博客
关于我
OpenResty(nginx扩展)实现防cc攻击
阅读量:791 次
发布时间:2023-02-24

本文共 3022 字,大约阅读时间需要 10 分钟。

OpenResty + Nginx Lua ????

OpenResty ????? Nginx ? Lua ??? Web ?????? Nginx ????? Lua ???????? Web ???????? OpenResty ?????????

??????

??????????????????

RHEL/Centos

yum install readline-devel pcre-devel openssl-devel

Ubuntu

sudo apt-get install libreadline-dev libncurses5-dev libpcre3-dev libssl-dev perl

LuaJit ??

OpenResty ?? LuaJit ??? Lua ??????????????

  • ?? LuaJit ??
  • cd /tmp/git clone http://luajit.org/git/luajit-2.0.gitcd luajit-2.0/make && make install
    1. ?????
    2. ln -sf /usr/local/bin/luajitln -sf /usr/local/lib/libluajit-5.1.so.2 /usr/lib/

      OpenResty ??

      ?? OpenResty ??????

    3. ?????
    4. cd /tmp/wget http://agentzh.org/misc/nginx/ngx_openresty-1.2.4.13.tar.gztar xzf ngx_openresty-1.2.4.13.tar.gz
      1. ?????
      2. cd ngx_openresty-1.2.4.13/./configure --prefix=/usr/local/openresty --with-luajitmake && make install

        Nginx ??

        ? OpenResty ??? Nginx?

      3. ??????
      4. http {    lua_shared_dict limit 10m;    lua_shared_dict jsjump 10m;    server {        listen 80;        server_name www.centos.bz;        location / {            default_type text/html;            content_by_lua_file "/usr/local/openresty/nginx/conf/lua";        }        location @cc {            internal;            root html;            index index.html index.htm;        }    }}
        1. Lua????
        2. local ip = ngx.var.binary_remote_addrlocal limit = ngx.shared.limitlocal req, _ = limit:get(ip)if req then    if req > 20 then        ngx.exit(503)    else        limit:incr(ip, 1)    endelse    limit:set(ip, 1, 10)endlocal jsjump = ngx.shared.jsjumplocal uri = ngx.var.request_urilocal jspara, flags = jsjump:get(ip)local args = ngx.req.get_uri_args()if jspara then    if flags then        ngx.exec("@cc")    else        local p_jskey = ''        if args["jskey"] and type(args["jskey"]) == 'table' then            p_jskey = args["jskey"][table.getn(args["jskey"])]        else            p_jskey = args["jskey"]        end        if p_jskey and p_jskey == tostring(jspara) then            jsjump:set(ip, jspara, 3600, 1)            ngx.exec("@cc")        else            local url = ''            if ngx.var.args then                url = ngx.var.scheme .. "://" .. ngx.var.host .. uri .. "&jskey=" .. jspara            else                url = ngx.var.scheme .. "://" .. ngx.var.host .. uri .. "?jskey=" .. jspara            end            local jscode = "window.location.href='" .. url .. ';'"            ngx.say(jscode)        end    endelse    math.randomseed(os.time())    local random = math.random(100000, 999999)    jsjump:set(ip, random, 60)    local url = ''    if ngx.var.args then        url = ngx.var.scheme .. "://" .. ngx.var.host .. uri .. "&jskey=" .. random    else        url = ngx.var.scheme .. "://" .. ngx.var.host .. uri .. "?jskey=" .. random    end    local jscode = "window.location.href='" .. url .. ';'"    ngx.say(jscode)end

          Lua ????

          1. rate limiting

          • 1-12: ?? IP ????
          • 14-48: ?? IP ????
          • 24: 3600??????
          • 3600: 1???????

          2. JS jump

          • ????????
          • ?? JSKey ??
          • ?? URL ?????

          ????

          2013.5.26

        3. ?? JS ????? bug
        4. ?? IP ????
        5. ????????????? OpenResty + Nginx ???? Web ??????????

    转载地址:http://icpfk.baihongyu.com/

    你可能感兴趣的文章
    Openlayers实战:绘制多边形,导出CSV文件
    查看>>
    Openlayers实战:绘制带箭头的线
    查看>>
    Openlayers实战:绘制点、线、圆、多边形
    查看>>
    Openlayers实战:绘制矩形,正方形,正六边形
    查看>>
    Openlayers实战:自定义放大缩小,显示zoom等级
    查看>>
    Openlayers实战:自定义版权属性信息
    查看>>
    Openlayers实战:输入WKT数据,输出GML、Polyline、GeoJSON格式数据
    查看>>
    Openlayers实战:选择feature,列表滑动,定位到相应的列表位置
    查看>>
    Openlayers实战:非4326,3857的投影
    查看>>
    Openlayers高级交互(1/20): 控制功能综合展示(版权、坐标显示、放缩、比例尺、测量等)
    查看>>
    Openlayers高级交互(10/20):绘制矩形,截取对应部分的地图并保存
    查看>>
    Openlayers高级交互(11/20):显示带箭头的线段轨迹,箭头居中
    查看>>
    Openlayers高级交互(12/20):利用高德逆地理编码,点击位置,显示坐标和地址
    查看>>
    Openlayers高级交互(13/20):选择左右两部分的地图内容,横向卷帘
    查看>>
    Openlayers高级交互(14/20):汽车移动轨迹动画(开始、暂停、结束)
    查看>>
    Openlayers高级交互(15/20):显示海量多边形,10ms加载完成
    查看>>
    Openlayers高级交互(16/20):两个多边形的交集、差集、并集处理
    查看>>
    Openlayers高级交互(17/20):通过坐标显示多边形,计算出最大幅宽
    查看>>
    Openlayers高级交互(18/20):根据feature,将图形适配到最可视化窗口
    查看>>
    Openlayers高级交互(19/20): 地图上点击某处,列表中显示对应位置
    查看>>