Nginx 1 Web Server Implementation

Nginx

1 Web

Server

Implementation

Cookbook

Over

100

_recipes

to master

_using

the

_Nginx

HTTP

server

and

reverse

_proxy

Dipankar

Sarkar

[

11

open

so

i I _{community experience}d

" *' '" _I

community experience distilled

PUBLISHING

urce'^

Table

_of

_Contents

Preface

1

Chapter

1:

The Core

HTTP Module 7

Introduction ₈

Installing

new modules and

_{compiling Nginx}

₈

Running Nginx

in

_debug

mode ₁₀

Easy reloading

of

_{Nginx using}

the CLI 11

Splitting configuration

files for better

_management

13

Setting

up

multiple

virtual hosts 16

Setting

upa default catch-all virtual host 17

Using

wildcards in virtual hosts 18

Setting

up the number ofworker processes

correctly

19

Increasing

the size of

_uploaded

files 20

Using

dynamic

SSI for

_simple

sites 22

Adding

content before and aftera

_particular

_page

23

Enabling

auto

_indexing

of a

directory

₂₅

Serving

any random web page from a

directory

27

Serving

cookies for

_identifying

and

_logging

users 29

Re-encoding

the response to another

encoding

30

Enabling Gzip compression

on somecontent

_types

31

Setting

up

404

and other error

_pages

32

Chapter

2: AH About

Rewrites: The

Rewrite Module

35

Introduction ₃₅

Setting

up a

_simple

redirect

₃₆

Using

variables _{in your}rewrite 37

Using

cookies for your rewrites 38

Using

browser

_agents

_{for your rewrites} 40

Using

rate limits as a condition for rewrites 41

Blocking

requests

basedon HTTP

referrers

₄₃

Tableof Contents

Setting

upa WordPress sitewith static file

serving

46

Setting

upa

Drupal

site with static file

serving

52

Setting

up a

Magento

site with static file

serving

56

Converting

your

Apache's

.htaccess into

Nginx

rewrites 59

Using

mapstomake

_{configurations}

cleaner 62

Chapter

3: Get It All

_Logged:

The

_Logging

Module

65

Introduction 65

Setting

uperror

log path

and levels 66

Logging

it like

Apache

67

Disabling

logging

of 404 in error

_logs

68

Using

different

_{logging profiles}

in thesame

setup

69

Enabling

a

log

file cache 71

Utilizing separate

error

logs

_pervirtual host 72

Setting

up

log

rotation 74

Enabling

remote

_logging

with

_syslog-ng

75

Setting

up yourcustom

_logs

for easy

parsing

76

Chapter

4: Slow Them Down: Access and

Rate

_Limiting

Module 83

Introduction 83

Limiting requests

forany

given

session 84

Blocking

and

allowing

access

using

IP 85

Setting

up

simple

rate

_limiting

for a download

_directory

86

Rate

_limiting

search

_engine

bots 87

Setting

upGeolP

using

theMaxMind

country

database 88

Using

the GeolP moduleto_{set up} access and rate control 90

Chapter

5: Let's be Secure:

_Security

Modules 93

Introduction 93

Setting

upHTTPauth foraccesscontrol 94

Generating

a secure link for files 95

Setting

upHTTPS for a

simple

site ₉₇

Using

non standard error codes for

debugging

SSL

_setup

100

Using

wildcard certificates with

_multiple

servers 101

Using Nginx

SSL variablesfor rewrite rules 103

Chapter

6:

_{Setting Up Applications:}

FCGI

and WSGI Modules

105

Introduction ₁₀₅ Setti ngu_pa PH PFCGI site 106

Setting

upa

Python

site

_using

uWSGI ₁₁₀

Modifying

FCGI timeouts 113

Utilizing

FCGIcache to

_speed

_{it up} 114

Using multiple

FCGI backends 115

Table of Contents

Chapter

7:

_Nginx

as a Reverse

_Proxy

119

Introduction ₁₁₉

Using Nginx

as a

_simple

_{reverse proxy 120}

Setting

upa railssite

_{using Nginx}

as a reverse _proxy 121

Setting

upcorrectreverse _{proxy timeouts 123}

Setting

up

caching

on the reverse_proxy 124

Using

multiple

backends for the reverse _proxy 126

Serving

CGI files

_{using thttpd}

and

_Nginx

128

Setting

upload

balancing

with reverse proxy 130

Splitting

requests

based onvarious conditions

using split-clients

132

Chapter

8:

_Improving

Performance

and SEP

_{Using Nginx}

135

Introduction 136

Setting

upTCP

options

correctly

for

_optimizing

_performance

136

Reducing

the

_keep-alives

_{to free up}

_Nginx

workers 137

Using

Memcached asthe cache backend 138

Configuring

the

_right

event model and file limits 140

Setting

max-age

expiry

headers for client-side

_caching

141

Blocking

scrapers,

bots,

and

spiders

tosave bandwidth 143

Redirection ofwwwto non-wwwdomain for SEO ₁₄₄

Removing

all white space from response 145

Setting

upserver status for

_monitoring

₁₄₆

Setting

up Muninfor 24x7

_Nginx

_monitoring

147

Enabling

GZIP

_{pre-compression}

₁₅₀

Preventing

hotlinking using Nginx

151

Using

embedded Perl to

_{minify JavaScript}

files 152

Using

embedded Perlto

_minify

CSS

files

154

Using

embedded Perltoserve

_{sitemaps (SEO)}

₁₅₆

Setting

upBoost moduleon

Drupal

with

_Nginx

₁₅₈

Setting

up

streaming

for Flash files 162

Utilizing

the lxlGIF

_serving

module to dooffline

_processing

163

Chapter

9:

_Using

Other

_Third-party

Modules 165

Introduction ₁₆₆

Setting

upan

IMAP/POP3

_proxyserver 166

Setting

up authentication for mail services 167

Setting

upSSL for mail authentication 170

Using Nginx

as a WEBDAV reverse_proxy 172

Dynamic image

resizing using Nginx

173

Replacing

and

_searching

text in

_Nginx

_response 175

Assembling

ZIP files onthe

_fly

176

Using Nginx

as a HTTP

_{publish-subscribe}

server 178

Transforming

XML responses

using

XSLT

_templates

181

Setting

up

Etags

forstaticcontent 182

Easy

logging

of page load times 183

Streaming

of

_MP4/H.264

files 185

Setting

up SCGI sites 186

Setting

up

expiring

links 188

Chapter

10: Some More

_Third-party

Modules

191

Introduction 191

Configuring

afair load

_balancing

192

Setting

up health checks for backend servers 194

Tracking

and

_reporting

file

_upload

_progress 196

Generating

circles forround

_edges

_{using Nginx}

198

Running Python using

Phusion

Passenger

200

Generating graphs directly

from RRDtool in

_Nginx

202

Using Google performance

tools 204

Serving

content

_directly

from GridFS 205

Configuring

Basic HTTPauth

_using

PAM 207

Configuring

Basic HTTP auth

using

Kerberos 209