lua与openresty安装.docVIP

OpenResty(nginx扩展)实现防cc攻击 Nginx, 服务器安全 Add comments 文章目录 [隐藏]一、安装依赖 二、luajit安装 三、openresty安装 四、nginx配置 本文介绍使用openresty来实现防cc攻击的功能。openresty官网/cn/index.html。下面是防cc攻击的流程图。根据流程图，我们知道防cc攻击主要包括两部分，一是限制请求速度，二是给用户发送js跳转代码进行验证请求是否合法。 一、安装依赖 centos: yum install readline-devel pcre-devel openssl-devel ubuntu: apt-get install libreadline-dev libncurses5-dev libpcre3-dev libssl-dev perl 二、luajit安装 cd /tmp/ git clone /git/luajit-2.0.git cd luajit-2.0/ make make install ln -sf luajit-2.0.0-beta10 /usr/local/bin/luajit ln -sf /usr/local/lib/libluajit-5.1.so.2 /usr/lib/ 解压nginx_upstream_check_module-master /yaoweibin/nginx_upstream_check_module/archive/master.zip unzip nginx_upstream_check_module-master.zip（check interval=3000 rise=2 fall=5 timeout=1000 type=http; check_http_send GET / HTTP/1.0\r\n\r\n; #check_http_send GET /gy/test.jsp HTTP/1.0\r\n\r\n; check_http_expect_alive http_2xx http_3xx; （注检查后端server是否活着） openresty安装 wget /misc/nginx/ngx_openresty-1.2.tar.gz tar xzf ngx_openresty-tar.gz cd ngx_openresty-/bundle/nginx.1.2.3 patch -p1 /u1/zll/nginx_upstream_check_module-master/check_1.2.2+.patch (这里为什么要是1.2.2+呢，是因为nginx的版本是1.2.3版本的 ./configure --prefix=/usr/local/app/openresty --with-luajit --with-http_drizzle_module（如果用的是mysql数据库的话，那么这个模块不加） --with-http_iconv_module --add-module=/u1/zll/nginx_upstream_check_module-master/ make make install 如果加了--with-http_drizzle_module模块的话，那么在配置文件/etc/profile下要写下这两行 export LIBDRIZZLE_INC=/usr/local/drizzle/include/libdrizzle-1.0 export LIBDRIZZLE_LIB=/usr/local/drizzle/lib 五、nginx配置 nginx.conf: http{ [......] lua_shared_dict limit 10m; lua_shared_dict jsjump 10m; server { #lua_code_cache off; listen 80; server_name www.centos.bz; location / { default_type text/html; content_by_lua_file /usr/local/app/openresty/nginx/conf/lua; } location @cc { internal; root html; index index.html index.htm; } } } /usr/lo