nginx使用geoip做区域限制

灰太狼 2020-05-19 09:39 864阅读 0赞

** nginx使用geoip做区域限制 **
**GeoIP过滤器根据来自Maxmind GeoLite2数据库的数据添加有关IP地址的地理位置的信息。**

**通过IP区别国内或国外，从而跳转到不同的页面，最终用nginx的第三方module：geoip来实现**，这就不说它的优势了，网上很多解释，下面看怎么配置

我的系统中是配置了nignx.repo的，我直接用yum来安装了geoip模块,没有用添加模块重编的方式

```shell
yum install nginx-module-geoip
```

**下载geoip的数据库文件**

```shell
cd /etc/nginx
mkdir geoipdat
cd geoipdat
下载
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
解压
gunzip GeoIP.dat.gz
gunzip GeoLiteCity.dat.gz
```

**根据需求配置nginx**

**首先在nginx.conf中加载geoip的库，配置如下：**

```properties
load_module "modules/ngx_http_geoip_module.so";
load_module "modules/ngx_stream_geoip_module.so";
user  nginx;
worker_processes  1;
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;
events {
    worker_connections  1024;
}
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile        on;
    #tcp_nopush     on;
    keepalive_timeout  65;
    #gzip  on;
    include /etc/nginx/conf.d/*.conf;
}
```

**配置虚拟主机如下：**

```properties
geoip_country /etc/nginx/geoipdat/GeoIP.dat;
geoip_city /etc/nginx/geoipdat/GeoLiteCity.dat;
server {
    listen       80;
    server_name  localhost;
    location / {
    root /opt;
    if ($geoip_country_code = CN){
        rewrite (.*) /zh$1 break;
    }
        rewrite (.*) /en$1 break;
    }
        error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}
```

**opt目录如下**

```properties
[root@VM_0_15_centos opt]# tree
.
|
└── en
│       └── index.html
└── zh
    └── index.html
```