nginx之用户认证 | https | 监控状态界面

╰+攻爆jí腚メ 2022-11-26 07:38 514阅读 0赞

### nginx 用户认证 | https | 监控状态界面 ###

*  1.用户认证
 *  2.https
 *  3.开启状态界面
 *  4.监控状态界面
 *   *   *  4.1 监控requests状态
         *  4.2 监控Reading状态
         *  4.3 监控Writing状态

**nginx其他文章**：

[nginx介绍与使用][nginx]  
[nginx增加模块与修饰符使用][nginx 1]

<table> 
 <thead> 
  <tr> 
   <th>主机</th> 
   <th>IP</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>zyy(nginx)</td> 
   <td>192.168.30.132/24</td> 
  </tr> 
 </tbody> 
</table>

# 1.用户认证 #

## 密码是要加密的，使用htpasswd
    [root@zyy ~]# htpasswd -c -m /usr/local/nginx/conf/.user_auth_file zyy
                                                                       用户名
    
    
    
    [root@zyy ~]# cd /usr/local/nginx/conf/
    
    [root@zyy conf]# ls -a
    .user_auth_file
    
    
    
    
    创建测试页面
    [root@zyy ~]# cd /usr/local/nginx/html/
    [root@zyy html]# mkdir test
    
    [root@zyy html]# vim test/index.html 
    test
    
    
    
    
    
    [root@zyy conf]# vim /usr/local/nginx/conf/nginx.conf
    
     location /test { 
                auth_basic "hello world!" ;    #欢迎信息
                auth_basic_user_file "/usr/local/nginx/conf/.user_auth_file" ;   #用户信息所在位置
                root    html ;
                index   index.html;
              }

***验证***  
***http://192.168.30.132/test***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70]  
————————————————————————————————————————————  
   
   
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 1]  
————————————————————————————————————————————

# 2.https #

将证书放到同一个目录
    
    [root@zyy conf]# pwd
    /usr/local/nginx/conf
    
    
    [root@zyy conf]# ls ssl/
    server.crt   server.key
    
    
    
    
    取消ssl的注释
    [root@zyy conf]# vim /usr/local/nginx/conf/nginx.conf
    # HTTPS server
        # server { 
            listen       443 ssl;
            server_name  192.168.30.132;   ##改为本机地址
    
            ssl_certificate      /usr/local/nginx/conf/ssl/server.crt;      ##证书所在位置
            ssl_certificate_key  /usr/local/nginx/conf/ssl/server.key;     ##私钥所在位置
    
            ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;
    
            ssl_ciphers  HIGH:!aNULL:!MD5;
            ssl_prefer_server_ciphers  on;
    
            location / {                                 ##要做https的页面
                root   html;
                index  index.html index.htm;
            }
        }

***https://192.168.30.132***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 2]  
————————————————————————————————————————————

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 3]  
————————————————————————————————————————————

# 3.开启状态界面 #

*在zyy上部署zabbix*

<table> 
 <thead> 
  <tr> 
   <th>主机</th> 
   <th>IP</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>zyy(lnmp)</td> 
   <td>192.168.30.132/24</td> 
  </tr> 
  <tr> 
   <td>001(zabbix_agent)</td> 
   <td>192.168.30.244/24</td> 
  </tr> 
 </tbody> 
</table>

修改主配置和文件
    [root@001 ~]# vim /usr/local/nginx/conf/nginx.conf
    
    
    location /status { 
                stub_status on;          ##开启状态界面
                allow 192.168.30.0/24;      ##访问控制 只允许192.168.30.0网段访问
                deny all;                            ##其他全部拒绝
                root   html;
                index  index.html index.htm;
            }
    
    
    
    
    
    重新加载
    [root@001 conf]# nginx -s reload
    
    
    
    
    
    测试
    [root@zyy conf]# curl http://192.168.30.244/status
    Active connections: 1 
    server accepts handled requests
     10 10 8 
    Reading: 0 Writing: 1 Waiting: 0

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 4]  
————————————————————————————————————————————

<table> 
 <thead> 
  <tr> 
   <th>状态码</th> 
   <th>表示的意义</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>Active connections 2</td> 
   <td>当前所有处于打开状态的连接数</td> 
  </tr> 
  <tr> 
   <td>accepts</td> 
   <td>总共处理了多少个连接</td> 
  </tr> 
  <tr> 
   <td>handled</td> 
   <td>成功创建多少握手</td> 
  </tr> 
  <tr> 
   <td>requests</td> 
   <td>总共处理了多少个请求</td> 
  </tr> 
  <tr> 
   <td>Reading</td> 
   <td>nginx读取到客户端的Header信息数，表示正处于接收请求状态的连接数</td> 
  </tr> 
  <tr> 
   <td>Writing</td> 
   <td>nginx返回给客户端的Header信息数，表示请求已经接收完成，且正处于处理请求或发送响应的过程中的连接数</td> 
  </tr> 
  <tr> 
   <td>Waiting</td> 
   <td>开启keep-alive的情况下，这个值等于active - (reading + writing)，意思就是Nginx已处理完正在等候下一次请求指令的驻留连接</td> 
  </tr> 
 </tbody> 
</table>

**简单理解:**

***active connections     —     活跃的连接数量***

***accepts    —     总共处理了多少个连接***

***handled     —     成功创建多少次握手(中间没有失败)***

***requests     —     总共处理了个请求***

***reading    —     nginx正在读取客户端的连接数***

***writing    —     nginx正在响应数据到客户端的数量***

***waiting    —     开启 keep-alive 的情况下,这个值等于 active – (reading+writing), 意思就是 Nginx 已经处理完正在等候下一次请求指令的驻留连接***

# 4.监控状态界面 #

### 4.1 监控requests状态 ###

1.创建脚本目录
    [root@001 ~]# mkdir /scripts/
    
    
    
    
    
    2.编写脚本
    [root@001 scripts]# vim check_001_requests.sh 
    
    #!bin/bash
    
    requests=$(curl -s http://192.168.30.244/status | awk -F ' ' 'NR==3{print $3}')
    
    if [ $requests -gt 150 ];then     ##为了试验效果，大于150触发
        echo '1'
    else
        echo '0'
    
    fi
    
    
    
    
    
    
    3.将UnsafeUserParameters开启，并写key
    [root@001 ~]#  vim /usr/local/etc/zabbix_agentd.conf
    UnsafeUserParameters=1
    UserParameter=check_001_requests,/bin/bash  /scripts/check_001_requests.sh
    
    
    
    
    4.给执行权限
    [root@001 scripts]# chmod +x check_001_requests.sh
    
    
    
    
    
    4.重启服务
    [root@001 ~]# pkill zabbix
    [root@001 ~]# zabbix_agentd

***1.添加主机***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 5]  
   
   
***2.添加监控项***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 6]  
   
   
***3.添加触发器***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 7]

***4.添加媒介、用户、动作***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 8]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 9]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 10]  
   
   
***5.查看结果***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 11]  
   
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 12]

### 4.2 监控Reading状态 ###

1.编写脚本
    [root@001 scripts]# vim check_001_Reading.sh
    
    #!/bin/bash
    
    Reading=$(curl -s http://192.168.30.244/status | awk -F ' ' 'NR==4{print $2}')
    
    if [ $Reading -ge 0 ];then    ##为了试验效果，大于等于0触发
        echo '1' 
    else
        echo '0'
    fi
    
    
    
    
    
    2.执行权限
    [root@001 scripts]# chmod +x check_001_Reading.sh 
    
    
    
    
    
    3.写key
    [root@001 ~]# vim /usr/local/etc/zabbix_agentd.conf
    UserParameter=check_001_Reading,/bin/bash /scripts/check_001_Reading.sh
    
    
    
    
    4.重启服务
    [root@001 ~]# pkill zabbix
    [root@001 ~]# zabbix_agentd

***1.添加监控项***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 13]  
   
   
***2.添加触发器***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 14]

***3.查看结果***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 15]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 16]

### 4.3 监控Writing状态 ###

编写脚本
    [root@001 scripts]# vim check_001_Writing.sh
    
    #!/bin/bash
    
    Writing=$(curl -s http://192.168.30.244/status | awk -F ' ' 'NR==4{print $4}')
    if [ $Writing -ge 1 ];then     ##为了试验效果，大于等于1触发
        echo '1'
    else
        echo '0'
    fi
    
    
    
    
    2.给执行权限
    [root@001 scripts]# chmod +x check_001_Writing.sh 
    
    
    
    3.写key
    [root@001 ~]# vim /usr/local/etc/zabbix_agentd.conf
    UserParameter=check_001_Writing,/bin/bash /scripts/check_001_Writing.sh
    
    
    
    
    4.重启服务
    [root@001 ~]# pkill zabbix
    [root@001 ~]# zabbix_agentd

***1.添加监控项***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 17]  
   
   
***2.添加触发器***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 18]

***3.查看结果***  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 19]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 20]

[nginx]: https://blog.csdn.net/zyy130988/article/details/107854366https://blog.csdn.net/zyy130988/article/details/107854366
[nginx 1]: https://blog.csdn.net/zyy130988/article/details/107879250
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70]: /images/20221124/4a424cb7ddec49dcb1019338ca5b0129.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 1]: /images/20221124/fe5bb1937f954d91a2acfdd6b24f0c25.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 2]: /images/20221124/7e338f16e07440bbac5c44b17ca8f059.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 3]: /images/20221124/2f99b5097f17497b886050ca9a7eac18.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 4]: /images/20221124/c4b8737d0932452e8d4e03ee19e2cbe1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 5]: /images/20221124/e205b453410d4f68865e7c6e7c4d0633.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 6]: /images/20221124/207237d95d1a4bc99b11b8525614738e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 7]: /images/20221124/bedd35d7525a45f8acd9d05cfaf42196.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 8]: /images/20221124/adc7d40eae0b412590427d93298896d7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 9]: /images/20221124/f2c43782c6274c3194c1923a0a8a366c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 10]: /images/20221124/ee7a0d8267b7450287080284e6ca0bfb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 11]: /images/20221124/f17ac2d183a54467960e3f50e1540cef.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 12]: /images/20221124/fe655ae75a5c4368b66b05892d32298d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 13]: /images/20221124/a96cf5604e934145ac62d24b8fb826bc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 14]: /images/20221124/d991c8255826406e881ef6630ae043a4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 15]: /images/20221124/8ac9d78bf5b54bddbe6c1840c85d37be.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 16]: /images/20221124/56eb42df9e9640feb064d007ef7e3be6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 17]: /images/20221124/0891340cc5df41caba5c1f4fe1c8f3bd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 18]: /images/20221124/759299b3c0f1432b8450876267bf63c8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 19]: /images/20221124/a2ba065767cf45cea95d28b79fd8d347.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3p5eTEzMDk4OA_size_16_color_FFFFFF_t_70 20]: /images/20221124/6a7f479cf0e2446abe0451dd9803eab2.png