找回密码
 立即注册

QQ登录

只需一步,快速开始

查看: 12227|回复: 0

nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

[复制链接]
发表于 2017-10-19 13:50:40 | 显示全部楼层 |阅读模式
准备文件:2 G$ b1 X4 @& }% j' C- l- v
wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
8 x$ J0 E, X  h! Mtar xvzf openssl-1.1.0f.tar.gz
) j- I' P0 @: Twget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz* `! B0 y/ G0 B$ ]# [  {
tar xvzf pcre-8.41.tar.gz
+ y6 |! s: [! G7 Z# T
9 p* L% `0 K- a0 _8 Kwget http://nginx.org/download/nginx-1.13.6.tar.gz
) ~/ @) V* r* L7 W1 Ktart xvzf nginx-1.13.6.tar.gz
: V0 I' @! a3 j8 h0 Q" k3 A+ _; Q8 |2 L, j4 _
wget https://github.com/openresty/sregex/archive/master.zip
* O6 _$ J. X# G( [9 D1 B" xmv master.zip replace-filter-nginx-module-master.zip
8 |/ A8 K1 ]. [7 sunzip replace-filter-nginx-module-master.zip- z  v5 a  d% i8 X! S6 L4 ~
2 W% Q- u% i/ r% r" j/ [, u0 J; r
安装sregex
6 c( J- B: O' H" l( k0 t[replace-filter-nginx-module-master关键词替换模块需要这个东西,如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]# k3 R! i: L" s& W4 q
wget https://github.com/openresty/sregex/archive/master.zip
" a9 R! u3 l: N7 I9 Fmv master.zip sregex.zip
3 L/ h8 t; m; P% dunzip sregex.zip
1 ]2 X" s( D; ^4 p! Ycd sregex  {/ {  |4 R8 t: m
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
. c, V$ Q5 M. Mldconfig) ^* o9 b+ ?4 v5 b' |1 L  ^
9 h9 V: L, h3 u8 X; P% P
安装modsecurity
" ~: Q0 m5 i" }7 k- [『依赖的包:pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel)』$ k( E/ G% M% B% U# w
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
+ e  N/ X( d5 z3 i* qcd mod_security$ F2 O) N- z6 b1 _5 i- J/ [3 k
./autogen.sh  & t& ~! c$ t4 W6 ~
./configure --enable-standalone-module
& W( l8 G/ k8 emake& b9 N5 E/ V; K' C2 Y

0 i3 [+ \' G( d) N7 k2 o) o0 n7 x4 L( Y3 M3 {" c
安装nginx
0 g; E! e" ]" z+ n7 [cd nginx-1.13.6
1 p  G. n( W, D# k* c- U5 X' x* }
. b4 P( A' I8 K- l. C+ g( B
[Bash shell] 纯文本查看 复制代码
./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f
; T- i3 V6 f7 P( S' o0 w5 r
make. \6 ~) G7 I/ \! z9 J9 Q' U
make install' r) L( l0 y9 n6 i
: y' A' w$ T1 G+ [2 K2 ~) M
注:--with-ipv6 已经被移除默认支持ipv6,   --with-http_spdy 已经被移除合并到--with-http_v2_module
4 v- Q/ q7 j# o9 x1 t. E' i* A8 {9 R% M8 ?

! _$ w0 X3 I; c% e% o+ w5 [5 W  F/ Y, X4 Y0 x/ _
3 p8 U1 m5 S6 B, V+ K

& d" m5 ?1 r/ Y& G3 E3 w& u& @# ]- M) M1 X+ ?) Y! l

4 e! H9 d* j9 C3 @5 T, A
5 a$ Q, ~; n' I$ \  a" m( g- ]5 ~3 C0 Y, t
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|Archiver|手机版|小黑屋|第一站论坛 ( 蜀ICP备06004864号-6 )

GMT+8, 2026-10-24 16:55 , Processed in 0.032783 second(s), 21 queries .

Powered by Discuz! X3.5

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表