https://tinychen.com/tags/nginx/Recent content in Nginx on TinyChen's BlogHugozh-cnWed, 22 Jul 2026 23:30:00 +0800https://tinychen.com/20240301-nginx-compile-lua-module/Fri, 01 Mar 2024 11:00:00 +0800https://tinychen.com/20240301-nginx-compile-lua-module/<p>本文主要记录在 Nginx 官方源码基础上，编译并静态链入 OpenResty 生态的 <code>lua-nginx-module</code>（及 NDK、LuaJIT）的过程，便于在已有 Nginx 编译参数体系中启用 Lua。</p>https://tinychen.com/20210712-nginx-12-triple-rate-limiting-limit-rate/Mon, 12 Jul 2021 15:00:00 +0800https://tinychen.com/20210712-nginx-12-triple-rate-limiting-limit-rate/<p>本文主要是对nginx官方<a href="http://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate">limit_rate</a>相关指令的用法解释和一些个人理解，<code>limit_rate</code>主要用于限制用户和服务器之间传输的字节数，最常用的场景可能就是下载/上传限速，在如今用户网速普遍大幅提升的情况下，对于一些文件传输、视频流媒体传输等服务还是有着一定的应用场景的。</p>https://tinychen.com/20210708-nginx-11-triple-rate-limiting-limit-conn/Thu, 08 Jul 2021 18:00:00 +0800https://tinychen.com/20210708-nginx-11-triple-rate-limiting-limit-conn/<p>本文主要是对nginx官方<a href="https://nginx.org/en/docs/http/ngx_http_limit_conn_module.html">limit_conn</a>相关模块的配置用法和一些个人理解，<code>limit_conn</code>主要用于限制用户的连接数，在如今多线程并发请求大量普及的情况下，对于一些特殊的场景还是有着一定的用处的。</p>https://tinychen.com/20210616-nginx-10-triple-rate-limiting-limit-req/Wed, 16 Jun 2021 12:00:00 +0800https://tinychen.com/20210616-nginx-10-triple-rate-limiting-limit-req/<p>本文主要是对nginx官方<code>limit_req</code>相关模块的限速原理的解释和一些个人理解，主要参考的文章为<a href="https://www.nginx.com/blog/rate-limiting-nginx/"><code>Rate Limiting with NGINX and NGINX Plus</code></a>和nginx的<a href="https://nginx.org/en/docs/http/ngx_http_limit_req_module.html"><code>ngx_http_limit_req_module</code></a>的详细说明。</p>https://tinychen.com/20210527-nginx-09-if-is-evil-in-location/Thu, 27 May 2021 12:00:00 +0800https://tinychen.com/20210527-nginx-09-if-is-evil-in-location/<p>本文主要是对nginx官方的文章<a href="https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/"><code>If is Evil... when used in location context</code></a>的翻译和理解。</p>https://tinychen.com/20210317-openresty-01-introduction-and-installation/Wed, 17 Mar 2021 15:00:00 +0800https://tinychen.com/20210317-openresty-01-introduction-and-installation/<p>本文主要对openresty做入门简介以及初始化的安装配置介绍。</p>https://tinychen.com/20210304-nginx-08-ssl-client-certificate/Thu, 04 Mar 2021 15:00:00 +0800https://tinychen.com/20210304-nginx-08-ssl-client-certificate/<p>本文主要介绍如何使用给nginx服务添加客户端证书认证从而实现双向加密。</p> <p>对于一般的https网站来说，实际上https所使用的证书是属于单向验证，即客户端单向验证服务器的安全性，而服务器端是没有对客户端的身份进行验证的。关于https的原理，可以查看这篇文章：<a href="https://tinychen.com/20200602-encryption-intro/">《SSL/TLS、对称加密和非对称加密和TLSv1.3》</a></p> <p>如果自己部署了一些安全性较高的网站不希望被其他人随意访问，就可以尝试部署https的双向认证，对客户端也添加证书认证。本文将会使用openssl自签证书来完成最简单的一个https双向认证。</p>https://tinychen.com/20201111-http2-header-compression-tuning/Wed, 11 Nov 2020 11:00:00 +0800https://tinychen.com/20201111-http2-header-compression-tuning/<p>本文主要记录 HTTP/2 升级后出现的偶发“网络连接已断开”类前端告警，以及对应的 Nginx HPACK 相关参数调优过程。</p>https://tinychen.com/20200918-h2-tls13-nginx-0rtt/Fri, 18 Sep 2020 11:00:00 +0800https://tinychen.com/20200918-h2-tls13-nginx-0rtt/<p>本文主要记录在 Nginx 上开启 TLSv1.3 <code>0-RTT</code>（<code>ssl_early_data</code>）后，首页被下游返回 403 的排查过程，以及 <code>proxy_set_header</code> 继承规则与多层代理架构下的取舍。</p>https://tinychen.com/20200821-nginx-quic-compile-to-implement-http3/Fri, 21 Aug 2020 15:00:00 +0800https://tinychen.com/20200821-nginx-quic-compile-to-implement-http3/<p>本文主要介绍使用nginx-quic和boringssl项目来对服务器进行升级支持HTTP/3协议。</p>https://tinychen.com/20200806-h2-tls13-nginx-ssl-ciphers/Thu, 06 Aug 2020 11:00:00 +0800https://tinychen.com/20200806-h2-tls13-nginx-ssl-ciphers/<p>本文主要记录在 Nginx 上同时开启 HTTP/2 与 TLSv1.3 后，部分浏览器出现 <code>ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY</code> 的排查过程，以及如何调整 <code>ssl_ciphers</code> 优先级来兼顾兼容性与安全性。</p>https://tinychen.com/20200608-http2-introduction/Mon, 08 Jun 2020 10:00:00 +0800https://tinychen.com/20200608-http2-introduction/<p>本文主要介绍了HTTP2相对于HTTP1.1的一些改进和新特性。</p>https://tinychen.com/20200519-nginx-07-enable-http2-tls13/Tue, 19 May 2020 10:00:00 +0800https://tinychen.com/20200519-nginx-07-enable-http2-tls13/<p>本文主要介绍如何使用编译的方式升级openssl库和nginx用于支持HTTP2和TLSv1.3并且介绍了一些简单的提高nginx安全性的配置。</p>https://tinychen.com/20200323-nginx-06-sendfile/Mon, 23 Mar 2020 14:00:00 +0800https://tinychen.com/20200323-nginx-06-sendfile/<p>nginx中http模块中的sendfile指令及其原理。</p>https://tinychen.com/20200320-nginx-05-upstream-keepalive/Fri, 20 Mar 2020 16:00:00 +0800https://tinychen.com/20200320-nginx-05-upstream-keepalive/<p>nginx中http模块使用http长连接的相关配置（主要是keepalive指令）和http长连接的原理解释。</p>https://tinychen.com/20200320-nginx-04-http-map-module/Fri, 20 Mar 2020 10:00:00 +0800https://tinychen.com/20200320-nginx-04-http-map-module/<p>nginx的map模块配置语法。</p>https://tinychen.com/20200319-nginx-03-load-balancing/Thu, 19 Mar 2020 10:00:00 +0800https://tinychen.com/20200319-nginx-03-load-balancing/<p>nginx的负载均衡配置，包括http、tcp和udp负载均衡，以及<code>Round robin</code>、<code>Least connections</code>、<code>Least time</code>（Nginx Plus专属）、<code>Generic hash</code>、<code>Random</code>、<code>IP hash</code>（HTTP模块专属）的原理分析。</p>https://tinychen.com/20200318-nginx-02-smooth-weighted-round-robin-balancing/Wed, 18 Mar 2020 17:00:00 +0800https://tinychen.com/20200318-nginx-02-smooth-weighted-round-robin-balancing/<p>nginx的upstream模块中的加权轮询负载均衡的算法原理。</p>https://tinychen.com/20200317-nginx-01-base-conf-static-web/Tue, 17 Mar 2020 11:00:00 +0800https://tinychen.com/20200317-nginx-01-base-conf-static-web/<p>nginx的编译安装、添加模块、yum安装、简单配置、默认目录作用和静态页面配置。</p>https://tinychen.com/20191123-lnmp-install-wordpress/Sat, 23 Nov 2019 15:00:00 +0800https://tinychen.com/20191123-lnmp-install-wordpress/<p>CentOS7中搭建nginx+MySQL8+PHP7的LNMP环境，并且安装wordpress来作为网站服务器。</p>https://tinychen.com/20190829-http-to-nginx/Thu, 29 Aug 2019 15:00:00 +0800https://tinychen.com/20190829-http-to-nginx/<p>记录一下个人博客的web服务器从apache换成nginx的过程。</p>