一.搭建Nginx服务器
1.释放80端口
# netstat -tulnp | grep :80
# service httpd stop
# chkconfig --level 35 httpd off
2.安装依赖软件包
# yum -y groupinstall“开发工具”“开发库”
# yum -y install gcc gcc-c++ make
# yum-y install pcre-devel
# yum -y install openssl-devel
3.安装Nginx软件
# useradd -M -s /sbin/nologin nginx //创建nginx程序用户
#tar -zxvf nginx-0.8.55.tar.gz
#cd nginx-0.8.55
./configure \
> --prefix=/usr/local/nginx \
> --user=nginx \
> --group=nginx \
> --with-http_stub_status_module \
> --with-http_ssl_module
# make && make install
4.开启服务
# cd /usr/local/nginx/sbin
# ./nginx
# echo "/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf" >> /etc/rc.local
//设置为开机启动
# netstat -tulnp | grep :80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 6924/nginx
二.平滑升级（在不停止服务的情况下，升级Nginx软件版本）
#tar -zxvf nginx-1.0.5.tar.gz //解压高版本Nginx
#cd nginx-1.0.5
./configure \
> --prefix=/usr/local/nginx \
> --user=nginx \
> --group=nginx \
> --with-http_stub_status_module \
> --with-http_ssl_module
# make
# mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old
# cp objs/nginx /usr/local/nginx/sbin/
# make upgrade
/usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
kill -USR2 `cat /usr/local/nginx/logs/nginx.pid`
sleep 1
test -f /usr/local/nginx/logs/nginx.pid.oldbin
kill -QUIT `cat /usr/local/nginx/logs/nginx.pid.oldbin`
# /usr/local/nginx/sbin/nginx -v //查看nginx版本
nginx: nginx version: nginx/1.0.5
三.配置Nginx虚拟主机
基于域名虚拟主机
1.1 编辑主配置文件
# vim /usr/local/nginx/conf/nginx.conf
……
17 http {
18 include mime.types;
19 default_type application/octet-stream;
……
34 server {
35 listen 80;
36 server_name www.jinjianjun.com;
37 location / {
38 root /www;
39 index index.html;
40 }
41 }
42 server {
43 listen 80;
44 server_name bbs.jinjianjun.com;
45 location / {
46 root /bbs;
47 index index.html;
48 }
1.2 制作测试网页
# mkdir /www
# mkdir /bbs
# echo www.jinjianjun.com > /www/index.html
# echo bbs.jinjianjun.com > /bbs/index.html
1.3 检查配置文件
# ./nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
1.4 重启服务
# /usr/local/nginx/sbin/nginx -s stop
# /usr/local/nginx/sbin/nginx
1.5 客户端测试
# vim /etc/hosts
192.168.100.1 www.jinjianjun.com www
192.168.100.1 bbs.jinjianjun.com bbs
# elinks -dump http://www.jinjianjun.com
www.jinjianjun.com
# elinks -dump http://bbs.jinjianjun.com
bbs.jinjianjun.com
2.基于端口的虚拟主机
2.1 修改主配置文件
server {
listen 8080;
server_name www.jinjianjun.com;
location / {
root /www;
index index.html;
}
}
server {
listen 8090;
server_name www.jinjianjun.com;
location / {
root /bbs;
index index.html;
}
}
2.2 重启服务
# /usr/local/nginx/sbin/nginx -s stop
# /usr/local/nginx/sbin/nginx
2.3 客户端测试
# elinks -dump http://www.jinjianjun.com:8080
www.jinjianjun.com
# elinks -dump http://www.jinjianjun.com:8090
bbs.jinjianjun.com
3.基于ip的虚拟主机
3.1 添加IP
# ifconfig eth0:0 192.168.100.2
3.2 修改主配置文件
server {
listen 192.168.100.1:80;
# server_name www.jinjianjun.com;
location / {
root /www;
index index.html;
}
}
server {
listen 192.168.100.2:80;
# server_name www.jinjianjun.com;
location / {
root /bbs;
index index.html;
}
}
3.3 重启服务
# kill -HUP `cat /usr/local/nginx/logs/nginx.pid`
3.4 客户端测试
# elinks -dump 192.168.100.1
www.jinjianjun.com
# elinks -dump 192.168.100.2
bbs.jinjianjun.com
四、客户端访问控制
实验需求：配置基于域名的虚拟主机
www.jinjianjun.com
bbs.jinjianjun.com
只允许从ip 192.168.100.254主机访问 bbs.tarena.com的8080端口,访问时要提交正确的验证用户admin密码123456方可访问
4.1 修改主配置文件
# vim /usr/local/nginx/conf/nginx.conf
……
server {
listen 192.168.100.1:80;
server_name www.jinjianjun.com;
location / {
root /www;
index index.html;
}
}
server {
listen 192.168.100.1:8080;
server_name bbs.jinjianjun.com;
location / {
root /bbs;
index index.html;
allow 192.168.100.254;
deny all;
auth_basic "check your name";
auth_basic_user_file /usr/local/nginx/conf/authuser.txt;
}
……
4.2 创建验证用户
# htpasswd -c /usr/local/nginx/conf/authuser.txt admin
New password:
Re-type new password:
Adding password for user admin
# cat /usr/local/nginx/conf/authuser.txt
admin:m37ojgyep3fls
4.3 重启服务
# kill -HUP `cat /usr/local/nginx/logs/nginx.pid`
4.4 客户端测试
