nginx简单权限配置

一、指定ip段

location / {

    allow 172.17.0.1/24;

    deny all;

}

二、指定认证账户

location / {

    auth_basic "please entry your password";

    auth_basic_user_file /etc/nginx/auth/auth_file;

}

指定保存用户名密码的文件，格式如下：

name1:password1

name2:password2

name3:password3

生成密码格式：

[root@test ~]# openssl passwd

fIHcRVEKijgoM

[root@test ~]# echo "admin:fIHcRVEKijgoM" > auth_file

[root@test ~]# cat auth_file

admin:fIHcRVEKijgoM

三、过频

limit_req_zone $binary_remote_addr zone=req_perip:50m rate=1r/s;

server {

    listen       ;

    server_name  localhost;

    root /tmp;

    location / {

        limit_req zone=req_perip burst= nodelay;

        limit_req_status ;

    }

}

四、总体

limit_req_zone $binary_remote_addr zone=req_perip:50m rate=1r/s;

server {

    listen       ;

    server_name  localhost;

    root /tmp;

    location / {

        #proxy_pass http://www.baidu.com;

        allow 172.17.0.1;

        deny all;

        auth_basic "please entry your password";

        auth_basic_user_file /etc/nginx/auth/auth_file;

        limit_req zone=req_perip burst= nodelay;

        limit_req_status ;

    }

}