博客
关于我
WAF安全应用防火墙(nginx+lua)
阅读量:87 次
发布时间:2019-02-26

本文共 2410 字,大约阅读时间需要 8 分钟。

Nginx 403 ? 404 ?????? WAF ????

Nginx ??????? HTTP ?????????????????? web ???????? Nginx????????? 403 ? 404 ??????????Nginx ??????? Lua ????????? web ??????WAF???????????????? Nginx ? 403 ? 404 ????????? Nginx ?? Lua ????? WAF ??????


Nginx ?? 403 ???

??? Nginx ?? 403 ?????????????????????????????????????

set $block_user_agent 0;if ($http_user_agent ~ "Wget|AgentBench") {    set $block_user_agent 1;}if ($block_user_agent = 1) {    return 403;}

??????????? "Wget" ? "AgentBench" ?????????? 403 ????


Nginx ?? 404 ???

??? Nginx ?? 404 ????????? Nginx ???????????????????????????????

location ~* "\.(sql|bak|zip|tgz|tar.gz)" {    return 404;}

??????????? .sql?.bak?.zip?.tgz ? .tar.gz ???????????? 404 ????


Nginx ?? Lua ???? WAF ??

Nginx ?????????????????? WAF ????????? Nginx ? Lua ??????????????

????

??????? Nginx ? PCRE ???????????

# ?? Nginx ??wget http://nginx.org/download/nginx-1.9.4.tar.gz# ?? PCRE ??wget https://ftp.pcre.org/pub/pcre/pcre-8.40.tar.gz# ?? LuaJIT ? Nginx ??????NDK?wget http://luajit.org/download/LuaJIT-2.0.3.tar.gzwget https://github.com/simpl/ngx_devel_kit/archive/v0.2.19.tar.gzwget https://github.com/openresty/lua-nginx-module/archive/v0.9.16.tar.gz# ?? Nginx ???????useradd -s /sbin/nologin -M www

????? LuaJIT ? Nginx ??

????? LuaJIT ??????

# ?? LuaJIT ??tar -zxvf LuaJIT-2.0.3.tar.gz# ?? Nginx ?????? Lua ??tar -zxvf ngx_devel_kit-0.2.19.tar.gztar -zxvf lua-nginx-module-0.9.16.tar.gz

?? LuaJIT ? Nginx

?? LuaJIT ? Nginx?

# ?? PCREtar -zxvf pcre-8.40.tar.gz# ?? Nginxtar -zxvf nginx-1.9.4.tar.gz# ?? Nginx ????cd nginx-1.9.4# ?? Nginx ????????export LUAJIT_LIB=/usr/local/libexport LUAJIT_INC=/usr/local/include/luajit-2.0# ?? Nginx ??????./configure --prefix=/usr/local/nginx --user=www --group=www \    --with-http_ssl_module --with-http_stub_status_module --with-file-aio --with-http_dav_module \    --add-module=../ngx_devel_kit-0.2.19/ --add-module=../lua-nginx-module-0.9.16/ \    --with-pcre=/usr/local/src/pcre-8.40# ????? Nginxmake -j2 && make install

??????

???? LuaJIT ??????

ln -s /usr/local/lib/libluajit-5.1.so.2 /lib64/libluajit-5.1.so.2

????

???????????? Nginx ??????????????

location /hello {    default_type 'text/plain';    content_by_lua 'ngx.say("hello, lua")';}

???????? Nginx ???

/usr/local/nginx-1.9.4/sbin/nginx -t/usr/local/nginx-1.9.4/sbin/nginx

??????????????? Nginx ? 403 ? 404 ??????????????? Lua ????????? WAF ??????????? WAF ???????????????????

转载地址:http://vomk.baihongyu.com/

你可能感兴趣的文章
Nacos在双击startup.cmd启动时提示:Unable to start embedded Tomcat
查看>>
Nacos安装教程(非常详细)从零基础入门到精通,看完这一篇就够了
查看>>
Nacos配置中心集群原理及源码分析
查看>>
nacos配置自动刷新源码解析
查看>>
Nacos集群搭建
查看>>
nacos集群搭建
查看>>
Navicat for MySQL 查看BLOB字段内容
查看>>
Neo4j电影关系图Cypher
查看>>
Neo4j的安装与使用
查看>>
Neo4j(2):环境搭建
查看>>
Neo私链
查看>>
nessus快速安装使用指南(非常详细)零基础入门到精通,收藏这一篇就够了
查看>>
Nessus漏洞扫描教程之配置Nessus
查看>>
Nest.js 6.0.0 正式版发布,基于 TypeScript 的 Node.js 框架
查看>>
NetApp凭借领先的混合云数据与服务把握数字化转型机遇
查看>>
NetBeans IDE8.0需要JDK1.7及以上版本
查看>>
netcat的端口转发功能的实现
查看>>
netfilter应用场景
查看>>
netlink2.6.32内核实现源码
查看>>
Netpas:不一样的SD-WAN+ 保障网络通讯品质
查看>>