CentOS 下nginx模块安装openssl和http_proxy_connect

迷南。 2022-11-05 08:37 14阅读 0赞

# 1 下载模块 #

ngx\_http\_proxy\_connect\_module  
[https://github.com/chobits/ngx\_http\_proxy\_connect\_module][https_github.com_chobits_ngx_http_proxy_connect_module]  
openssl  
[http://www.openssl.org/source/][http_www.openssl.org_source]  
友情提示：这些文件可以直接去官网下载，也可以点下面链接直接打包下载。  
[nginx-1.14.0&zlib-1.2.11&pcre-8.42][nginx-1.14.0_zlib-1.2.11_pcre-8.42]  
此外，如果想安装nginx-1.17.1或者需要数据库代理配置文件，可以下载下面资源。  
[nginx-1.17.1.tar.gz以及oracle代理nginx.conf配置文件][nginx-1.17.1.tar.gz_oracle_nginx.conf]

# 2 nginx安装 #

## 2.1 解压nginx： ##

tar -zxvf nginx-1.14.0.tar.gz

cd nginx-1.14.0/

## 2.2 打http\_proxy\_connect补丁 ##

patch -p1 < /extusr/software/nginx-install-package/ngx_http_proxy_connect_module-master/patch/proxy_connect_rewrite_1018.patch

再安装4个模块(pcre、zlib、openssl、http\_proxy\_connect)

./configure --prefix=/extusr/software/nginx --with-http_ssl_module --with-stream --with-pcre=/extusr/software/nginx-install-package/pcre-8.42 --with-zlib=/extusr/software/nginx-install-package/zlib-1.2.11 --with-openssl=/extusr/software/nginx-install-package/openssl-1.1.1i --add-module=/extusr/software/nginx-install-package/ngx_http_proxy_connect_module-master

## 2.3 安装nginx ##

make

make install

## 2.4 测试nginx是否安装成功 ##

nginx启动

cd /usr/local/nginx/sbin

./nginx

浏览器访问如：ip+端口 (默认80端口)

如果能正常显示nginx首页，则表示安装成功

nginx关闭

ps –ef|grep nginx

\#kill -QUIT 主进程号（上面ps命令看到的带master字样的进程号）

如果有安装keepalived，需要先关闭keepalived

sudo service keepalived stop

配置nginx.conf文件后需要重新加载配置文件

nginx -s reload

# 3 nginx安全配置 #

nginx.conf中server下添加如下配置

server_name 172.25.0.32;
            if ($http_Host != '172.25.0.32:9085'){ 
    		    return 403;
            }
            add_header X-Content-Type-Options: nosniff;
            add_header "X-XSS-Protection" "1; mode=block";
            add_header Content-Security-Policy "upgrade-insecure-requests;connect-src *";
            add_header X-Frame-Options SAMEORIGIN;

再添加默认server

server { 
           listen 9084 default;
           server_name _;
           location / { 
                return 403;
           }
    }

[https_github.com_chobits_ngx_http_proxy_connect_module]: https://github.com/chobits/ngx_http_proxy_connect_module
[http_www.openssl.org_source]: http://www.openssl.org/source/
[nginx-1.14.0_zlib-1.2.11_pcre-8.42]: https://download.csdn.net/download/zhuimeng_by/12347318
[nginx-1.17.1.tar.gz_oracle_nginx.conf]: https://download.csdn.net/download/zhuimeng_by/13198145