Welcome! Log In Create A New Profile

Advanced

Тюнинг nginx

July 01, 2011 10:54PM
Приветствую всех
VPS падает даже при зажатом F5, установлена Ubuntu 8.10
И хотелось бы хоть немного защититься от школоддоса
Помогите разобраться, Нашел статью Тюнинг nginx для защиты от ддос http://alug.org.ru/forum/viewtopic.php?id=283

1. в /etc/nginx/nginx.conf нужно полностью менять на предложенное? ведь у меня в nginx.conf что то про мои два домена написано:

user www-data;
worker_processes 1;

error_log off;
pid /var/run/nginx.pid;

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

access_log off;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;
tcp_nodelay on;

gzip on;

include /etc/nginx/sites-enabled/*;

client_max_body_size 16m;
log_format isp '$bytes_sent $request_length';
server {
listen 77.77.77.77:80;
server_name yousite.ru www.yousite.ru;
rewrite ^(/manager/.*)$ https://$host$1 permanent;
rewrite ^(/manager/.*)$ https://$host$1 permanent;
error_page 404 = @fallback;
location ~* ^/(webstat/|awstats|webmail/|myadmin/|manimg/) {
proxy_pass http://77.77.77.77:8080;
proxy_redirect http://yousite.ru:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
location / {
proxy_pass http://77.77.77.77:8080;
proxy_redirect http://yousite.ru:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar)$ {
root /var/www/p17267_you/data/www/yousite.ru;
access_log /var/www/httpd-logs/yousite.ru.access.log ;
access_log /var/www/nginx-logs/p17267_you isp;
}
location @fallback {
proxy_pass http://77.77.77.77:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
}
server {
listen 77.77.77.77:80;
server_name xenstyle.ru www.xensite.ru;
rewrite ^(/manager/.*)$ https://$host$1 permanent;
rewrite ^(/manager/.*)$ https://$host$1 permanent;
error_page 404 = @fallback;
location ~* ^/(webstat/|awstats|webmail/|myadmin/|manimg/) {
proxy_pass http://77.77.77.77:8080;
proxy_redirect http://xensite.ru:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
location / {
proxy_pass http://77.77.77.77:8080;
proxy_redirect http://xensite.ru:8080/ /;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar)$ {
root /var/www/p17267_you/data/www/xensite.ru;
access_log /dev/null ;
access_log /var/www/nginx-logs/p17267_you isp;
}
location @fallback {
proxy_pass http://77.77.77.77:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
}
}



2. /etc/nginx/proxy - тут тоже непонятно что куда?
3. сам скрипт тоже куда его? и как назвать

буду очень благодарен
Subject Author Posted

Тюнинг nginx

xganet July 01, 2011 10:54PM

Re: Тюнинг nginx

Un Lexx July 02, 2011 03:36AM

Re: Тюнинг nginx

sergey.kobzar July 02, 2011 09:04AM

Re: Тюнинг nginx

Andrey N. Oktyabrski July 17, 2011 07:24AM

Re: Тюнинг nginx

sergey.kobzar July 19, 2011 01:08PM

не работает proxy_cache

Eugene Toropov July 20, 2011 04:26AM

Re: не работает proxy_cache

Maxim Dounin July 20, 2011 04:58AM

Re: не работает proxy_cache

Eugene Toropov July 20, 2011 05:38AM

Re: Тюнинг nginx

xganet July 07, 2011 10:41PM

Re: Тюнинг nginx

xganet July 08, 2011 02:32AM

Re: Тюнинг nginx

Maxim Dounin July 11, 2011 09:02AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 233
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready