nginx-ingress配置卷（ConfigMaps）nginx-configuration翻译

我不是女神ヾ 2022-12-27 06:23 134阅读 0赞

# ConfigMaps #

ConfigMap允许您将配置工件与图像内容分离，以使容器化的应用程序具有可移植性。

ConfigMap API资源将配置数据存储为键值对。该数据为Nginx控制器提供了系统组件的配置。

为了覆盖[config.go中][config.go]所示的nginx-controller配置值，您可以将键值对添加到config-map的data部分。例如：

data:
      map-hash-bucket-size: "128"
      ssl-protocols: SSLv2

**重要**

ConfigMap中的键和值只能是字符串。这意味着我们想要一个带有布尔值的值，我们需要用引号将它们引号，例如“ true”或“ false”。数字也一样，例如“ 100”。

可以将Slice类型（以下定义为`[]string`或`[]int`）作为逗号分隔的字符串。

## Configuration options ##

下表显示了配置选项的名称，类型和默认值：

<table> 
 <thead> 
 <tr> 
 <th>name</th> 
 <th>type</th> 
 <th>default</th> 
 </tr> 
 </thead> 
 <tbody> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#add-headers" rel="nofollow">add-headers</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#allow-backend-server-header" rel="nofollow">allow-backend-server-header</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hide-headers" rel="nofollow">hide-headers</a></td> 
 <td>string array</td> 
 <td>empty</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-params" rel="nofollow">access-log-params</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-path" rel="nofollow">access-log-path</a></td> 
 <td>string</td> 
 <td>"/var/log/nginx/access.log"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-access-log-path" rel="nofollow">http-access-log-path</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#stream-access-log-path" rel="nofollow">stream-access-log-path</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-access-log-for-default-backend" rel="nofollow">enable-access-log-for-default-backend</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-path" rel="nofollow">error-log-path</a></td> 
 <td>string</td> 
 <td>"/var/log/nginx/error.log"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-modsecurity" rel="nofollow">enable-modsecurity</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#modsecurity-snippet" rel="nofollow">modsecurity-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-owasp-modsecurity-crs" rel="nofollow">enable-owasp-modsecurity-crs</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-buffer-size" rel="nofollow">client-header-buffer-size</a></td> 
 <td>string</td> 
 <td>"1k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-timeout" rel="nofollow">client-header-timeout</a></td> 
 <td>int</td> 
 <td>60</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-buffer-size" rel="nofollow">client-body-buffer-size</a></td> 
 <td>string</td> 
 <td>"8k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-timeout" rel="nofollow">client-body-timeout</a></td> 
 <td>int</td> 
 <td>60</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-access-log" rel="nofollow">disable-access-log</a></td> 
 <td>bool</td> 
 <td>false</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6" rel="nofollow">disable-ipv6</a></td> 
 <td>bool</td> 
 <td>false</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6-dns" rel="nofollow">disable-ipv6-dns</a></td> 
 <td>bool</td> 
 <td>false</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-underscores-in-headers" rel="nofollow">enable-underscores-in-headers</a></td> 
 <td>bool</td> 
 <td>false</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-ocsp" rel="nofollow">enable-ocsp</a></td> 
 <td>bool</td> 
 <td>false</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ignore-invalid-headers" rel="nofollow">ignore-invalid-headers</a></td> 
 <td>bool</td> 
 <td>true</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#retry-non-idempotent" rel="nofollow">retry-non-idempotent</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-level" rel="nofollow">error-log-level</a></td> 
 <td>string</td> 
 <td>"notice"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-field-size" rel="nofollow">http2-max-field-size</a></td> 
 <td>string</td> 
 <td>"4k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-header-size" rel="nofollow">http2-max-header-size</a></td> 
 <td>string</td> 
 <td>"16k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-requests" rel="nofollow">http2-max-requests</a></td> 
 <td>int</td> 
 <td>1000</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-concurrent-streams" rel="nofollow">http2-max-concurrent-streams</a></td> 
 <td>int</td> 
 <td>1000</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts" rel="nofollow">hsts</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-include-subdomains" rel="nofollow">hsts-include-subdomains</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-max-age" rel="nofollow">hsts-max-age</a></td> 
 <td>string</td> 
 <td>"15724800"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-preload" rel="nofollow">hsts-preload</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive" rel="nofollow">keep-alive</a></td> 
 <td>int</td> 
 <td>75</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive-requests" rel="nofollow">keep-alive-requests</a></td> 
 <td>int</td> 
 <td>100</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#large-client-header-buffers" rel="nofollow">large-client-header-buffers</a></td> 
 <td>string</td> 
 <td>"4 8k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-escape-json" rel="nofollow">log-format-escape-json</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-upstream" rel="nofollow">log-format-upstream</a></td> 
 <td>string</td> 
 <td><code>$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_length $request_time [$proxy_upstream_name] [$proxy_alternative_upstream_name] $upstream_addr $upstream_response_length $upstream_response_time $upstream_status $req_id</code></td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-stream" rel="nofollow">log-format-stream</a></td> 
 <td>string</td> 
 <td><code>[$remote_addr] [$time_local] $protocol $status $bytes_sent $bytes_received $session_time</code></td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-multi-accept" rel="nofollow">enable-multi-accept</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-connections" rel="nofollow">max-worker-connections</a></td> 
 <td>int</td> 
 <td>16384</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-open-files" rel="nofollow">max-worker-open-files</a></td> 
 <td>int</td> 
 <td>0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-hash-bucket-size" rel="nofollow">map-hash-bucket-size</a></td> 
 <td>int</td> 
 <td>64</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#nginx-status-ipv4-whitelist" rel="nofollow">nginx-status-ipv4-whitelist</a></td> 
 <td>[]string</td> 
 <td>"127.0.0.1"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#nginx-status-ipv6-whitelist" rel="nofollow">nginx-status-ipv6-whitelist</a></td> 
 <td>[]string</td> 
 <td>"::1"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-real-ip-cidr" rel="nofollow">proxy-real-ip-cidr</a></td> 
 <td>[]string</td> 
 <td>"0.0.0.0/0"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-set-headers" rel="nofollow">proxy-set-headers</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-max-size" rel="nofollow">server-name-hash-max-size</a></td> 
 <td>int</td> 
 <td>1024</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-bucket-size" rel="nofollow">server-name-hash-bucket-size</a></td> 
 <td>int</td> 
 <td><code>&lt;size of the processor’s cache line&gt;</code></td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-max-size" rel="nofollow">proxy-headers-hash-max-size</a></td> 
 <td>int</td> 
 <td>512</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-bucket-size" rel="nofollow">proxy-headers-hash-bucket-size</a></td> 
 <td>int</td> 
 <td>64</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#plugins" rel="nofollow">plugins</a></td> 
 <td>[]string</td> 
 <td>&nbsp;</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#reuse-port" rel="nofollow">reuse-port</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-tokens" rel="nofollow">server-tokens</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ciphers" rel="nofollow">ssl-ciphers</a></td> 
 <td>string</td> 
 <td>"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ecdh-curve" rel="nofollow">ssl-ecdh-curve</a></td> 
 <td>string</td> 
 <td>"auto"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-dh-param" rel="nofollow">ssl-dh-param</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-protocols" rel="nofollow">ssl-protocols</a></td> 
 <td>string</td> 
 <td>"TLSv1.2 TLSv1.3"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache" rel="nofollow">ssl-session-cache</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache-size" rel="nofollow">ssl-session-cache-size</a></td> 
 <td>string</td> 
 <td>"10m"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-tickets" rel="nofollow">ssl-session-tickets</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-ticket-key" rel="nofollow">ssl-session-ticket-key</a></td> 
 <td>string</td> 
 <td><code>&lt;Randomly Generated&gt;</code></td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-timeout" rel="nofollow">ssl-session-timeout</a></td> 
 <td>string</td> 
 <td>"10m"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-buffer-size" rel="nofollow">ssl-buffer-size</a></td> 
 <td>string</td> 
 <td>"4k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-proxy-protocol" rel="nofollow">use-proxy-protocol</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-protocol-header-timeout" rel="nofollow">proxy-protocol-header-timeout</a></td> 
 <td>string</td> 
 <td>"5s"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-gzip" rel="nofollow">use-gzip</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip" rel="nofollow">use-geoip</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip2" rel="nofollow">use-geoip2</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-brotli" rel="nofollow">enable-brotli</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-level" rel="nofollow">brotli-level</a></td> 
 <td>int</td> 
 <td>4</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-types" rel="nofollow">brotli-types</a></td> 
 <td>string</td> 
 <td>"application/xml+rss application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/javascript text/plain text/x-component"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-http2" rel="nofollow">use-http2</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-level" rel="nofollow">gzip-level</a></td> 
 <td>int</td> 
 <td>1</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-types" rel="nofollow">gzip-types</a></td> 
 <td>string</td> 
 <td>"application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/javascript text/plain text/x-component"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-processes" rel="nofollow">worker-processes</a></td> 
 <td>string</td> 
 <td><code>&lt;Number of CPUs&gt;</code></td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-cpu-affinity" rel="nofollow">worker-cpu-affinity</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-shutdown-timeout" rel="nofollow">worker-shutdown-timeout</a></td> 
 <td>string</td> 
 <td>"240s"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#load-balance" rel="nofollow">load-balance</a></td> 
 <td>string</td> 
 <td>"round_robin"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-bucket-size" rel="nofollow">variables-hash-bucket-size</a></td> 
 <td>int</td> 
 <td>128</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-max-size" rel="nofollow">variables-hash-max-size</a></td> 
 <td>int</td> 
 <td>2048</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-connections" rel="nofollow">upstream-keepalive-connections</a></td> 
 <td>int</td> 
 <td>320</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-timeout" rel="nofollow">upstream-keepalive-timeout</a></td> 
 <td>int</td> 
 <td>60</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-requests" rel="nofollow">upstream-keepalive-requests</a></td> 
 <td>int</td> 
 <td>10000</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-zone-variable" rel="nofollow">limit-conn-zone-variable</a></td> 
 <td>string</td> 
 <td>"$binary_remote_addr"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-timeout" rel="nofollow">proxy-stream-timeout</a></td> 
 <td>string</td> 
 <td>"600s"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream" rel="nofollow">proxy-stream-next-upstream</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-timeout" rel="nofollow">proxy-stream-next-upstream-timeout</a></td> 
 <td>string</td> 
 <td>"600s"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-tries" rel="nofollow">proxy-stream-next-upstream-tries</a></td> 
 <td>int</td> 
 <td>3</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-responses" rel="nofollow">proxy-stream-responses</a></td> 
 <td>int</td> 
 <td>1</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#bind-address" rel="nofollow">bind-address</a></td> 
 <td>[]string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-forwarded-headers" rel="nofollow">use-forwarded-headers</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-real-ip" rel="nofollow">enable-real-ip</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#forwarded-for-header" rel="nofollow">forwarded-for-header</a></td> 
 <td>string</td> 
 <td>"X-Forwarded-For"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#compute-full-forwarded-for" rel="nofollow">compute-full-forwarded-for</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-add-original-uri-header" rel="nofollow">proxy-add-original-uri-header</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#generate-request-id" rel="nofollow">generate-request-id</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-opentracing" rel="nofollow">enable-opentracing</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-operation-name" rel="nofollow">opentracing-operation-name</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-location-operation-name" rel="nofollow">opentracing-location-operation-name</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-host" rel="nofollow">zipkin-collector-host</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-port" rel="nofollow">zipkin-collector-port</a></td> 
 <td>int</td> 
 <td>9411</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-service-name" rel="nofollow">zipkin-service-name</a></td> 
 <td>string</td> 
 <td>"nginx"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-sample-rate" rel="nofollow">zipkin-sample-rate</a></td> 
 <td>float</td> 
 <td>1.0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-host" rel="nofollow">jaeger-collector-host</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-port" rel="nofollow">jaeger-collector-port</a></td> 
 <td>int</td> 
 <td>6831</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-service-name" rel="nofollow">jaeger-service-name</a></td> 
 <td>string</td> 
 <td>"nginx"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-type" rel="nofollow">jaeger-sampler-type</a></td> 
 <td>string</td> 
 <td>"const"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-param" rel="nofollow">jaeger-sampler-param</a></td> 
 <td>string</td> 
 <td>"1"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-host" rel="nofollow">jaeger-sampler-host</a></td> 
 <td>string</td> 
 <td>"http://127.0.0.1"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-port" rel="nofollow">jaeger-sampler-port</a></td> 
 <td>int</td> 
 <td>5778</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-trace-context-header-name" rel="nofollow">jaeger-trace-context-header-name</a></td> 
 <td>string</td> 
 <td>uber-trace-id</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-debug-header" rel="nofollow">jaeger-debug-header</a></td> 
 <td>string</td> 
 <td>uber-debug-id</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-baggage-header" rel="nofollow">jaeger-baggage-header</a></td> 
 <td>string</td> 
 <td>jaeger-baggage</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-trace-baggage-header-prefix" rel="nofollow">jaeger-trace-baggage-header-prefix</a></td> 
 <td>string</td> 
 <td>uberctx-</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-host" rel="nofollow">datadog-collector-host</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-port" rel="nofollow">datadog-collector-port</a></td> 
 <td>int</td> 
 <td>8126</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-service-name" rel="nofollow">datadog-service-name</a></td> 
 <td>string</td> 
 <td>"nginx"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-environment" rel="nofollow">datadog-environment</a></td> 
 <td>string</td> 
 <td>"prod"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-operation-name-override" rel="nofollow">datadog-operation-name-override</a></td> 
 <td>string</td> 
 <td>"nginx.handle"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-priority-sampling" rel="nofollow">datadog-priority-sampling</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-sample-rate" rel="nofollow">datadog-sample-rate</a></td> 
 <td>float</td> 
 <td>1.0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#main-snippet" rel="nofollow">main-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-snippet" rel="nofollow">http-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet" rel="nofollow">server-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#location-snippet" rel="nofollow">location-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#custom-http-errors" rel="nofollow">custom-http-errors</a></td> 
 <td>[]int</td> 
 <td>[]int</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-body-size" rel="nofollow">proxy-body-size</a></td> 
 <td>string</td> 
 <td>"1m"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-connect-timeout" rel="nofollow">proxy-connect-timeout</a></td> 
 <td>int</td> 
 <td>5</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-read-timeout" rel="nofollow">proxy-read-timeout</a></td> 
 <td>int</td> 
 <td>60</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-send-timeout" rel="nofollow">proxy-send-timeout</a></td> 
 <td>int</td> 
 <td>60</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffers-number" rel="nofollow">proxy-buffers-number</a></td> 
 <td>int</td> 
 <td>4</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffer-size" rel="nofollow">proxy-buffer-size</a></td> 
 <td>string</td> 
 <td>"4k"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-path" rel="nofollow">proxy-cookie-path</a></td> 
 <td>string</td> 
 <td>"off"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-domain" rel="nofollow">proxy-cookie-domain</a></td> 
 <td>string</td> 
 <td>"off"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream" rel="nofollow">proxy-next-upstream</a></td> 
 <td>string</td> 
 <td>"error timeout"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-timeout" rel="nofollow">proxy-next-upstream-timeout</a></td> 
 <td>int</td> 
 <td>0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-tries" rel="nofollow">proxy-next-upstream-tries</a></td> 
 <td>int</td> 
 <td>3</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-redirect-from" rel="nofollow">proxy-redirect-from</a></td> 
 <td>string</td> 
 <td>"off"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-request-buffering" rel="nofollow">proxy-request-buffering</a></td> 
 <td>string</td> 
 <td>"on"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-redirect" rel="nofollow">ssl-redirect</a></td> 
 <td>bool</td> 
 <td>"true"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#whitelist-source-range" rel="nofollow">whitelist-source-range</a></td> 
 <td>[]string</td> 
 <td>[]string</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#skip-access-log-urls" rel="nofollow">skip-access-log-urls</a></td> 
 <td>[]string</td> 
 <td>[]string</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate" rel="nofollow">limit-rate</a></td> 
 <td>int</td> 
 <td>0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate-after" rel="nofollow">limit-rate-after</a></td> 
 <td>int</td> 
 <td>0</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#lua-shared-dicts" rel="nofollow">lua-shared-dicts</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-redirect-code" rel="nofollow">http-redirect-code</a></td> 
 <td>int</td> 
 <td>308</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffering" rel="nofollow">proxy-buffering</a></td> 
 <td>string</td> 
 <td>"off"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-req-status-code" rel="nofollow">limit-req-status-code</a></td> 
 <td>int</td> 
 <td>503</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-status-code" rel="nofollow">limit-conn-status-code</a></td> 
 <td>int</td> 
 <td>503</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-tls-redirect-locations" rel="nofollow">no-tls-redirect-locations</a></td> 
 <td>string</td> 
 <td>"/.well-known/acme-challenge"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-url" rel="nofollow">global-auth-url</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-method" rel="nofollow">global-auth-method</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin" rel="nofollow">global-auth-signin</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin-redirect-param" rel="nofollow">global-auth-signin-redirect-param</a></td> 
 <td>string</td> 
 <td>"rd"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-response-headers" rel="nofollow">global-auth-response-headers</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-request-redirect" rel="nofollow">global-auth-request-redirect</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-snippet" rel="nofollow">global-auth-snippet</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-key" rel="nofollow">global-auth-cache-key</a></td> 
 <td>string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-duration" rel="nofollow">global-auth-cache-duration</a></td> 
 <td>string</td> 
 <td>"200 202 401 5m"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-auth-locations" rel="nofollow">no-auth-locations</a></td> 
 <td>string</td> 
 <td>"/.well-known/acme-challenge"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-cidrs" rel="nofollow">block-cidrs</a></td> 
 <td>[]string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-user-agents" rel="nofollow">block-user-agents</a></td> 
 <td>[]string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-referers" rel="nofollow">block-referers</a></td> 
 <td>[]string</td> 
 <td>""</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-ssl-location-only" rel="nofollow">proxy-ssl-location-only</a></td> 
 <td>bool</td> 
 <td>"false"</td> 
 </tr> 
 <tr> 
 <td><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#default-type" rel="nofollow">default-type</a></td> 
 <td>string</td> 
 <td>"text/html"</td> 
 </tr> 
 </tbody> 
</table>

## add-headers ##

在将流量发送到客户端之前，从命名的configmap设置自定义标头。请参阅[proxy-set-headers][]。[例][Link 1]

## allow-backend-server-header ##

启用从后端返回标头服务器，而不是从通用nginx字符串返回。***default:*** is disabled

## hide-headers ##

设置不会从上游服务器传递到客户端响应的其他标头。 ***default:*** empty

*参考：* [http ][http]*:* [//nginx.org/en/docs/http/ngx\_http\_proxy\_module.html\#proxy\_hide\_header][http]

## access-log-params ##

access\_log的其他参数。例如，buffer = 16k，gzip，flush = 1m

*参考：* [http ][http 1]*:* [//nginx.org/en/docs/http/ngx\_http\_log\_module.html\#access\_log][http 1]

## access-log-path ##

http和流上下文的访问日志路径。`/var/log/nginx/access.log`默认情况下转到。

**注意：**该文件`/var/log/nginx/access.log`是指向的符号链接`/dev/stdout`

## http-access-log-path ##

全局访问http上下文的日志路径。 ***default:*** ""

**注意：**如果未指定，`access-log-path`将使用。

## stream-access-log-path ##

全局访问流上下文的日志路径。 ***default:*** ""

*   *

*  [配置选项][Link 2]
 *  [添加标题][Link 3]
 *  [允许后端服务器头][Link 4]
 *  [隐藏标题][Link 5]
 *  [访问日志参数][Link 6]
 *  [访问日志路径][Link 7]
 *  [http-access-log-path][]
 *  [流访问日志路径][Link 8]
 *  [为默认后端启用访问日志][Link 9]
 *  [错误日志路径][Link 10]
 *  [启用安全性][Link 11]
 *  [启用owasp-modsecurity-crs][owasp-modsecurity-crs]
 *  [modsecurity片段][modsecurity]
 *  [客户端头缓冲区大小][Link 12]
 *  [客户头超时][Link 13]
 *  [客户端主体缓冲区大小][Link 14]
 *  [客户端超时][Link 15]
 *  [禁用访问日志][Link 16]
 *  [禁用-ipv6][-ipv6]
 *  [禁用-ipv6-dns][-ipv6-dns]
 *  [启用标题下划线][Link 17]
 *  [使能][Link 18]
 *  [忽略无效的标题][Link 19]
 *  [重试非幂等][Link 20]
 *  [错误日志级别][Link 21]
 *  [http2-max-field-size][]
 *  [http2-max-header-size][]
 *  [http2-max-requests][]
 *  [http2-max-concurrent-streams][]
 *  [科技][Link 22]
 *  [hsts-include-subdomains][]
 *  [最高时长][Link 23]
 *  [hsts-preload][]
 *  [活着][Link 24]
 *  [保持活动请求][Link 25]
 *  [大客户头缓冲区][Link 26]
 *  [日志格式转义json][json]
 *  [日志格式上游][Link 27]
 *  [日志格式流][Link 28]
 *  [启用多重接受][Link 29]
 *  [max-worker-connections][]
 *  [max-worker-open-files][]
 *  [映射哈希桶大小][Link 30]
 *  [代理真实IP密码][IP]
 *  [代理集标题][proxy-set-headers]
 *  [服务器名称哈希最大大小][Link 31]
 *  [服务器名称哈希桶大小][Link 32]
 *  [代理标头哈希最大大小][Link 33]
 *  [重用端口][Link 34]
 *  [代理标头哈希桶大小][Link 35]
 *  [外挂程式][Link 36]
 *  [服务器令牌][Link 37]
 *  [密码][Link 38]
 *  [ssl-ecdh曲线][ssl-ecdh]
 *  [ssl-dh-param][]
 *  [ssl协议][ssl]
 *  [ssl-early-data][]
 *  [ssl会话缓存][ssl 1]
 *  [ssl会话缓存大小][ssl 2]
 *  [ssl会话门票][ssl 3]
 *  [ssl-session-ticket-key][]
 *  [ssl-session-timeout][]
 *  [ssl-buffer-size][]
 *  [use-proxy-protocol][]
 *  [proxy-protocol-header-timeout][]
 *  [use-gzip][]
 *  [use-geoip][]
 *  [use-geoip2][]
 *  [enable-brotli][]
 *  [brotli-level][]
 *  [brotli-types][]
 *  [use-http2][]
 *  [gzip-level][]
 *  [gzip-min-length][]
 *  [gzip-types][]
 *  [worker-processes][]
 *  [worker-cpu-affinity][]
 *  [worker-shutdown-timeout][]
 *  [load-balance][]
 *  [variables-hash-bucket-size][]
 *  [variables-hash-max-size][]
 *  [upstream-keepalive-connections][]
 *  [upstream-keepalive-timeout][]
 *  [upstream-keepalive-requests][]
 *  [limit-conn-zone-variable][]
 *  [proxy-stream-timeout][]
 *  [proxy-stream-next-upstream][]
 *  [proxy-stream-next-upstream-timeout][]
 *  [proxy-stream-next-upstream-tries][]
 *  [proxy-stream-responses][]
 *  [bind-address][]
 *  [use-forwarded-headers][]
 *  [enable-real-ip][]
 *  [forwarded-for-header][]
 *  [compute-full-forwarded-for][]
 *  [proxy-add-original-uri-header][]
 *  [generate-request-id][]
 *  [enable-opentracing][]
 *  [opentracing-operation-name][]
 *  [opentracing-location-operation-name][]
 *  [zipkin-collector-host][]
 *  [zipkin-collector-port][]
 *  [zipkin-service-name][]
 *  [zipkin-sample-rate][]
 *  [jaeger-collector-host][]
 *  [jaeger-collector-port][]
 *  [jaeger-service-name][]
 *  [jaeger-sampler-type][]
 *  [jaeger-sampler-param][]
 *  [jaeger-sampler-host][]
 *  [jaeger-sampler-port][]
 *  [jaeger-trace-context-header-name][]
 *  [jaeger-debug-header][]
 *  [jaeger-baggage-header][]
 *  [jaeger-tracer-baggage-header-prefix][]
 *  [datadog-collector-host][]
 *  [datadog-collector-port][]
 *  [datadog-service-name][]
 *  [datadog-environment][]
 *  [datadog-operation-name-override][]
 *  [datadog-priority-sampling][]
 *  [datadog-sample-rate][]
 *  [main-snippet][]
 *  [http-snippet][]
 *  [server-snippet][]
 *  [location-snippet][]
 *  [custom-http-errors][]
 *  [proxy-body-size][]
 *  [proxy-connect-timeout][]
 *  [proxy-read-timeout][]
 *  [proxy-send-timeout][]
 *  [proxy-buffers-number][]
 *  [proxy-buffer-size][]
 *  [proxy-cookie-path][]
 *  [proxy-cookie-domain][]
 *  [proxy-next-upstream][]
 *  [proxy-next-upstream-timeout][]
 *  [proxy-next-upstream-tries][]
 *  [proxy-redirect-from][]
 *  [proxy-request-buffering][]
 *  [ssl-redirect][]
 *  [whitelist-source-range][]
 *  [skip-access-log-urls][]
 *  [limit-rate][]
 *  [limit-rate-after][]
 *  [lua-shared-dicts][]
 *  [http-redirect-code][]
 *  [proxy-buffering][]
 *  [limit-req-status-code][]
 *  [limit-conn-status-code][]
 *  [no-tls-redirect-locations][]
 *  [global-auth-url][]
 *  [全局验证方法][Link 39]
 *  [全局身份验证登录][Link 40]
 *  [全局验证登录重定向参数][Link 41]
 *  [全局验证响应头][Link 42]
 *  [全局验证请求重定向][Link 43]
 *  [全局身份验证代码段][Link 44]
 *  [全局验证缓存密钥][Link 45]
 *  [全局验证缓存持续时间][Link 46]
 *  [无身份验证位置][Link 47]
 *  [块索引][Link 48]
 *  [阻止用户代理][Link 49]
 *  [区块参照][Link 50]
 *  [仅限代理SSL位置][SSL]
 *  [默认类型][Link 51]

# ConfigMaps #

ConfigMap允许您将配置工件与图像内容分离，以使容器化的应用程序具有可移植性。

ConfigMap API资源将配置数据存储为键值对。该数据为Nginx控制器提供了系统组件的配置。

为了覆盖[config.go中][config.go]所示的nginx-controller配置值，您可以将键值对添加到config-map的data部分。例如：

data:
      map-hash-bucket-size: "128"
      ssl-protocols: SSLv2

**重要**

可以将Slice类型（以下定义为`[]string`或`[]int`）作为逗号分隔的字符串。

## 配置选项 ##

下表显示了配置选项的名称，类型和默认值：

<table style="width:688px;"> 
 <thead> 
 <tr> 
 <th style="vertical-align:top;">名称</th> 
 <th style="vertical-align:top;">类型</th> 
 <th style="vertical-align:top;">默认</th> 
 </tr> 
 </thead> 
 <tbody> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#add-headers" rel="nofollow">添加标题</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#allow-backend-server-header" rel="nofollow">允许后端服务器头</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hide-headers" rel="nofollow">隐藏标题</a></td> 
 <td style="vertical-align:top;">字符串数组</td> 
 <td style="vertical-align:top;">空的</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-params" rel="nofollow">访问日志参数</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-path" rel="nofollow">访问日志路径</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ /var/log/nginx/access.log”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-access-log-path" rel="nofollow">http-access-log-path</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#stream-access-log-path" rel="nofollow">流访问日志路径</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-access-log-for-default-backend" rel="nofollow">为默认后端启用访问日志</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-path" rel="nofollow">错误日志路径</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ /var/log/nginx/error.log”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-modsecurity" rel="nofollow">启用安全性</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#modsecurity-snippet" rel="nofollow">modsecurity片段</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-owasp-modsecurity-crs" rel="nofollow">启用owasp-modsecurity-crs</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-buffer-size" rel="nofollow">客户端头缓冲区大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 1k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-timeout" rel="nofollow">客户头超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">60</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-buffer-size" rel="nofollow">客户端主体缓冲区大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 8k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-timeout" rel="nofollow">客户端超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">60</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-access-log" rel="nofollow">禁用访问日志</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">假</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6" rel="nofollow">禁用-ipv6</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">假</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6-dns" rel="nofollow">禁用-ipv6-dns</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">假</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-underscores-in-headers" rel="nofollow">启用标题下划线</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">假</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-ocsp" rel="nofollow">使能</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">假</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ignore-invalid-headers" rel="nofollow">忽略无效的标题</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">真正</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#retry-non-idempotent" rel="nofollow">重试非幂等</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-level" rel="nofollow">错误日志级别</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“注意”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-field-size" rel="nofollow">http2-max-field-size</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 4k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-header-size" rel="nofollow">http2-max-header-size</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 16k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-requests" rel="nofollow">http2-max-requests</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">1000</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-concurrent-streams" rel="nofollow">http2-max-concurrent-streams</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">1000</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts" rel="nofollow">科技</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-include-subdomains" rel="nofollow">hsts-include-subdomains</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-max-age" rel="nofollow">最高时长</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 15724800”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-preload" rel="nofollow">hsts-preload</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive" rel="nofollow">活着</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">75</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive-requests" rel="nofollow">保持活动请求</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">100</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#large-client-header-buffers" rel="nofollow">大客户头缓冲区</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 4 8k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-escape-json" rel="nofollow">日志格式转义json</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-upstream" rel="nofollow">日志格式上游</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;"><code>$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_length $request_time [$proxy_upstream_name] [$proxy_alternative_upstream_name] $upstream_addr $upstream_response_length $upstream_response_time $upstream_status $req_id</code></td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-stream" rel="nofollow">日志格式流</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;"><code>[$remote_addr] [$time_local] $protocol $status $bytes_sent $bytes_received $session_time</code></td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-multi-accept" rel="nofollow">启用多重接受</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-connections" rel="nofollow">max-worker-connections</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">16384</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-open-files" rel="nofollow">max-worker-open-files</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-hash-bucket-size" rel="nofollow">映射哈希桶大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">64</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#nginx-status-ipv4-whitelist" rel="nofollow">nginx-状态-ipv4-白名单</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">“ 127.0.0.1”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#nginx-status-ipv6-whitelist" rel="nofollow">nginx-status-ipv6-whitelist</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">“ :: 1”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-real-ip-cidr" rel="nofollow">代理真实IP密码</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">“ 0.0.0.0/0”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-set-headers" rel="nofollow">代理集标题</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-max-size" rel="nofollow">服务器名称哈希最大大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">1024</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-bucket-size" rel="nofollow">服务器名称哈希桶大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;"><code>&lt;size of the processor’s cache line&gt;</code></td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-max-size" rel="nofollow">代理标头哈希最大大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">512</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-bucket-size" rel="nofollow">代理标头哈希桶大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">64</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#plugins" rel="nofollow">外挂程式</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">&nbsp;</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#reuse-port" rel="nofollow">重用端口</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-tokens" rel="nofollow">服务器令牌</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ciphers" rel="nofollow">密码</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ ECDHE-ECDSA-AES128-GCM-SHA256：ECDHE-RSA-AES128-GCM-SHA256：ECDHE-ECDSA-AES256-GCM-SHA384：ECDHE-RSA-AES256-GCM-SHA384：ECDHE-ECDSA-CHACHA20-POLY1305：ECDHE -RSA-CHACHA20-POLY1305：DHE-RSA-AES128-GCM-SHA256：DHE-RSA-AES256-GCM-SHA384“</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ecdh-curve" rel="nofollow">ssl-ecdh曲线</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“汽车”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-dh-param" rel="nofollow">ssl-dh-param</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-protocols" rel="nofollow">ssl协议</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ TLSv1.2 TLSv1.3”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache" rel="nofollow">ssl会话缓存</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache-size" rel="nofollow">ssl会话缓存大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 10m”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-tickets" rel="nofollow">ssl会话门票</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-ticket-key" rel="nofollow">ssl会话票证密钥</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;"><code>&lt;Randomly Generated&gt;</code></td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-timeout" rel="nofollow">ssl会话超时</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 10m”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-buffer-size" rel="nofollow">ssl缓冲区大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 4k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-proxy-protocol" rel="nofollow">使用代理协议</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-protocol-header-timeout" rel="nofollow">代理协议头超时</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 5s”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-gzip" rel="nofollow">使用gzip</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip" rel="nofollow">使用地理</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip2" rel="nofollow">use-geoip2</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-brotli" rel="nofollow">使能</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-level" rel="nofollow">肉鸡水平</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">4</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-types" rel="nofollow">肉鸡型</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“应用程序/ xml + rss应用程序/ atom + xml应用程序/ javascript应用程序/ x-javascript应用程序/ json应用程序/ rss + xml应用程序/vnd.ms-fontobject应用程序/ x-font-ttf应用程序/ x-web-app-manifest + json应用程序/ xhtml + xml应用程序/ xml字体/ opentype图片/ svg + xml图片/ x-icon文本/ css文本/ javascript文本/纯文本/ x组件”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-http2" rel="nofollow">使用-http2</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-level" rel="nofollow">gzip级</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">1个</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-types" rel="nofollow">gzip类型</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“应用程序/ atom + xml应用程序/ javascript应用程序/ x-javascript应用程序/ json应用程序/ rss + xml应用程序/vnd.ms-fontobject应用程序/ x-font-ttf应用程序/ x-web-app-manifest + json应用程序/ xhtml + xml应用程序/ xml字体/ opentype图像/ svg + xml图像/ x-icon文本/ css文本/ javascript文本/纯文本/ x组件”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-processes" rel="nofollow">工人过程</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;"><code>&lt;Number of CPUs&gt;</code></td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-cpu-affinity" rel="nofollow">工人-CPU亲和力</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-shutdown-timeout" rel="nofollow">工人关机超时</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 240s”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#load-balance" rel="nofollow">负载均衡</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ round_robin”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-bucket-size" rel="nofollow">变量哈希桶大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">128</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-max-size" rel="nofollow">变量哈希最大大小</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">2048</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-connections" rel="nofollow">上游-keepalive-连接</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">320</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-timeout" rel="nofollow">上游Keepalive超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">60</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-requests" rel="nofollow">上游keepalive请求</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">10000</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-zone-variable" rel="nofollow">极限连接区变量</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ $ binary_remote_addr”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-timeout" rel="nofollow">代理流超时</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 600s”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream" rel="nofollow">代理流下一个上游</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-timeout" rel="nofollow">代理流下一个上游超时</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 600s”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-tries" rel="nofollow">代理流下一个上游尝试</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">3</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-responses" rel="nofollow">代理流响应</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">1个</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#bind-address" rel="nofollow">绑定地址</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-forwarded-headers" rel="nofollow">使用转发标头</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-real-ip" rel="nofollow">启用真实IP</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#forwarded-for-header" rel="nofollow">标题转发</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ X-Forwarded-For”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#compute-full-forwarded-for" rel="nofollow">计算完全转发</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-add-original-uri-header" rel="nofollow">代理添加原始uri标头</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#generate-request-id" rel="nofollow">生成请求ID</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-opentracing" rel="nofollow">启用开放式跟踪</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-operation-name" rel="nofollow">opentracing-操作名称</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-location-operation-name" rel="nofollow">opentracing-location-operation-name</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-host" rel="nofollow">zipkin-collector-host</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-port" rel="nofollow">zipkin-collector-port</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">9411</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-service-name" rel="nofollow">zipkin服务名称</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ nginx”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-sample-rate" rel="nofollow">压缩样本率</a></td> 
 <td style="vertical-align:top;">浮动</td> 
 <td style="vertical-align:top;">1.0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-host" rel="nofollow">jaeger-collector-host</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-port" rel="nofollow">Jaeger-collector-port</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">6831</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-service-name" rel="nofollow">jaeger服务名称</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ nginx”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-type" rel="nofollow">杰格采样器类型</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ const”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-param" rel="nofollow">jaeger-sampler-param</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 1”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-host" rel="nofollow">jaeger-sampler-host</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ http://127.0.0.1”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-port" rel="nofollow">杰格采样器端口</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">5778</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-trace-context-header-name" rel="nofollow">jaeger-trace-context-header-名称</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">uber-trace-id</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-debug-header" rel="nofollow">jaeger-debug-header</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">uber-debug-id</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-baggage-header" rel="nofollow">贾格行李箱头</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">积家行李</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-trace-baggage-header-prefix" rel="nofollow">jaeger-trace-baggage-header-prefix</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">uberctx-</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-host" rel="nofollow">数据狗收集器主机</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-port" rel="nofollow">数据狗收集器端口</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">8126</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-service-name" rel="nofollow">datadog-service-name</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ nginx”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-environment" rel="nofollow">数据狗环境</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“产品”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-operation-name-override" rel="nofollow">数据狗操作名称覆盖</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ nginx.handle”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-priority-sampling" rel="nofollow">数据狗优先采样</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-sample-rate" rel="nofollow">数据狗采样率</a></td> 
 <td style="vertical-align:top;">浮动</td> 
 <td style="vertical-align:top;">1.0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#main-snippet" rel="nofollow">主片段</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-snippet" rel="nofollow">http-片段</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet" rel="nofollow">服务器片段</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#location-snippet" rel="nofollow">位置摘要</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#custom-http-errors" rel="nofollow">自定义http错误</a></td> 
 <td style="vertical-align:top;">[] int</td> 
 <td style="vertical-align:top;">[] int</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-body-size" rel="nofollow">代理主体大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 1m”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-connect-timeout" rel="nofollow">代理连接超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">5</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-read-timeout" rel="nofollow">代理读取超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">60</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-send-timeout" rel="nofollow">代理发送超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">60</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffers-number" rel="nofollow">代理缓冲区编号</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">4</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffer-size" rel="nofollow">代理缓冲区大小</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 4k”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-path" rel="nofollow">代理cookie路径</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“关闭”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-domain" rel="nofollow">代理Cookie域</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“关闭”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream" rel="nofollow">代理下一个上游</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“错误超时”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-timeout" rel="nofollow">代理下一个上游超时</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-tries" rel="nofollow">代理下一个上游尝试</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">3</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-redirect-from" rel="nofollow">代理重定向自</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“关闭”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-request-buffering" rel="nofollow">代理请求缓冲</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“上”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-redirect" rel="nofollow">ssl重定向</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“真正”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#whitelist-source-range" rel="nofollow">白名单源范围</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">[]串</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#skip-access-log-urls" rel="nofollow">跳过访问日志网址</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">[]串</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate" rel="nofollow">极限率</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate-after" rel="nofollow">限制后率</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">0</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#lua-shared-dicts" rel="nofollow">lua-share-dicts</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-redirect-code" rel="nofollow">http重定向代码</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">308</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffering" rel="nofollow">代理缓冲</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“关闭”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-req-status-code" rel="nofollow">极限要求状态码</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">503</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-status-code" rel="nofollow">极限连接状态码</a></td> 
 <td style="vertical-align:top;">整型</td> 
 <td style="vertical-align:top;">503</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-tls-redirect-locations" rel="nofollow">no-tls-重定向位置</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ /。众所周知/ acme挑战”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-url" rel="nofollow">全局验证网址</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-method" rel="nofollow">全局验证方法</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin" rel="nofollow">全局身份验证登录</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin-redirect-param" rel="nofollow">全局验证登录重定向参数</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ rd”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-response-headers" rel="nofollow">全局验证响应头</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-request-redirect" rel="nofollow">全局验证请求重定向</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-snippet" rel="nofollow">全局身份验证代码段</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-key" rel="nofollow">全局验证缓存密钥</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-duration" rel="nofollow">全局验证缓存持续时间</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ 200 202 401 5m”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-auth-locations" rel="nofollow">无身份验证位置</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“ /。众所周知/ acme挑战”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-cidrs" rel="nofollow">块索引</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-user-agents" rel="nofollow">阻止用户代理</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-referers" rel="nofollow">区块参照</a></td> 
 <td style="vertical-align:top;">[]串</td> 
 <td style="vertical-align:top;">”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-ssl-location-only" rel="nofollow">仅限代理SSL位置</a></td> 
 <td style="vertical-align:top;">布尔</td> 
 <td style="vertical-align:top;">“假”</td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#default-type" rel="nofollow">默认类型</a></td> 
 <td style="vertical-align:top;">串</td> 
 <td style="vertical-align:top;">“文本/ html”</td> 
 </tr> 
 </tbody> 
</table>

## add-headers ##

在将流量发送到客户端之前，从命名的configmap设置自定义标头。请参阅[proxy-set-headers][]。[例][Link 1]

## allow-backend-server-header ##

启用从后端返回标头服务器，而不是从通用nginx字符串返回。***默认值：***禁用

## hide-headers ##

设置不会从上游服务器传递到客户端响应的其他标头。 ***默认值：***空

*参考：* [http ][http]*:* [//nginx.org/en/docs/http/ngx\_http\_proxy\_module.html\#proxy\_hide\_header][http]

## access-log-params ##

access\_log的其他参数。例如，buffer = 16k，gzip，flush = 1m

*参考：* [http ][http 1]*:* [//nginx.org/en/docs/http/ngx\_http\_log\_module.html\#access\_log][http 1]

## access-log-path ##

http和流上下文的访问日志路径。`/var/log/nginx/access.log`默认情况下转到。

**注意：**该文件`/var/log/nginx/access.log`是指向的符号链接`/dev/stdout`

## http-access-log-path ##

全局访问http上下文的日志路径。 ***默认值：*** “”

**注意：**如果未指定，`access-log-path`将使用。

## stream-access-log-path ##

全局访问流上下文的日志路径。 ***默认值：*** “”

**注意：**如果未指定，`access-log-path`将使用。

## enable-access-log-for-default-backend ##

全局访问流上下文的日志路径。***default:*** is disabled.

## error-log-path ##

错误日志路径。`/var/log/nginx/error.log`默认情况下转到。

**注意：**该文件`/var/log/nginx/error.log`是指向的符号链接`/dev/stderr`

*参考：* [http ][http 2]*:* [//nginx.org/en/docs/ngx\_core\_module.html\#error\_log][http 2]

## enable-modsecurity ##

为NGINX启用modsecurity模块。 ***default:*** is disabled

## enable-owasp-modsecurity-crs ##

启用OWASP ModSecurity核心规则集（CRS）。 ***default:*** is disabled

## modsecurity-snippet ##

向Nginx配置的modsecurity部分添加自定义规则

## client-header-buffer-size ##

允许配置自定义缓冲区大小以读取客户端请求标头。

*参考：* [http ][http 3]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#client\_header\_buffer\_size][http 3]

## client-header-timeout ##

定义读取客户端请求标头的超时（以秒为单位）。

*参考：* [http ][http 4]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#client\_header\_timeout][http 4]

## client-body-buffer-size ##

设置用于读取客户端请求正文的缓冲区大小。

*参考：* [http ][http 5]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#client\_body\_buffer\_size][http 5]

## client-body-timeout ##

定义读取客户端请求正文的超时时间（以秒为单位）。

*参考：* [http ][http 6]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#client\_body\_timeout][http 6]

## disable-access-log ##

从整个Ingress Controller禁用访问日志。 ***default:*** '"false"'

*参考：* [http ][http 1]*:* [//nginx.org/en/docs/http/ngx\_http\_log\_module.html\#access\_log][http 1]

## disable-ipv6 ##

禁用监听IPV6。***default:*** `false`; 已启用IPv6侦听

## disable-ipv6-dns ##

为Nginx DNS解析器禁用IPV6。***default:*** `false`; 启用了IPv6解析。

## enable-underscores-in-headers ##

在标题名称中启用下划线。 ***default:*** is disabled

## enable-ocsp ##

启用[在线证书状态协议装订][Link 52]（OCSP）支持。 ***default:*** is disabled

## ignore-invalid-headers ##

设置是否忽略具有无效名称的头字段。 ***default:*** is enabled

## retry-non-idempotent ##

从1.9.13开始，如果上游服务器发生错误，NGINX将不会重试非幂等请求（POST，LOCK，PATCH）。可以使用值“ true”恢复以前的行为。

## error-log-level ##

配置错误的日志记录级别。以上日志级别按严重性从高到低的顺序列出。

*参考：* [http ][http 2]*:* [//nginx.org/en/docs/ngx\_core\_module.html\#error\_log][http 2]

## http2-max-field-size ##

限制HPACK压缩的请求标头字段的最大大小。

*参考：* [https ][https]*:* [//nginx.org/en/docs/http/ngx\_http\_v2\_module.html\#http2\_max\_field\_size][https]

## http2-max-header-size ##

限制HPACK解压缩后整个请求标头列表的最大大小。

*参考：* [https ][https 1]*:* [//nginx.org/en/docs/http/ngx\_http\_v2\_module.html\#http2\_max\_header\_size][https 1]

## http2-max-requests ##

设置可以通过一个HTTP / 2连接提供服务的最大请求数（包括推送请求），之后下一个客户端请求将导致连接关闭以及需要建立新连接。

*参考：* [http ][http 7]*:* [//nginx.org/en/docs/http/ngx\_http\_v2\_module.html\#http2\_max\_requests][http 7]

## http2-max-concurrent-streams ##

设置连接中并发HTTP / 2流的最大数量。

*参考：* [http ][http 8]*:* [//nginx.org/en/docs/http/ngx\_http\_v2\_module.html\#http2\_max\_concurrent\_streams][http 8]

## hsts ##

在运行SSL的服务器中启用或禁用标头HSTS。HTTP严格传输安全性（通常缩写为HSTS）是一项安全功能（HTTP标头），它告诉浏览器仅应使用HTTPS而不是使用HTTPS进行通信。它提供了针对协议降级攻击和cookie盗窃的保护。

*参考文献：*

*  [https://developer.mozilla.org/zh-CN/docs/Web/Security/HTTP\_strict\_transport\_security][https_developer.mozilla.org_zh-CN_docs_Web_Security_HTTP_strict_transport_security]
 *  [https://blog.qualys.com/securitylabs/2016/03/28/the-importance-of-a-proper-http-strict-transport-security-implementation-on-your-web-server][https_blog.qualys.com_securitylabs_2016_03_28_the-importance-of-a-proper-http-strict-transport-security-implementation-on-your-web-server]

## hsts-include-subdomains ##

在服务器名称的所有子域中启用或禁用HSTS。

## hsts-max-age ##

设置浏览器记住该站点仅使用HTTPS访问的时间（以秒为单位）。

## hsts-preload ##

启用或禁用HSTS功能中的preload属性（启用时）dd

## keep-alive ##

设置保持活动的客户端连接在服务器端保持打开状态的时间。零值将禁用保持活动状态的客户端连接。

*参考：* [http ][http 9]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#keepalive\_timeout][http 9]

## keep-alive-requests ##

设置可以通过一个保持活动连接服务的最大请求数。

*参考：* [http ][http 10]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#keepalive\_requests][http 10]

## large-client-header-buffers ##

设置用于读取大型客户端请求标头的缓冲区的最大数量和大小。***默认值：*** 4 8k

*参考：* [http ][http 11]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#large\_client\_header\_buffers][http 11]

## log-format-escape-json ##

设置转义参数是否允许JSON（“ true”）或在变量中转义的默认字符（“ false”）设置nginx[日志格式][Link 53]。

## log-format-upstream ##

设置nginx[日志格式][Link 53]。json输出示例：

log-format-upstream: '{"time": "$time_iso8601", "remote_addr": "$proxy_protocol_addr", "x_forward_for": "$proxy_add_x_forwarded_for", "request_id": "$req_id",
      "remote_user": "$remote_user", "bytes_sent": $bytes_sent, "request_time": $request_time, "status": $status, "vhost": "$host", "request_proto": "$server_protocol",
      "path": "$uri", "request_query": "$args", "request_length": $request_length, "duration": $request_time,"method": "$request_method", "http_referrer": "$http_referer",
      "http_user_agent": "$http_user_agent" }'

请检查[日志格式][Link 54]以了解每个字段的定义。

## log-format-stream ##

设置nginx[流格式][Link 55]。

## enable-multi-accept ##

如果禁用，则辅助进程将一次接受一个新连接。否则，工作进程将一次接受所有新连接。 ***默认值：*** true

*参考：* [http ][http 12]*:* [//nginx.org/en/docs/ngx\_core\_module.html\#multi\_accept][http 12]

## max-worker-connections ##

设置每个工作进程可以打开的[最大同时连接数][Link 56]。0将使用[max-worker-open-files的值][max-worker-open-files]。 ***default:*** 16384

Tip

在高负载的情况下使用0可以提高性能，但以增加RAM利用率（甚至在空闲时）为代价。

## max-worker-open-files ##

设置每个工作进程可以打开的[最大文件数][Link 57]。默认值为0表示“最大打开文件数（系统的限制）/ [worker-processes][] \-1024”。 ***default:*** 0

## map-hash-bucket-size ##

设置[映射变量哈希表][Link 58]的存储桶大小。设置哈希表的详细信息在单独的[文档][Link 59]中提供。

## proxy-real-ip-cidr ##

如果启用了use-forwarded-header或use-proxy-protocol，则proxy-real-ip-cidr定义默认的外部负载均衡器的IP /网络地址。

## proxy-set-headers ##

在将流量发送到后端之前，从命名的configmap设置自定义标头。值格式为名称空间/名称。看[例子][Link 1]

## server-name-hash-max-size ##

设置[服务器名称哈希表][Link 60]的最大大小，这些[哈希表][Link 60]用于服务器名称，map指令的值，MIME类型，请求标头字符串的名称等。

*参考：* [http ][Link 59]*:* [//nginx.org/en/docs/hash.html][Link 59]

## server-name-hash-bucket-size ##

设置服务器名称哈希表的存储桶大小。

*参考文献：*

*  [http://nginx.org/en/docs/hash.html][Link 59]
 *  [http://nginx.org/zh-CN/docs/http/ngx\_http\_core\_module.html\#server\_names\_hash\_bucket\_size][http_nginx.org_zh-CN_docs_http_ngx_http_core_module.html_server_names_hash_bucket_size]

## proxy-headers-hash-max-size ##

设置代理标头哈希表的最大大小。

*参考文献：*

*  [http://nginx.org/en/docs/hash.html][Link 59]
 *  [https://nginx.org/zh\_CN/docs/http/ngx\_http\_proxy\_module.html\#proxy\_headers\_hash\_max\_size][https_nginx.org_zh_CN_docs_http_ngx_http_proxy_module.html_proxy_headers_hash_max_size]

## reuse-port ##

指示NGINX为每个工作进程创建一个单独的侦听套接字（使用SO\_REUSEPORT套接字选项），从而允许内核在工作进程之间分配传入的连接， ***default:*** true

## proxy-headers-hash-bucket-size ##

设置代理标头哈希表的存储桶大小。

*参考文献：*

*  [http://nginx.org/en/docs/hash.html][Link 59]
 *  [https://nginx.org/zh\_CN/docs/http/ngx\_http\_proxy\_module.html\#proxy\_headers\_hash\_bucket\_size][https_nginx.org_zh_CN_docs_http_ngx_http_proxy_module.html_proxy_headers_hash_bucket_size]

## plugins ##

激活安装在中的插件`/etc/nginx/lua/plugins`。有关如何编写和安装插件的更多信息，请参阅[ingress-nginx插件自述文件][ingress-nginx]。

## server-tokens ##

在响应中发送NGINX Server标头，并在错误页面中显示NGINX版本。 ***default:*** is disabled

## ssl-ciphers ##

设置要启用的[密码][Link 61]列表。密码以OpenSSL库可以理解的格式指定。

默认密码列表为： `ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384`。

密码套件的排序非常重要，因为它决定了优先选择哪些算法。以上建议优先考虑了提供完美[前向保密性的][Link 62]算法。

在配置[DH参数][DH]之前，基于DHE的密码将不可用[自定义DH参数可实现完美的前向保密性][DH]

请检查[Mozilla SSL配置生成器][Mozilla SSL]。

**注意：**默认情况下，将为http上下文启用ssl\_prefer\_server\_ciphers指令。

## ssl-ecdh-curve ##

指定ECDHE密码的曲线。

*参考：* [http ][http 13]*:* [//nginx.org/en/docs/http/ngx\_http\_ssl\_module.html\#ssl\_ecdh\_curve][http 13]

## ssl-dh-param ##

设置包含Diffie-Hellman密钥的机密名称，以帮助实现“ Perfect Forward Secrecy”。

*参考文献：*

*  [https://wiki.openssl.org/index.php/Diffie-Hellman\_parameters][https_wiki.openssl.org_index.php_Diffie-Hellman_parameters]
 *  [https://wiki.mozilla.org/Security/Server\_Side\_TLS\#DHE\_handshake\_and\_dhparam][https_wiki.mozilla.org_Security_Server_Side_TLS_DHE_handshake_and_dhparam]
 *  [http://nginx.org/en/docs/http/ngx\_http\_ssl\_module.html\#ssl\_dhparam][http_nginx.org_en_docs_http_ngx_http_ssl_module.html_ssl_dhparam]

## ssl-protocols ##

设置要使用的[SSL协议][SSL 1]。默认值为：`TLSv1.2 TLSv1.3`。

请使用`https://ssllabs.com/ssltest/analyze.html`或检查配置结果`https://testssl.sh`。

## ssl-early-data ##

启用或禁用TLS 1.3[早期数据][Link 63]，也称为零往返时间恢复（0-RTT）。

这要求`ssl-protocols`已经`TLSv1.3`启用。请谨慎启用此功能，因为在早期数据中发送的请求会受到[重放攻击][Link 64]。

[ssl\_early\_data][ssl_early_data]。The default is: `false`.

## ssl-session-cache ##

启用或禁用工作进程之间共享[SSL缓存][SSL 2]的使用。

## ssl-session-cache-size ##

设置所有工作进程之间的[SSL共享会话缓存][SSL 2]的大小。

## ssl-session-tickets ##

通过[TLS会话票证][TLS]启用或禁用会话恢复。

## ssl-session-ticket-key ##

设置用于加密和解密TLS会话票证的密钥。该值必须是有效的base64字符串。要创建票证：`openssl rand 80 | openssl enc -A -base64`

[TLS会话票证密钥][TLS]，默认情况下，使用随机生成的密钥。

## ssl-session-timeout ##

设置客户端可以[重复使用][Link 65]存储在缓存中[的会话][Link 65]参数的时间。

## ssl-buffer-size ##

设置用于发送数据的[SSL缓冲区][SSL 3]的大小。默认的4k可以帮助NGINX改善TLS首字节时间（TTTFB）。

*参考：* [https ][https 2]*:* [//www.igvita.com/2013/12/16/optimizing-nginx-tls-time-to-first-byte/][https 2]

## use-proxy-protocol ##

启用或禁用[PROXY协议，][PROXY]以接收通过代理服务器和负载均衡器（例如HAProxy和Amazon Elastic Load Balancer（ELB））传递的客户端连接（真实IP地址）信息。

## proxy-protocol-header-timeout ##

设置用于接收代理协议标头的超时值。默认值为5秒可防止TLS直通处理程序无限期地等待断开的连接。 ***default:*** 5s

## use-gzip ##

使用[“ gzip”模块][gzip]启用或禁用HTTP响应的压缩。要压缩的MIME类型由[gzip-types][]控制。 ***default:*** false

## use-geoip ##

使用预编译的MaxMind数据库启用或禁用[“ geoip”模块][geoip]，该[模块][geoip]使用取决于客户端IP地址的值来创建变量。 ***default:*** true

> **注意：** MaxMind旧版数据库已停产，并且在2019年1月2日之后将不会接收更新，请参见。[停产通知书][Link 66]。考虑下面的[use-geoip2][]。

## use-geoip2 ##

为NGINX启用[geoip2模块][geoip2]。由于`0.27.0`且由于[MaxMind数据库][MaxMind]的[更改，][MaxMind]需要许可证才能访问数据库。因此，需要`--maxmind-license-key`在入口控制器部署中定义一个新标志，以下载在入口控制器初始化期间所需的数据库。另外，也可以使用卷来装载文件`/etc/nginx/geoip/GeoLite2-City.mmdb`和`/etc/nginx/geoip/GeoLite2-ASN.mmdb`，从而避免了下载的开销。

**重要**

如果启用了该功能但文件丢失，则不会启用GeoIP2。

***default:*** false

## enable-brotli ##

使用[“ brotli”模块][brotli]启用或禁用HTTP响应的压缩。要压缩的默认mime类型列表为：`application/xml+rss application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/plain text/x-component`。***default:*** is disabled

> **注意：** Brotli在Safari <11中不起作用。有关更多信息，请参见[https://caniuse.com/\#feat=brotli][https_caniuse.com_feat_brotli]

## brotli-level ##

设置将使用的Brotli压缩级别。***default:*** 4

## brotli-types ##

设置将由brotli即时压缩的MIME类型。 ***default:*** `application/xml+rss application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/plain text/x-component`

## use-http2 ##

在安全连接中启用或禁用[HTTP / 2][HTTP _ 2]支持。

## gzip-level ##

设置将使用的gzip压缩级别。 ***default:*** 1

## gzip-min-length ##

可以进行gzip压缩之前返回给客户端的响应的最小长度（以字节为单位）。 ***default:*** 256

## gzip-types ##

设置除“ text / html”以外的MIME类型以进行压缩。特殊值“ \*”与任何MIME类型匹配。如果[`use-gzip`][use-gzip]启用，则始终压缩“ text / html”类型的响应。 ***default:*** `application/atom+xml application/javascript application/x-javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/svg+xml image/x-icon text/css text/plain text/x-component`.

## worker-processes ##

设置[工作进程数][Link 67]。默认值“ auto”表示可用的CPU内核数。

## worker-cpu-affinity ##

将工作进程绑定到CPU组。[worker\_cpu\_affinity][worker_cpu_affinity]。默认情况下，辅助进程未绑定到任何特定的CPU。该值可以是：

*  “”：空字符串表示未应用任何亲和力。
 *  cpumask：例如`0001 0010 0100 1000`，将进程绑定到特定的cpus。
 *  auto：将工作进程自动绑定到可用的CPU。

## worker-shutdown-timeout ##

设置Nginx[等待工作者正常关闭][Link 68]的超时时间 ***default:*** "240s"

## load-balance ##

设置用于负载平衡的算法。该值可以是：

*  round\_robin：使用默认的循环负载均衡器
 *  ewma：使用Peak EWMA方法进行路由（[实现][Link 69]）

默认值为`round_robin`。

*  要使用IP或其他变量的一致哈希进行负载平衡，请考虑`nginx.ingress.kubernetes.io/upstream-hash-by`注释。
 *  要使用会话cookie进行负载平衡，请考虑`nginx.ingress.kubernetes.io/affinity`注释。

*参考：* [http ][http 14]*:* [//nginx.org/en/docs/http/load\_balancing.html][http 14]

## variables-hash-bucket-size ##

设置变量哈希表的存储桶大小。

*参考：* [http ][http 15]*:* [//nginx.org/en/docs/http/ngx\_http\_map\_module.html\#variables\_hash\_bucket\_size][http 15]

## variables-hash-max-size ##

设置变量哈希表的最大大小。

*参考：* [http ][http 16]*:* [//nginx.org/en/docs/http/ngx\_http\_map\_module.html\#variables\_hash\_max\_size][http 16]

## upstream-keepalive-connections ##

激活缓存以连接到上游服务器。connections参数设置每个工作进程的高速缓存中保留的与上游服务器的空闲保持连接的最大数量。超过此数量时，将关闭最近最少使用的连接。 ***default:*** 320

*参考：* [http ][http 17]*:* [//nginx.org/en/docs/http/ngx\_http\_upstream\_module.html\#keepalive][http 17]

## upstream-keepalive-timeout ##

设置一个超时，在此超时期间，与上游服务器的空闲keepalive连接将保持打开状态。***default:*** 60

*References:* [http://nginx.org/en/docs/http/ngx\_http\_upstream\_module.html\#keepalive\_timeout][http_nginx.org_en_docs_http_ngx_http_upstream_module.html_keepalive_timeout]

## upstream-keepalive-requests ##

设置通过一个keepalive连接可以处理的最大请求数。达到最大请求数后，连接将关闭。 ***default:*** 10000

*参考：* [http ][http 18]*:* [//nginx.org/en/docs/http/ngx\_http\_upstream\_module.html\#keepalive\_requests][http 18]

## limit-conn-zone-variable ##

设置共享内存区域的参数，该参数将保持[limit\_conn\_zone的][limit_conn_zone]各个键的[状态][limit_conn_zone]。变量“ $ binary\_remote\_addr”的默认大小始终为4字节（对于IPv4地址）或16字节（对于IPv6地址）。

## proxy-stream-timeout ##

设置客户端或代理服务器连接上两次连续的读取或写入操作之间的超时。如果在此时间内没有数据传输，则连接将关闭。

*参考：* [http ][http 19]*:* [//nginx.org/en/docs/stream/ngx\_stream\_proxy\_module.html\#proxy\_timeout][http 19]

## proxy-stream-next-upstream ##

如果无法建立与代理服务器的连接，请确定是否将客户端连接传递给下一台服务器。

*参考：* [http ][http 20]*:* [//nginx.org/en/docs/stream/ngx\_stream\_proxy\_module.html\#proxy\_next\_upstream][http 20]

## proxy-stream-next-upstream-timeout ##

限制将连接传递到下一台服务器所允许的时间。0值关闭此限制。

*参考：* [http ][http 21]*:* [//nginx.org/en/docs/stream/ngx\_stream\_proxy\_module.html\#proxy\_next\_upstream\_timeout][http 21]

## proxy-stream-next-upstream-tries ##

限制将请求传递到下一个服务器的可能尝试次数。0值关闭此限制。

*参考：* [http ][http 21]*:* [//nginx.org/en/docs/stream/ngx\_stream\_proxy\_module.html\#proxy\_next\_upstream\_tries][http 21]

## proxy-stream-responses ##

如果使用UDP协议，则设置代理服务器响应客户端请求而期望的数据报数。

*参考：* [http ][http 22]*:* [//nginx.org/en/docs/stream/ngx\_stream\_proxy\_module.html\#proxy\_responses][http 22]

## bind-address ##

设置服务器将接受请求而不是\*的地址。应当注意，这些地址必须存在于运行时环境中，否则控制器将崩溃。

## use-forwarded-headers ##

如果为true，NGINX将传入的`X-Forwarded-*`标头传递给上游。当NGINX位于另一个正在设置这些标头的L7代理/负载平衡器之后时，请使用此选项。

如果为false，则NGINX将忽略传入的`X-Forwarded-*`标头，并用看到的请求信息填充它们。如果NGINX直接暴露于Internet或位于基于L3 /数据包的负载均衡器之后，而该负载均衡器不会更改数据包中的源IP，请使用此选项。

## enable-real-ip ##

`enable-real-ip`启用[http://nginx.org/en/docs/http/ngx\_http\_realip\_module.html][http_nginx.org_en_docs_http_ngx_http_realip_module.html]的配置。可以使用`forwarded-for-header`和`proxy-real-ip-cidr`设置进一步配置模块的特定属性。

## forwarded-for-header ##

设置标头字段，用于标识客户端的原始IP地址。 ***default:*** X-Forwarded-For

## compute-full-forwarded-for ##

将远程地址附加到X-Forwarded-For标头，而不是替换它。启用此选项后，上游应用程序将根据自己的受信任代理列表提取客户端IP。

## proxy-add-original-uri-header ##

将具有原始请求URI的X-Original-Uri标头添加到后端请求

## generate-request-id ##

如果请求中不存在X-Request-ID，则确保X-Request-ID默认为随机值

## enable-opentracing ##

启用nginx Opentracing扩展。***default:*** is disabled

*References:* [https://github.com/opentracing-contrib/nginx-opentracing][https_github.com_opentracing-contrib_nginx-opentracing]

## opentracing-operation-name ##

指定服务器范围的自定义名称。 ***default:*** is empty

例如，设置为"HTTP $request\_method $uri".

## opentracing-location-operation-name ##

指定位置范围的自定义名称。***default:*** is empty

例如，设置为"HTTP $request\_method $uri".

## zipkin-collector-host ##

指定上载跟踪时要使用的主机。它必须是一个有效的URL。

## zipkin-collector-port ##

指定上载跟踪时要使用的端口。 ***default:*** 9411

## zipkin-service-name ##

指定用于创建的任何跟踪的服务名称。***default:*** nginx

## zipkin-sample-rate ##

指定创建的任何跟踪的采样率。***default:*** 1.0

## jaeger-collector-host ##

指定上载跟踪时要使用的主机。它必须是一个有效的URL。

## jaeger-collector-port ##

指定上载跟踪时要使用的端口。***default:*** 6831

## jaeger-service-name ##

指定用于创建的任何跟踪的服务名称。***default:*** nginx

## jaeger-sampler-type ##

指定采样轨迹时要使用的采样器。可用的采样器有：const，概率，速率限制，远程。 ***default:*** const

## jaeger-sampler-param ##

指定要传递给采样器构造函数的参数。必须是数字。对于const，应为0（从不采样）和1（始终采样）。***default:*** 1

## jaeger-sampler-host ##

指定要传递给采样器构造函数的自定义远程采样器主机。必须是有效的网址。保留空白以使用默认值（localhost）。 ***default:*** http://127.0.0.1

## jaeger-sampler-port ##

指定要传递给采样器构造函数的自定义远程采样器端口。必须是数字。***default:*** 5778

## jaeger-trace-context-header-name ##

指定用于传递跟踪上下文的标头名称。 ***default:*** uber-trace-id

## jaeger-debug-header ##

指定用于强制采样的标题名称。 ***default:*** jaeger-debug-id

## jaeger-baggage-header ##

指定没有根跨度时用于提交行李的标头名称。***default:*** jaeger-baggage

## jaeger-tracer-baggage-header-prefix ##

指定用于传播行李的标题前缀。 ***default:*** uberctx-

## datadog-collector-host ##

指定上载跟踪时要使用的datadog代理主机。它必须是一个有效的URL。

## datadog-collector-port ##

指定上载跟踪时要使用的端口。 ***default:*** 8126

## datadog-service-name ##

指定用于创建的任何跟踪的服务名称。 ***default:*** nginx

## datadog-environment ##

指定此跟踪所属的环境。***default:*** prod

## datadog-operation-name-override ##

覆盖用于创建任何痕迹的操作名。***default:*** nginx.handle

## datadog-priority-sampling ##

指定使用客户端采样。如果为true，则禁用客户端采样（因此忽略`sample_rate`）并启用分布式优先级采样，其中基于用户分配的优先级和来自代理的配置的组合对跟踪进行采样。 ***default:*** true

## datadog-sample-rate ##

指定创建的任何跟踪的采样率。只有当这是有效`datadog-priority-sampling`的`false` ***default:*** 1.0

## main-snippet ##

将自定义配置添加到nginx配置的主要部分。

## http-snippet ##

将自定义配置添加到nginx配置的http部分。

## server-snippet ##

将自定义配置添加到nginx配置中的所有服务器。

## location-snippet ##

将自定义配置添加到nginx配置中的所有位置。

您不能使用它来添加代理到Kubernetes容器的新位置，因为该片段无法访问Go模板功能。如果要添加自定义位置，则必须[提供自己的nginx.tmpl][nginx.tmpl]。

## custom-http-errors ##

启用应使用[error\_page指令][error_page]传递哪些HTTP代码进行处理

设置至少一个代码还使得[proxy\_intercept\_errors][proxy_intercept_errors]它们都需要处理error\_page。

用法示例： `custom-http-errors: 404,415`

## proxy-body-size ##

设置客户端请求正文的最大允许大小。参见NGINX [client\_max\_body\_size][client_max_body_size]。

## proxy-connect-timeout ##

设置[与代理服务器建立连接][Link 70]的超时。请注意，此超时通常不能超过75秒。

## proxy-read-timeout ##

设置以秒为单位的超时时间，[以从代理服务器读取响应][Link 71]。超时仅在两次连续的读取操作之间设置，而不用于传输整个响应。

## proxy-send-timeout ##

以秒为单位设置将[请求传输到代理服务器][Link 72]的超时时间。超时仅在两个连续的写操作之间设置，而不用于整个请求的传输。

## proxy-buffers-number ##

设置用于[读取][Link 73]从代理服务器接收到的[响应的第一部分][Link 73]的缓冲区的编号。这部分通常包含一个小的响应头。

## proxy-buffer-size ##

设置用于[读取][Link 74]从代理服务器接收到的[响应的第一部分][Link 74]的缓冲区的大小。这部分通常包含一个小的响应头。

## proxy-cookie-path ##

设置[应在][Link 75]代理服务器响应的“ Set-Cookie”标头字段[的path属性][Link 75]中[更改][Link 75]的文本。

## proxy-cookie-domain ##

设置[应在][Link 76]代理服务器响应的“ Set-Cookie”标头字段[的domain属性][Link 76]中[更改][Link 76]的文本。

## proxy-next-upstream ##

指定在[哪种情况下][Link 77]将请求传递到下一个服务器。

## proxy-next-upstream-timeout ##

[限制][Link 78]可以将请求传递到下一台服务器[的时间（][Link 78]以秒为单位）。

## proxy-next-upstream-tries ##

限制将请求传递到下一个服务器的[可能尝试][Link 79]次数。

## proxy-redirect-from ##

设置应在代理服务器响应的“位置”和“刷新”标头字段中更改的原始文本。 ***default:*** off

*参考：* [http ][http 23]*:* [//nginx.org/en/docs/http/ngx\_http\_proxy\_module.html\#proxy\_redirect][http 23]

## proxy-request-buffering ##

启用或禁用[客户端请求正文的缓冲][Link 80]。

## ssl-redirect ##

如果服务器具有TLS证书（在Ingress规则中定义），则将重定向（301）的全局值设置为HTTPS。***default:*** "true"

## whitelist-source-range ##

为每个`server`块设置默认的白名单IP 。这可以由Ingress规则上的注释覆盖。参见[ngx\_http\_access\_module][ngx_http_access_module]。

## skip-access-log-urls ##

设置不应出现在NGINX访问日志中的URL列表。这对于类似`/health`或`health-check`使“复杂”读取日志的url很有用。 ***default:*** is empty

## limit-rate ##

限制向客户端传输响应的速率。该速率以每秒字节数指定。零值禁用速率限制。该限制是根据请求设置的，因此，如果客户端同时打开两个连接，则总速率将是指定限制的两倍。

*参考：* [http ][http 24]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#limit\_rate][http 24]

## limit-rate-after ##

设置初始数量，之后将进一步限制对客户端的响应的进一步传输。

## lua-shared-dicts ##

自定义默认的Lua共享字典或定义更多。您可以使用以下语法来这样做：

lua-shared-dicts: "<my dict name>: <my dict size>, [<my dict name>: <my dict size>], ..."

例如，以下将默认`certificate_data`字典设置为`100M`，并引入了一个新字典，名为 `my_custom_plugin`：

lua-shared-dicts: "certificate_data: 100, my_custom_plugin: 5"

*参考：* [http ][http 25]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#limit\_rate\_after][http 25]

## http-redirect-code ##

设置要在重定向中使用的HTTP状态代码。支持代码[301][]，[302][]，[307][]和[308][] ***default:*** 308

> **为什么默认代码是308？**
> 
> 创建[RFC 7238][]是为了定义308（永久重定向）状态代码，该状态代码类似于301（永久移动），但它将有效负载保留在重定向中。如果我们以POST之类的方法发送重定向，这一点很重要。

## proxy-buffering ##

启用或禁用[代理服务器响应的缓冲][Link 81]。

## limit-req-status-code ##

设置[状态代码以响应被拒绝的请求而返回][Link 82]。 ***default:*** 503

## limit-conn-status-code ##

设置[状态代码以响应拒绝的连接而返回][Link 83]。 ***default:*** 503

## no-tls-redirect-locations ##

以逗号分隔的位置列表，在这些位置上，http请求永远不会重定向到其https副本。***default:*** "/.well-known/acme-challenge"

## global-auth-url ##

`nginx.ingress.kubernetes.io/auth-url`。可以使用`no-auth-locations`See [no-auth-locations][Link 47]列出不应该通过身份[验证的位置][Link 47]。另外，可以通过`enable-global-auth`设置为“ false”的注释将每个服务从身份验证中排除。 ***default:*** ""

*参考文献：* [https ][https 3]*:* [//github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md\#external-authentication][https 3]

## global-auth-method ##

一种用于现有服务的HTTP方法，该服务为所有位置提供身份验证。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-method`。***default:*** ""

## global-auth-signin ##

为现有服务设置错误页面的位置，该服务为所有位置提供身份验证。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-signin`。 ***default:*** ""

## global-auth-signin-redirect-param ##

在错误页面登录URL中设置查询参数，该URL包含身份验证失败的请求的原始URL。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-signin-redirect-param`。 ***default:*** "rd"

## global-auth-response-headers ##

将头设置为在身份验证请求完成后传递到后端。应用于所有位置。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-response-headers`。***default:*** ""

## global-auth-request-redirect ##

设置X-Auth-Request-Redirect标头值。应用于所有位置。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-request-redirect`。***default:*** ""

## global-auth-snippet ##

设置自定义代码段以与外部身份验证一起使用。应用于所有位置。类似于Ingress规则注释`nginx.ingress.kubernetes.io/auth-request-redirect`。 ***default:*** ""

## global-auth-cache-key ##

为全局身份验证请求启用缓存。指定用于身份验证响应的查找键，例如`$remote_user$http_authorization`。

## global-auth-cache-duration ##

根据验证响应的响应代码（例如）设置缓存时间`200 202 30m`。有关详细信息，请参见[proxy\_cache\_valid][proxy_cache_valid]。您可以指定多个逗号分隔的值：`200 202 10m, 401 5m`。默认为`200 202 401 5m`。

## no-auth-locations ##

以逗号分隔的不应该通过身份验证的位置列表。 ***default:*** "/.well-known/acme-challenge"

## block-cidrs ##

以逗号分隔的IP地址（或子网）列表，必须全局阻止来自该IP地址（或子网）的请求。

*参考：* [http ][http 26]*:* [//nginx.org/en/docs/http/ngx\_http\_access\_module.html\#deny][http 26]

## block-user-agents ##

以逗号分隔的User-Agent列表，必须全局阻止来自该列表的请求。在这里可以使用完整的字符串和正则表达式。有关有效模式的更多详细信息，可以在`map`Nginx指令文档中找到。

*参考：* [http ][http 27]*:* [//nginx.org/en/docs/http/ngx\_http\_map\_module.html\#map][http 27]

## block-referers ##

以逗号分隔的“引荐来源”列表，必须全局阻止来自其的请求。在这里可以使用完整的字符串和正则表达式。有关有效模式的更多详细信息，可以在`map`Nginx指令文档中找到。

*参考：* [http ][http 27]*:* [//nginx.org/en/docs/http/ngx\_http\_map\_module.html\#map][http 27]

## proxy-ssl-location-only ##

设置是否将proxy-ssl参数仅应用于位置而不应用于服务器。***default:*** is disabled

## default-type[¶][Link 51] ##

设置响应的默认MIME类型。***default:*** text/html

*参考：* [http ][http 28]*:* [//nginx.org/en/docs/http/ngx\_http\_core\_module.html\#default\_type][http 28]

参考配置

apiVersion: v1
    kind: ConfigMap
    data:
      allow-backend-server-header: "true"
      compute-full-forwarded-for: "true"
      enable-brotli: "true"
      enable-modsecurity: "true"
      enable-ocsp: "true"
      enable-owasp-modsecurity-crs: "true"
      enable-underscores-in-headers: "true"
      generate-request-id: "true"
      hsts-preload: "true"
      ignore-invalid-headers: "true"
      keep-alive-requests: "10000"
      log-format-upstream: $remote_addr - [$proxy_add_x_forwarded_for] - $remote_user
        [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"
        $request_length $request_time [$proxy_upstream_name] $upstream_addr $upstream_response_length
        $upstream_response_time $upstream_status $req_id $host [$proxy_alternative_upstream_name]
      max-worker-connections: "65535"
      proxy-body-size: 20m
      proxy-connect-timeout: "1"
      proxy-read-timeout: "3"
      proxy-send-timeout: "3"
      reuse-port: "true"
      server-tokens: "false"
      ssl-protocols: TLSv1.2 TLSv1.3
      ssl-redirect: "false"
      ssl-session-cache: "true"
      ssl-session-cache-size: 5m
      ssl-session-ticket-key: yAl9Gs5LFBlfiWqmdCLVQCt7KVMXbYuYVOHhT1PD9w5OQWIFQ2SwsKhNBJ5FhninuR3tX6CpSDe2tnQOExJ2JCmvwSLfPUWL0PDeRJpEnJ0=
      ssl-session-tickets: "true"
      ssl-session-timeout: 60m
      upstream-keepalive-connections: "200"
      upstream-keepalive-requests: "10000"
      upstream-keepalive-timeout: "100"
      use-forwarded-headers: "true"
      worker-cpu-affinity: auto
      worker-processes: auto

[config.go]: https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go
[proxy-set-headers]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-set-headers
[Link 1]: https://github.com/kubernetes/ingress-nginx/tree/master/docs/examples/customization/custom-headers
[http]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_hide_header
[http 1]: http://nginx.org/en/docs/http/ngx_http_log_module.html#access_log
[Link 2]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#configuration-options
[Link 3]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#add-headers
[Link 4]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#allow-backend-server-header
[Link 5]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hide-headers
[Link 6]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-params
[Link 7]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#access-log-path
[http-access-log-path]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-access-log-path
[Link 8]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#stream-access-log-path
[Link 9]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-access-log-for-default-backend
[Link 10]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-path
[Link 11]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-modsecurity
[owasp-modsecurity-crs]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-owasp-modsecurity-crs
[modsecurity]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#modsecurity-snippet
[Link 12]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-buffer-size
[Link 13]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-header-timeout
[Link 14]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-buffer-size
[Link 15]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#client-body-timeout
[Link 16]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-access-log
[-ipv6]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6
[-ipv6-dns]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#disable-ipv6-dns
[Link 17]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-underscores-in-headers
[Link 18]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-ocsp
[Link 19]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ignore-invalid-headers
[Link 20]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#retry-non-idempotent
[Link 21]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#error-log-level
[http2-max-field-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-field-size
[http2-max-header-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-header-size
[http2-max-requests]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-requests
[http2-max-concurrent-streams]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-concurrent-streams
[Link 22]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts
[hsts-include-subdomains]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-include-subdomains
[Link 23]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-max-age
[hsts-preload]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#hsts-preload
[Link 24]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive
[Link 25]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#keep-alive-requests
[Link 26]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#large-client-header-buffers
[json]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-escape-json
[Link 27]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-upstream
[Link 28]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#log-format-stream
[Link 29]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-multi-accept
[max-worker-connections]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-connections
[max-worker-open-files]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#max-worker-open-files
[Link 30]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#map-hash-bucket-size
[IP]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-real-ip-cidr
[Link 31]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-max-size
[Link 32]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-name-hash-bucket-size
[Link 33]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-max-size
[Link 34]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#reuse-port
[Link 35]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-headers-hash-bucket-size
[Link 36]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#plugins
[Link 37]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-tokens
[Link 38]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ciphers
[ssl-ecdh]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-ecdh-curve
[ssl-dh-param]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-dh-param
[ssl]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-protocols
[ssl-early-data]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-early-data
[ssl 1]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache
[ssl 2]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-cache-size
[ssl 3]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-tickets
[ssl-session-ticket-key]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-ticket-key
[ssl-session-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-session-timeout
[ssl-buffer-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-buffer-size
[use-proxy-protocol]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-proxy-protocol
[proxy-protocol-header-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-protocol-header-timeout
[use-gzip]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-gzip
[use-geoip]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip
[use-geoip2]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-geoip2
[enable-brotli]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-brotli
[brotli-level]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-level
[brotli-types]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#brotli-types
[use-http2]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-http2
[gzip-level]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-level
[gzip-min-length]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-min-length
[gzip-types]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#gzip-types
[worker-processes]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-processes
[worker-cpu-affinity]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-cpu-affinity
[worker-shutdown-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#worker-shutdown-timeout
[load-balance]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#load-balance
[variables-hash-bucket-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-bucket-size
[variables-hash-max-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#variables-hash-max-size
[upstream-keepalive-connections]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-connections
[upstream-keepalive-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-timeout
[upstream-keepalive-requests]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#upstream-keepalive-requests
[limit-conn-zone-variable]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-zone-variable
[proxy-stream-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-timeout
[proxy-stream-next-upstream]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream
[proxy-stream-next-upstream-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-timeout
[proxy-stream-next-upstream-tries]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-next-upstream-tries
[proxy-stream-responses]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-stream-responses
[bind-address]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#bind-address
[use-forwarded-headers]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#use-forwarded-headers
[enable-real-ip]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-real-ip
[forwarded-for-header]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#forwarded-for-header
[compute-full-forwarded-for]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#compute-full-forwarded-for
[proxy-add-original-uri-header]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-add-original-uri-header
[generate-request-id]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#generate-request-id
[enable-opentracing]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#enable-opentracing
[opentracing-operation-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-operation-name
[opentracing-location-operation-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#opentracing-location-operation-name
[zipkin-collector-host]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-host
[zipkin-collector-port]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-collector-port
[zipkin-service-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-service-name
[zipkin-sample-rate]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#zipkin-sample-rate
[jaeger-collector-host]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-host
[jaeger-collector-port]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-collector-port
[jaeger-service-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-service-name
[jaeger-sampler-type]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-type
[jaeger-sampler-param]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-param
[jaeger-sampler-host]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-host
[jaeger-sampler-port]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-sampler-port
[jaeger-trace-context-header-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-trace-context-header-name
[jaeger-debug-header]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-debug-header
[jaeger-baggage-header]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-baggage-header
[jaeger-tracer-baggage-header-prefix]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#jaeger-tracer-baggage-header-prefix
[datadog-collector-host]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-host
[datadog-collector-port]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-collector-port
[datadog-service-name]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-service-name
[datadog-environment]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-environment
[datadog-operation-name-override]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-operation-name-override
[datadog-priority-sampling]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-priority-sampling
[datadog-sample-rate]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#datadog-sample-rate
[main-snippet]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#main-snippet
[http-snippet]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-snippet
[server-snippet]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet
[location-snippet]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#location-snippet
[custom-http-errors]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#custom-http-errors
[proxy-body-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-body-size
[proxy-connect-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-connect-timeout
[proxy-read-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-read-timeout
[proxy-send-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-send-timeout
[proxy-buffers-number]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffers-number
[proxy-buffer-size]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffer-size
[proxy-cookie-path]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-path
[proxy-cookie-domain]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-cookie-domain
[proxy-next-upstream]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream
[proxy-next-upstream-timeout]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-timeout
[proxy-next-upstream-tries]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-next-upstream-tries
[proxy-redirect-from]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-redirect-from
[proxy-request-buffering]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-request-buffering
[ssl-redirect]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#ssl-redirect
[whitelist-source-range]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#whitelist-source-range
[skip-access-log-urls]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#skip-access-log-urls
[limit-rate]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate
[limit-rate-after]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-rate-after
[lua-shared-dicts]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#lua-shared-dicts
[http-redirect-code]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http-redirect-code
[proxy-buffering]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-buffering
[limit-req-status-code]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-req-status-code
[limit-conn-status-code]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#limit-conn-status-code
[no-tls-redirect-locations]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-tls-redirect-locations
[global-auth-url]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-url
[Link 39]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-method
[Link 40]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin
[Link 41]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-signin-redirect-param
[Link 42]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-response-headers
[Link 43]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-request-redirect
[Link 44]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-snippet
[Link 45]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-key
[Link 46]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#global-auth-cache-duration
[Link 47]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#no-auth-locations
[Link 48]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-cidrs
[Link 49]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-user-agents
[Link 50]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#block-referers
[SSL]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#proxy-ssl-location-only
[Link 51]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#default-type
[http 2]: http://nginx.org/en/docs/ngx_core_module.html#error_log
[http 3]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_header_buffer_size
[http 4]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_header_timeout
[http 5]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_body_buffer_size
[http 6]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_body_timeout
[Link 52]: https://en.wikipedia.org/wiki/OCSP_stapling
[https]: https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_field_size
[https 1]: https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_header_size
[http 7]: http://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_requests
[http 8]: http://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_concurrent_streams
[https_developer.mozilla.org_zh-CN_docs_Web_Security_HTTP_strict_transport_security]: https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
[https_blog.qualys.com_securitylabs_2016_03_28_the-importance-of-a-proper-http-strict-transport-security-implementation-on-your-web-server]: https://blog.qualys.com/securitylabs/2016/03/28/the-importance-of-a-proper-http-strict-transport-security-implementation-on-your-web-server
[http 9]: http://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_timeout
[http 10]: http://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_requests
[http 11]: http://nginx.org/en/docs/http/ngx_http_core_module.html#large_client_header_buffers
[Link 53]: http://nginx.org/en/docs/http/ngx_http_log_module.html#log_format
[Link 54]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/log-format/
[Link 55]: https://nginx.org/en/docs/stream/ngx_stream_log_module.html#log_format
[http 12]: http://nginx.org/en/docs/ngx_core_module.html#multi_accept
[Link 56]: http://nginx.org/en/docs/ngx_core_module.html#worker_connections
[Link 57]: http://nginx.org/en/docs/ngx_core_module.html#worker_rlimit_nofile
[Link 58]: http://nginx.org/en/docs/http/ngx_http_map_module.html#map_hash_bucket_size
[Link 59]: http://nginx.org/en/docs/hash.html
[Link 60]: http://nginx.org/en/docs/http/ngx_http_core_module.html#server_names_hash_max_size
[http_nginx.org_zh-CN_docs_http_ngx_http_core_module.html_server_names_hash_bucket_size]: http://nginx.org/en/docs/http/ngx_http_core_module.html#server_names_hash_bucket_size
[https_nginx.org_zh_CN_docs_http_ngx_http_proxy_module.html_proxy_headers_hash_max_size]: https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_max_size
[https_nginx.org_zh_CN_docs_http_ngx_http_proxy_module.html_proxy_headers_hash_bucket_size]: https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_headers_hash_bucket_size
[ingress-nginx]: https://github.com/kubernetes/ingress-nginx/blob/master/rootfs/etc/nginx/lua/plugins/README.md
[Link 61]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ciphers
[Link 62]: https://wiki.mozilla.org/Security/Server_Side_TLS#Forward_Secrecy
[DH]: https://github.com/kubernetes/ingress-nginx/tree/master/docs/examples/customization/ssl-dh-param
[Mozilla SSL]: https://mozilla.github.io/server-side-tls/ssl-config-generator/
[http 13]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ecdh_curve
[https_wiki.openssl.org_index.php_Diffie-Hellman_parameters]: https://wiki.openssl.org/index.php/Diffie-Hellman_parameters
[https_wiki.mozilla.org_Security_Server_Side_TLS_DHE_handshake_and_dhparam]: https://wiki.mozilla.org/Security/Server_Side_TLS#DHE_handshake_and_dhparam
[http_nginx.org_en_docs_http_ngx_http_ssl_module.html_ssl_dhparam]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam
[SSL 1]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols
[Link 63]: https://tools.ietf.org/html/rfc8446#section-2.3
[Link 64]: https://tools.ietf.org/html/rfc8470
[ssl_early_data]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data
[SSL 2]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache
[TLS]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_tickets
[Link 65]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_timeout
[SSL 3]: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_buffer_size
[https 2]: https://www.igvita.com/2013/12/16/optimizing-nginx-tls-time-to-first-byte/
[PROXY]: https://www.nginx.com/resources/admin-guide/proxy-protocol/
[gzip]: http://nginx.org/en/docs/http/ngx_http_gzip_module.html
[geoip]: http://nginx.org/en/docs/http/ngx_http_geoip_module.html
[Link 66]: https://support.maxmind.com/geolite-legacy-discontinuation-notice/
[geoip2]: https://github.com/leev/ngx_http_geoip2_module
[MaxMind]: https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases
[brotli]: https://github.com/google/ngx_brotli
[https_caniuse.com_feat_brotli]: https://caniuse.com/#feat=brotli
[HTTP _ 2]: http://nginx.org/en/docs/http/ngx_http_v2_module.html
[Link 67]: http://nginx.org/en/docs/ngx_core_module.html#worker_processes
[worker_cpu_affinity]: http://nginx.org/en/docs/ngx_core_module.html#worker_cpu_affinity
[Link 68]: http://nginx.org/en/docs/ngx_core_module.html#worker_shutdown_timeout
[Link 69]: https://github.com/kubernetes/ingress-nginx/blob/master/rootfs/etc/nginx/lua/balancer/ewma.lua
[http 14]: http://nginx.org/en/docs/http/load_balancing.html
[http 15]: http://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_bucket_size
[http 16]: http://nginx.org/en/docs/http/ngx_http_map_module.html#variables_hash_max_size
[http 17]: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive
[http_nginx.org_en_docs_http_ngx_http_upstream_module.html_keepalive_timeout]: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_timeout
[http 18]: http://nginx.org/en/docs/http/ngx_http_upstream_module.html#keepalive_requests
[limit_conn_zone]: http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html#limit_conn_zone
[http 19]: http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_timeout
[http 20]: http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_next_upstream
[http 21]: http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_next_upstream_timeout
[http 22]: http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_responses
[http_nginx.org_en_docs_http_ngx_http_realip_module.html]: http://nginx.org/en/docs/http/ngx_http_realip_module.html
[https_github.com_opentracing-contrib_nginx-opentracing]: https://github.com/opentracing-contrib/nginx-opentracing
[nginx.tmpl]: https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/
[error_page]: http://nginx.org/en/docs/http/ngx_http_core_module.html#error_page
[proxy_intercept_errors]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
[client_max_body_size]: http://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size
[Link 70]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_connect_timeout
[Link 71]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_read_timeout
[Link 72]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_send_timeout
[Link 73]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffers
[Link 74]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffer_size
[Link 75]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_path
[Link 76]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cookie_domain
[Link 77]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream
[Link 78]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream_timeout
[Link 79]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_next_upstream_tries
[http 23]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
[Link 80]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_request_buffering
[ngx_http_access_module]: http://nginx.org/en/docs/http/ngx_http_access_module.html
[http 24]: http://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate
[http 25]: http://nginx.org/en/docs/http/ngx_http_core_module.html#limit_rate_after
[301]: https://developer.mozilla.org/docs/Web/HTTP/Status/301
[302]: https://developer.mozilla.org/docs/Web/HTTP/Status/302
[307]: https://developer.mozilla.org/docs/Web/HTTP/Status/307
[308]: https://developer.mozilla.org/docs/Web/HTTP/Status/308
[RFC 7238]: https://tools.ietf.org/html/rfc7238
[Link 81]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffering
[Link 82]: http://nginx.org/en/docs/http/ngx_http_limit_req_module.html#limit_req_status
[Link 83]: http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html#limit_conn_status
[https 3]: https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md#external-authentication
[proxy_cache_valid]: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_valid
[http 26]: http://nginx.org/en/docs/http/ngx_http_access_module.html#deny
[http 27]: http://nginx.org/en/docs/http/ngx_http_map_module.html#map
[http 28]: http://nginx.org/en/docs/http/ngx_http_core_module.html#default_type