Shulou(Shulou.com)06/02 Report--

First create a file denyIP to write the filtered IP to it, and then make a path in the configuration file

Include / usr/local/nginx/conf/denyIP

Zone:=one:10m: set a cache space named one with a size of 100m

M = minutes, s = seconds, 2000 requests per minute, or 200 requests per second

Limit_req_zone $binary_remote_addr zone=one:100m rate=2000r/m

Define a limit_req_zone named allips to store session, with a size of 50 MB of memory

Limit_req_zone $binary_remote_addr zone=allips:50m rate=200r/s

Burst=5: because the traffic is not uniform all the time like a leaky bucket, in order to avoid the occurrence of large-scale traffic at a certain time, the burst parameter is added. Here, set a buffer with a size of 5. When a large number of requests (outbreaks) come, the access exceeds the above limit and can be placed in the buffer first.

Limit_req zone=one burst=5 nodelay

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.