[B! nginx] tvskã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tvsk id:tvsk

nginxã«é–¢ã™ã‚‹tvskã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

é¢å€’ãã•ã„ã‹ã‚‰ nginx ã® LDAP èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å…¬é–‹ã—ãŸã‚ˆ | IIJ Engineers Blog
2021å¹´11æœˆã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±çµ±æ‹¬å®¤ã«æ‰€å±žã€‚é ‘å›ºãªã®ã§ã€ãƒ‹ãƒƒã‚¯ãƒãƒ¼ãƒ ã ã‘ã§ã‚‚ã‚„ã‚ã‚‰ã‹ãã²ã‚‰ãŒãªã«ã—ã¦ã¿ã¾ã—ãŸã€‚æ™®æ®µã¯ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆã§åŽé›†ã—ãŸDDoSã®ç™ºç”Ÿæºã§ã‚ã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’å¯¾è±¡ã«åˆ†æžã—ã¦ã„ã¾ã™ã€‚ ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€‚ã“ã‚“ã«ã¡ã¯ã€‚ã“ã‚“ã°ã‚“ã¯ã€‚ãµã‡ã«ã£ãã¡ã‚…ã‚“ ã§ã™ã€‚ ä»Šå›žç´¹ä»‹ã™ã‚‹ã®ã¯ nginx ã§åˆ©ç”¨ã§ãã‚‹ LDAP èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ï¼ˆngx_auth_modï¼‰ã§ã™ã€‚ nginx ã¯ Web ã‚µãƒ¼ãƒã‚„ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ãªã©ã‚’æ§‹ç¯‰ã§ãã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã¨ã—ã¦å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ nginx ã®è©³ç´°ã¯ã“ã¡ã‚‰ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚ æœ¬è¨˜äº‹ã§ç´¹ä»‹ã™ã‚‹ ngx_auth_mod ã¯ CATSHAND ã¨å‘¼ã¶æƒ…å ±å…±æœ‰ã‚·ã‚¹ãƒ†ãƒ ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦é–‹ç™ºã—ãŸã‚‚ã®ã§ã™ã€‚ æƒ…å ±å…±æœ‰ã«ã¤ã„ã¦ã®è¨˜äº‹ã€Œæƒ…å ±ã‚’æµã‚Œã«ä¹—ã›ã‚ˆã†ï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£èª¿æŸ»ã®å…±æœ‰æ–¹æ³•ã€ã‚‚ä½µã›ã¦ä¸€èªãã ã•ã„ã€‚ CATSHAND ã®ã‚·ã‚¹ãƒ†ãƒ ã¯ Web ã‚µãƒ¼ãƒã¨ã—
tvsk 2022/06/17
iij

oss

nginx

techblog
ãƒªãƒ³ã‚¯
nginxã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ« nginx.conf ã®èªã¿æ–¹ è¶…å…¥é–€ - æˆ–ã‚‹é˜¿å‘†ã®è¨˜
è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®æœ€åˆã®çŠ¶æ…‹ nginxã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€/etc/nginx/nginx.confã§ã™ã€‚Version 1.6.3ã«ãŠã„ã¦ã¯ã€æœ€åˆã¯ä»¥ä¸‹ã®çŠ¶æ…‹ã«ãªã£ã¦ã„ã¾ã™ã€‚ user nginx; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; events { worker_connections 1024; } http { log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/l
tvsk 2021/06/18
nginx ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è§£ãã€‚

guide

æ‰‹å¼•ã

nginx
ãƒªãƒ³ã‚¯
nginx - åŸºæœ¬ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–(ãã®ä»–)
workerãƒ—ãƒã‚»ã‚¹ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚°ãƒ«ãƒ¼ãƒ—ã¯ä»¥ä¸‹ã®çŠ¶æ³ã§ç¢ºå®šã—ã¾ã™ã€‚ nginx.confå†…ã§userãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æŒ‡å®šã•ã‚Œã¦ã„ã‚‹å ´åˆã«ã¯ã€ãã®å€¤ã‚’åˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ nginx.confå†…ã§userãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æœªæŒ‡å®šã€ã‹ã¤nginxã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³--user=ãƒ¦ãƒ¼ã‚¶å --group=ã‚°ãƒ«ãƒ¼ãƒ—åã§æŒ‡å®šæ™‚ã«ã¯ã€ --useråŠã³--groupã‚ªãƒ—ã‚·ãƒ§ãƒ³ã§æŒ‡å®šã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶åã¨ã‚°ãƒ«ãƒ¼ãƒ—åãŒåˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ nginx.confå†…ã§userãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æœªæŒ‡å®šã€ã‹ã¤nginxã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³--user=ãƒ¦ãƒ¼ã‚¶å --group=ã‚°ãƒ«ãƒ¼ãƒ—åã‚’æœªæŒ‡å®šæ™‚ã«ã¯ã€ nobodyãƒ¦ãƒ¼ã‚¶ã€nobodyã‚°ãƒ«ãƒ¼ãƒ—ãŒæŒ‡å®šã•ã‚Œã¾ã™ã€‚ ç§ã®ç’°å¢ƒã¯ã€Ubnutu16.04LTSã«apt-getã§nginx1.12.0ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã—ãŸã€‚ apt-getã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ™‚ã«ã¯ã€--user=ngin
tvsk 2021/01/16
ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®æ¨ªæ–çš„ãªè§£èª¬ åˆæœŸå€¤ã€é©ç”¨å¯èƒ½ãªã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆ

nginx

åŸºç¤Ž

æ—¥æœ¬èªž
ãƒªãƒ³ã‚¯
APIã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹ãŸã‚ã®CORSè¨å®šæ±ºå®šç‰ˆ - Qiita
ã‚¿ã‚¤ãƒˆãƒ«ã¯é‡£ã‚Šã€ã‹ã¤ã€è‡ªåˆ†ã®ãŸã‚ã®å‚™å¿˜éŒ²ã§ã™ã€‚ ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’æ§‹ç¯‰ã™ã‚‹ã¨ã€APIã‚µãƒ¼ãƒã‚’ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨ã«ç«‹ã¦ã‚‹ã‚ã‘ã§ã™ãŒã€ ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã®JSã‚¨ãƒ³ã‚¸ãƒ³ã‹ã‚‰APIã‚µãƒ¼ãƒã‚’å©ãæ™‚ã«é¿ã‘ã¦é€šã‚Œãªã„ã®ãŒã€Same-Origin Policyï¼ˆåŒä¸€ç”Ÿæˆå…ƒãƒãƒªã‚·ãƒ¼ï¼‰ã«ã‚ˆã‚‹CORS (Cross-Origin Resource Sharing)åˆ¶é™ã§ã™ã€‚ ã“ã‚Œã‚’å›žé¿ã™ã‚‹ã«ã¯ã€APIã‚µãƒ¼ãƒå´ã§Access-Control-*ãƒ˜ãƒƒãƒ€ã‚’é©åˆ‡ã«è¿”ã™å¿…è¦ãŒã‚ã‚Šã¾ã™ãŒã€ã©ã†è¨å®šã™ã‚‹ã¹ãã‹ã®æƒ…å ±ãŒæ„å¤–ã¨å°‘ãªã„ã®ã§ï¼ˆè‡ªåˆ†çš„ï¼‰ã“ã‚ŒãŒæ±ºå®šç‰ˆï¼ã€€ã¨ã„ã†è¨å®šã‚’è€ƒãˆã¦ã¿ã¾ã—ãŸã€‚ çµè«– nginxã®å ´åˆã®è¨å®šä¾‹ã§ã™ã€‚ server { listen 80; server_name site.localhost; charset utf-8; root /var/www/app/public; locatio
tvsk 2021/01/16
api

server

nginx
ãƒªãƒ³ã‚¯
nginxã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰444 Â· yuuki/yuuki
nginxã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰444 nginxç‹¬è‡ªã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰444ã¯ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’è¿”ã•ãšã«ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’åˆ‡æ–ã§ãã‚‹ã€‚ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’è¿”ã•ãªã„ã®ã§ã€ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰444ã‚’ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒå—ã‘å–ã‚‹ã“ã¨ã¯ãªã„ã€‚ http://nginx.org/en/docs/http/ngx_http_rewrite_module.html#return The non-standard code 444 closes a connection without sending a response header. DoSæ”»æ’ƒãªã©ã€ç‰¹å®šæ¡ä»¶ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’BANã™ã‚‹ã¨ãã«ã€ãªã‚‹ã¹ãè¨ˆç®—æ©Ÿãƒªã‚½ãƒ¼ã‚¹æ¶ˆè²»ã‚’æŠ‘ãˆãŸã„ã¨ãã«ä½¿ãˆã‚‹ã¯ãšã€‚ 403ã‚’è¿”ã™ã¨ããªã©ã¨æ¯”ã¹ã¦ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹é€ä¿¡ã®ãŸã‚ã®CPUã‚³ã‚¹ãƒˆã‚’ç¯€ç´„ 403ã‚’è¿”ã™ã¨ããªã©ã¨æ¯”ã¹ã¦ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€åˆ†ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å¸¯åŸŸã‚’ç¯€ç´„ HTTP Keepalive
tvsk 2020/12/31
nginx ç‹¬è‡ªã®ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã‚³ãƒ¼ãƒ‰ 444ã€‚

nginx

http
ãƒªãƒ³ã‚¯
Top IaC,Kubernetes,CI/CD,SecOps Services by DevOpsHarbor
tvsk 2020/12/30
nginx

ubuntu

guide

article
ãƒªãƒ³ã‚¯
NGINXã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã‚’ã‚¹ãƒ¬ãƒƒãƒ‰ãƒ—ãƒ¼ãƒ«ã§9å€ã«ã™ã‚‹
ã¯ã˜ã‚ã« NGINXãŒæŽ¥ç¶šå‡¦ç†ã«éžåŒæœŸã‹ã¤ã‚¤ãƒ™ãƒ³ãƒˆé§†å‹•ã®ã‚¢ãƒ—ãƒãƒ¼ãƒã‚’ç”¨ã„ã¦ã„ã‚‹ã“ã¨ã¯ã€ã‚ˆãçŸ¥ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ã¤ã¾ã‚Šï¼ˆå¾“æ¥åž‹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã®ã‚µãƒ¼ãƒã®ã‚ˆã†ã«ï¼‰ã€å°‚ç”¨ãƒ—ãƒã‚»ã‚¹ã‚„ãƒªã‚¯ã‚¨ã‚¹ãƒˆã”ã¨ã®ã‚¹ãƒ¬ãƒƒãƒ‰ã‚’ä»–ã«ä½œã‚‹ã“ã¨ãªãã€ä¸€ã¤ã®ãƒ¯ãƒ¼ã‚«ãƒ¼ãƒ—ãƒã‚»ã‚¹ã§è¤‡æ•°ã®æŽ¥ç¶šã¨ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å‡¦ç†ã§ãã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã‚Œã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã«ã€NGINXã¯ã‚½ã‚±ãƒƒãƒˆã‚’ãƒŽãƒ³ãƒ–ãƒãƒƒã‚ãƒ³ã‚°ãƒ¢ãƒ¼ãƒ‰ã§å®Ÿè¡Œã—ã€epollã‚„kqueueã¨ã„ã£ãŸåŠ¹çŽ‡çš„ãªãƒ¡ã‚½ãƒƒãƒ‰ã‚’ç”¨ã„ã¦ã„ã¾ã™ã€‚ å…¨è² è·ã®ã‹ã‹ã‚‹ãƒ—ãƒã‚»ã‚¹ã¯å°‘ãªãï¼ˆé€šå¸¸1CPUã‚³ã‚¢ã”ã¨ã«1ã¤ã®ã¿ï¼‰ä¸€å®šã®ãŸã‚ã€æ¶ˆè²»ã•ã‚Œã‚‹ãƒ¡ãƒ¢ãƒªã¯å°‘ãªãæ¸ˆã¿ã€ã‚¿ã‚¹ã‚¯åˆ‡ã‚Šæ›¿ãˆã®ãŸã‚ã«CPUã‚µã‚¤ã‚¯ãƒ«ãŒç„¡é§„é£ã„ã•ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã®ã‚¢ãƒ—ãƒãƒ¼ãƒã®ãƒ¡ãƒªãƒƒãƒˆã¯ã€NGINXã®å®Ÿä¾‹ã‚’é€šã—ã¦ã‚ˆãçŸ¥ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚NGINXã¯ã€ä½•ç™¾ä¸‡ã‚‚ã®åŒæ™‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚„ã‚¹ã‚±ãƒ¼ãƒ«ã‚’éžå¸¸ã«ã†ã¾ãå‡¦ç†ã—ã¾ã™ã€‚ å„ãƒ—ãƒã‚»ã‚¹ãŒè¿½åŠ ãƒ¡ãƒ¢ãƒªã‚’æ¶ˆè²»ã™ã‚‹ã€‚ã¾ãŸã€ãƒ—ãƒã‚»ã‚¹
tvsk 2020/12/30
"--with-threads" ãƒ¯ãƒ¼ã‚«ãƒ¼ã®å¤šé‡åŒ–

nginx

èªã¿ç‰©

æ—¥æœ¬èªž
ãƒªãƒ³ã‚¯
Nginxãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·+ URLæ›¸ãæ›ãˆ
tvsk 2020/12/29
åŒä¸€ãƒ›ã‚¹ãƒˆå†…ã§ã®è»¢é€ã™ã‚‹ã¨ãã®è¨å®šã®æ›¸ãæ–¹

nginx

rewrite
ãƒªãƒ³ã‚¯
anopara
çµ‚äº†ã®ãŠã—ã‚‰ã› ãƒ–ãƒã‚° anopara ã¯ 2022å¹´12æœˆ29æ—¥ ã”ã‚ã«é–‰éŽ–ã—ã¾ã—ãŸã€‚ å…ˆç”Ÿã®æ¬¡å›žä½œã«ã”æœŸå¾…ãã ã•ã„ã€‚ æ¬¡ã®ãƒ–ãƒã‚°ã¯å¤šåˆ†åŒã˜URLã§å†é–‹ã—ã¾ã™ã€‚ è©³ã—ã„ã“ã¨ãŒæ±ºã¾ã£ãŸã‚‰ã“ã¡ã‚‰ã«æ›¸ãã¾ã™ â†’ https://twitter.com/anoparanominal å‰µä½œé–¢é€£ã®æ´»å‹•ã¯ã“ã¡ã‚‰ â†’ https://y9ks.jp çµµã¨ã‹ â†’ https://twitter.com/yuri9000series
tvsk 2020/12/29
åŒä¸€ãƒ›ã‚¹ãƒˆå†…ã§ã®è»¢é€ã™ã‚‹ã¨ãã®è¨å®šã®æ›¸ãæ–¹

nginx

rewrite
ãƒªãƒ³ã‚¯
http://nginx.org/en/CHANGES
tvsk 2020/07/19
nginx ã®ãƒªãƒªãƒ¼ã‚¹ãƒã‚°ã€‚

nginx

history
ãƒªãƒ³ã‚¯
leaseweb
tvsk 2020/02/13
nginx

rtmp

guide
ãƒªãƒ³ã‚¯
è»½é‡é«˜é€ŸWebã‚µãƒ¼ãƒã®nginxã§é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ã¨ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«
nginxã¨ã¯ï¼Ÿ nginxã¯ãƒã‚·ã‚¢ã§é–‹ç™ºã•ã‚Œã¦ã„ã‚‹è»½é‡ã§é«˜é€ŸãªWebã‚µãƒ¼ãƒã§ã™ã€‚ ç¾åœ¨ã‚·ã‚§ã‚¢ã¯ 7% è¿‘ãã‚ã‚‹ã‚ˆã†ã§ã™ã€‚ã‚‚ã¡ã‚ã‚“Apacheã«æ¯”ã¹ã‚Œã°å°‘ãªã„ã§ã™ãŒã€Apache 55%ã€IIS 25%, nginx 7%ã§3ç•ªç›®ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹Webã‚µãƒ¼ãƒã«ãªã‚Šã¾ã™ã€‚ æ˜”ã¯ã€Pound+Lighttpd+Apacheã®çµ„ã¿åˆã‚ã›ã‚’ã‚ˆãä½¿ã£ã¦ã„ã¾ã—ãŸãŒã€ã“ã“æ•°å¹´ã¯nginx+Apacheã¨ã‹ã«ãªã‚Šã¾ã—ãŸã€‚ ä¸»ã«ã€é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’nginxãŒå—ã‘æŒã¡ã€PHPãªã©ã®å‹•çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯Apacheã«æ¸¡ã™å½¢ã«ãªã‚Šã¾ã™ã€‚Railsã‚’ä½¿ã†å ´åˆã¯ã€nginx+Unicornã®çµ„ã¿åˆã‚ã›ãŒå¤šã„ã§ã™ã€‚ ã„ã¾ã•ã‚‰ãªæ„Ÿã˜ã‚‚ã‚ã‚Šã¾ã™ãŒã€ã‚¤ãƒ³ãƒ•ãƒ©å‘¨ã‚Šã®è¦‹ç›´ã—ã‚‚å«ã‚ã¦ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’nginxã«ä»»ã›ã‚‹ nginx+Apacheã®å ´åˆã®è¨å®šã¯æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ï¼ˆnginxãŒport 80ã€Apac
tvsk 2011/12/26
apacheã¨é€£æºã•ã›ã‚‹ã¨ãã®è¨å®šæ–¹æ³•ãªã©

nginx

tips
ãƒªãƒ³ã‚¯
1