Howto: èñïîëüçîâàíèå âåáñåðâåðà nginx (SSL) äëÿ äîñòóïà ê âñòðîåííîìó âåá-èíòåðôåéñó

[angel_il]

howto: Èñïîëüçîâàíèå âåáñåðâåðà nginx (SSL) äëÿ äîñòóïà ê âñòðîåííîìó âåá-èíòåðôåéñó

1) Óñòàíàâëèâàåì nginx (êîìó íàäî âûëîæó ñáîðêó ñ ïîääåðæêîé SSL)
2) íàñòðàèâàåì backend ñîåäèíåíèå ñî âñòðîåííûì âåá-ñåðâåðîì
â ôàéëå /opt/etc/nginx/nginx.conf äîëæíî áûòü ïðîïèñàíî:

    server {
        listen       443;
        server_name  ÄîìåííîåÈìÿÐîóòåðà;

        ssl                  on;
        ssl_certificate      cert.pem;
        ssl_certificate_key   cert.key;

        ssl_session_timeout  5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

        location / {
            proxy_pass         http://127.0.0.1:80/;
            proxy_redirect     off;

            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For
            $proxy_add_x_forwarded_for;
        }
    }

ÄîìåííîåÈìÿÐîóòåðà çàìåíèòü íà âàøå äîìåííîå èìÿ ðîóòåðà.

3) ñîçäàòü ñåðòèôèêàòû

openssl req -new -x509 -days 9999 -nodes -out cert.pem -keyout cert.key

Ñïàñèáî Nebulosa çà ïîäñêàçêó.

ôàéëû cert.key è cert.pem íåîáõîäèìî ïîëîæèòü â ïàïêó /opt/etc/nginx/
Ñîáñòâåííî âñå.
PS: çàõîäèòü íà ðîóòåð òàê https://ÄîìåííîåÈìÿÐîóòåðà

[Stud2000]

Èíòåðåñóåò êòî-íèòü âñ¸ òàêè ïîäíÿòü nginx íà wl500gP
ó ìåíÿ ïèøåò îøèáêó:
2008/07/20 02:46:40 [emerg] 2801#0: epoll_create() failed (89: Function not implemented)
2008/07/20 02:46:40 [alert] 2798#0: worker process 2801 exited with fatal code 2 and can not be respawn

ïðîáîâàë âñå îñòàëüíûå ìåòîäû îáðàáîòêè ñîåäèíåíèé îäíàêî ïðèâåëè ê òîìó æå ðåçóëüòàòó.

[Novik]

îäíàêî ïðèâåëè ê òîìó æå ðåçóëüòàòó.

select äîëæåí ïðîêàòèòü. Åñëè òàêè íåò - äèàãíîñòèêà íà íåì âñÿêî äîëæíà áûòü äðóãîé. Åå è ïèøèòå ñþäà.

[Stud2000]

Òîëüêî âîò â ðåïîçèòàðèè nginx ñîáðàí áåç ïîääåðæêè select, à ïåðåñîáðàòü åãî íà ðîóòåðå íå ïîëó÷àåòñÿ ò.ê. íåò gcc

[Novik]

íåò gcc

1) Ïàêåò ñ gcc òàêè åñòü. Èñêàòü ïî ôîðóìó ïî ñëîâàì "êîìïèëÿöèÿ" è ò.ï.
2) Êðîññ-êîìïèëÿöèþ â ëþáîì ñëó÷àå íèêòî íå îòìåíÿë.

[Stud2000]

Êðîññêîìïèëÿöèÿ ýòî ÷òî è êàê îíî ðàáîòàåò? ïðîñòèòå ìîþ íåâåæåñòâåííîñòü.

[Novik]

Êðîññêîìïèëÿöèÿ ýòî ÷òî è êàê îíî ðàáîòàåò?

1) Êðîìå íàòèâíîé êîìïèëÿöèè gcc îáåñïå÷èâàåò è êðîññ-êîìèëÿöèþ. Ò.å. âîçìîæíîñòü ñîáðàòü íà îäíîé ìàøèíå ôàéëû, êîòîðûå áóäóò âûïîëíÿòüñÿ íà äðóãîé (â òîì ÷èñëå ñ äðóãîé àðõèòåêòóðîé è ò.ï.)
Ñìîòðåòü, íàïðèìåð, òóò - http://wl500g.info/showpost.php?p=51465&postcount=10
2) Íà ïðåäìåò íàòèâíîé êîìïèëÿöèè èñêàòü ïîèñêîì ïî ñëîâó buildroot, åñëè ïî ñëîâó "êîìïèëÿöèÿ" Âû ïî÷åìó-òî íè÷åãî íå íàøëè.

[KernelMadness]

ìåòîä select ïîìîåìó ñíèæàåò ñêîðîñòíûå õàðàêòåðèñòèêè nginx. Ëó÷øå áûëî áû ñ poll èëè rtsig.

[Nebulosa]

Ìåòîä Poll

[Nebulosa]

Î÷åðåäíîå îáíîâëåíèå.

[macek]

Î÷åðåäíîå îáíîâëåíèå.

À ÷òî íîâîãî, ìîæíî ïîëþáîïûòñòâîâàòü?

[Nebulosa]

0.7.21 11.11.2008
Èçìåíåíèÿ â ìîäóëå ngx_http_limit_req_module.
Äîáàâëåíèå: ïîääåðæêà EXSLT â ìîäóëå ngx_http_xslt_module.
Èçìåíåíèå: ñîâìåñòèìîñòü ñ glibc 2.3.

0.7.20 10.11.2008
Èçìåíåíèÿ â ìîäóëå ngx_http_gzip_filter_module.
Äîáàâëåíèå: ìîäóëü ngx_http_limit_req_module.
Èñïðàâëåíèå: äèðåêòèâû âèäà "proxy_pass http://host/some:uri" íå ðàáîòàëè; îøèáêà ïîÿâèëàñü â 0.7.12.
Èñïðàâëåíèå: ïðè èñïîëüçîâàíèè HTTPS çàïðîñû ìîãëè çàâåðøàòüñÿ ñ îøèáêîé "bad write retry".
Èñïðàâëåíèå: ìîäóëü ngx_http_secure_link_module íå ðàáîòàë âíóòðè location'îâ ñ èìåíàìè ìåíüøå 3 ñèìâîëîâ.
Èñïðàâëåíèå: ïåðåìåííàÿ $server_addr ìîãëà íå èìåòü çíà÷åíèÿ.

[Nebulosa]

Î÷åðåäíîå îáíîâëåíèå ìåòîä Poll.

 êà÷åñòâå áîíóñà ÿ ïðèêðóòèë FancyIndex è ñòàòóñ ñåðâåðà.

Ïîäðîáíåå çäåñü http://wiki.codemongers.com/NginxNgxFancyIndex
è çäåñü http://nobrend.ru/?p=22

0.7.22 20.11.2008
Äîáàâëåíèå: ïàðàìåòð none â äèðåêòèâå smtp_auth.
Äîáàâëåíèå: ïåðåìåííûå "$cookie_...".
Èñïðàâëåíèå: äèðåêòèâà directio íå ðàáîòàëà ñ ôàéëîâîé ñèñòåìîé XFS.
Èñïðàâëåíèå: resolver íå ïîíèìàë áîëüøèå DNS-îòâåòû.

[macek]

Nebulosa, à êàê íàñ÷¸ò epoll?
êàê ñ÷èòàåòå, áóäåò êàêàÿ-òî âûãîäà?

[Nebulosa]

Nebulosa, à êàê íàñ÷¸ò epoll?
êàê ñ÷èòàåòå, áóäåò êàêàÿ-òî âûãîäà?

Ïåðå÷èòàéòå ïåðâîå ñîîáùåíèå â òåìå, çàòåì -
http://sysoev.ru/nginx/docs/events.html , à èìåííî íà ýòî îáðàòèòå âíèìàíèå -

epoll — ýôôåêòèâíûé ìåòîä, èñïîëüçóåìûé â Linux 2.6+.

ò.å. âûãîäà îò èñïîëüçîâàíèÿ ìåòîäà åñòü, íî â òåêóùåé ïðîøèâêå ýòîò ìåòîä íåðåàëèçóåì, èç-çà ñòàðîé âåðñèè ÿäðà:

$uname -a
Linux AsusWMFR 2.4.20 #18 Sun Mar 30 13:13:29 MSD 2008 mips unknown