“ãƒ¥ãƒ¼è¦³ç‚¹ server server_name ãŒä»–ã®ã‚„ã¤ã¨è¢«ã£ã¦ã„ãªã„ã‹ã€‚ listen ã™ã‚‹ IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒåŒã˜å ´åˆã€server_name ã§åŒºåˆ¥ã§ããªã„ã¨ã„ã‘ãªã„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€SNI ã‚’ã‚µãƒãƒ¼ãƒˆã—ãªã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã¯ TLS ç”¨ã®è¨å®šãŒ default_server ã®ã‚‚ã®ãŒä½¿ã‚ã‚Œã‚‹ç‚¹ã«ã‚‚æ³¨æ„ã€‚ TLS ã‚’ä½¿ã†å ´åˆã€listen ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã« ssl ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’æ›¸ã„ã¦ã„ã‚‹ã‹ã€‚ location location ã®ãƒžãƒƒãƒã®é †ç•ªã«æ³¨æ„ æ£è¦è¡¨ç¾ã® location ã¯å‰æ–¹ä¸€è‡´ã® location ã‚ˆã‚Š
miya-jan 2015/11/20
nginx

cybozu

nojima
ãƒªãƒ³ã‚¯
1