30s 就可以掌握的 Nginx 片段

1
2
3
4
5
6
7

if ($request_method = OPTIONS ) {
    add_header "Access-Control-Allow-Origin"  *;
    add_header "Access-Control-Allow-Methods" "GET, POST, OPTIONS, HEAD";
    add_header "Access-Control-Allow-Headers" "Authorization, Origin, X-Requested-With, Content-Type, Accept";
    add_header 'Access-Control-Max-Age' 600;
    return 200;
}

1
2
3
4
5
6
7
8
9

http 
{
  include       conf/mime.types;
  gzip on;
  gzip_min_length  1000;
  gzip_buffers     4 8k;   
  gzip_http_version 1.1; 
  gzip_types       text/plain application/x-javascript text/css application/xml application/javascript application/json;
}

1
2
3
4

location /foo {
    proxy_pass http://localhost:4000;
    proxy_cookie_path /foo "/; SameSite=None; HTTPOnly; Secure";
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

http {
  # 指定一个 upstream 负载均衡组，名称为 evalue
  upstream evalue {
    # 定义组内的节点服务，如果不加 weight 参数，默认就是 Round Robin ，加上了 weight 参数就是加权轮询
    server 192.168.90.100:9999 weight=100;
    server 192.168.90.101:9999 weight=100;
    
    # interval=3000 检查间隔 3 秒 ， rise=3 连续成功3次认为服务健康 ， fall=5 连续失败 5 次认为服务不健康 ， timeout=3000 健康检查的超时时间为 3 秒 ， type=http  检查类型 http
    check interval=3000 rise=3 fall=5 timeout=3000 type=http;
    
    # check_http_send 设定检查的行为：请求类型 url 请求协议 -> HEAD /api/v1/health HTTP/1.0         
    check_http_send "HEAD /api/v1/health HTTP/1.0\r\n\r\n";
    
    # 设定认为返回正常的响应状态       
    check_http_expect_alive http_2xx http_3xx;
  }
}

1
2
3
4
5

server {
    listen 80;
    server_name *.jartto.com;
    root /var/www/jartto.com;
}

1
2
3
4
5

server {
    listen 80;
    server_name *.sub.jartto.com;
    root /var/www/sub.jartto.com;
}

1
2
3
4
5
6
7
8
9
10

location ^~ /habo/gid {
        add_header Cache-Control no-store;
        default_type application/javascript;
        set $unionId $cookie_GID;
        if ($unionId = "") {
                set $unionId $request_id;
                add_header Set-Cookie "GID=${unionId};path=/habo/;max-age=${GID_MAX_AGE}";
        }
        return 200 "document.cookie='GID=${unionId};path=/;max-age=${GID_MAX_AGE}'";
    }

1
2
3
4
5
6
7
8
9
10

http {
    limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;

    server {
        location / {
            limit_req zone=one burst=5;
            proxy_pass http://backend;
        }
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

map $http_baggage_flow  $plimit {
 "ptest" $server_name;
 default "";
}


limit_req_zone $plimit zone=prelimit:10m rate=600r/s;
 server {
  listen       443 ssl;
  server_name   m.gaotu100.com;
  limit_req zone=prelimit  nodelay;
  limit_req_status 530;

  location = /530.html {
      default_type application/json;
      return 200 '{"status" : 530}';
  }
  ...
}

1
2
3
4
5
6
7
8
9

location / {
　　root html;
　　try_files $uri $uri/ @router;
　　index index.html index.htm;

}
location @router {
　　rewrite ^.*$ /index.html last;
}

1
2
3
4
5
6
7
8

map $http_cookie $m_upstream {
    ~*baggage-version=isolute-feat-.*$ al-bj-sre-k8s-test-istio-gateway;
    default test.jartto.com;
}

upstream al-bj-sre-k8s-test-istio-gateway {
    server 47.95.128.11:80;
}

1
2
3
4

map $http_accept $webp_suffix {
    default   "";
    "~*webp"  ".webp";
}

1
2
3
4
5
6
7

location  ~* ^/_nuxt/img/(.+\.png|jpe?g)$ {
    rewrite ^/_nuxt/img/(.+\.png|jpe?g)$ /$1 break;
    root /apps/srv/instance/test-webp.gaotu100.com/.nuxt/dist/client/img/;
    add_header Vary Accept;
    try_files $uri$webp_suffix $uri =404;
    expires 30d;
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

server {
    listen 80;
    server_name jartto.com www.jartto.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name jartto.com www.jartto.com;

    ssl_certificate /path/to/jartto.crt;
    ssl_certificate_key /path/to/jartto.key;
    # Other SSL-related settings go here
    # Other server block settings go here
}

1
2
3
4
5
6
7
8
9
10
11
12

server {
  listen       80;        
  server_name  *.jartto.com;
  
  # 图片防盗链
  location ~* \.(gif|jpg|jpeg|png|bmp|swf)$ {
    valid_referers none blocked server_names ~\.google\. ~\.baidu\. *.qq.com;  # 只允许本机 IP 外链引用
    if ($invalid_referer){
      return 403;
    }
  }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

http {
  server {
    listen 80;
    server_name www.jartto.com;
    root /var/www/jartto.com;

    # other server configuration directives
  }

  server {
    listen 80;
    server_name www.another-jartto.com;
    root /var/www/another-jartto.com;

    # other server configuration directives
  }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

upstream backends {
    zone zone_for_backends 1m;
    server 127.0.0.1:6001;
    server 127.0.0.1:6002;
    server 127.0.0.1:6003;
}


server {
    listen 6000;

    location /dynamic {
      allow 127.0.0.1;
      deny all;
      dynamic_upstream;
    }


    location / {
      proxy_pass http://backends;
    }
}

1
2
3
4

$ curl "http://127.0.0.1:6000/dynamic?upstream=zone_for_backends&verbose="
server 127.0.0.1:6001 weight=1 max_fails=1 fail_timeout=10;
server 127.0.0.1:6002 weight=1 max_fails=1 fail_timeout=10;
server 127.0.0.1:6003 weight=1 max_fails=1 fail_timeout=10;