On Sat, Nov 27, 2010 at 8:33 PM, Delta Yeh <delta.yeh@gmail.com> wrote:
> Can we use ngx_lua to do access control? security check ?
> I mean some feature of mod_security.
>
We're already using ngx_lua to do most of the access control in
production (the other part is done by iptables for sure ;)).
There's mainly 3 ways:
1. Use set_by_lua directly, combined with the standard ngx_rewrite
module if your checking logic does not require network I/O.
2. Use Maxim Dounin's ngx_http_auth_request module to issue a
subrequest to a location configured by "content_by_lua" if your checks
require I/O.
3. If your content handler is already content_by_lua, just use normal
Lua code to do access control there.
Cheers,
-agentzh
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://nginx.org/mailman/listinfo/nginx-devel