点赞
评论
收藏
分享
举报
nginx-sticky-module
发表于2020-09-26 09:06

浏览 4.3k

文章标签

授权协议:
BSD 3-Clause "Simplified" or "FreeBSD" license
原作者联系方式:
yaoweibin@gmail.com
功能说明:
Nginx sticky功能支持。可以通过sticky cookie把同样的连接转发到同样的服务器。

Description:

	A nginx module to add a sticky cookie to be always forwarded the the same
	upstream server.

	When dealing with several backend servers, it's sometimes useful that one
	client (browser) is always served by the same backend server
	(for session persistance for example).

	Using a persistance by IP (with the ip_hash upstream module) is maybe not
	a good idea because there could be situations where a lot of different
	browsers are coming with the same IP address (behind proxies)and the load
	balancing system won't be fair.

	Using a cookie to track the upstream server makes each browser unique.

	When the sticky module can't apply, it switchs back to the classic Round Robin
	Upstream or returns a "Bad Gateway" (depending on the no_fallback flag).
	
	Sticky module can't apply when cookies are not supported by the browser

	* Sticky module is based on a "best effort" algorithm. Its aim is not to handle
	* security somehow. It's been made to ensure that normal users are always
	* redirected to the same  backend server: that's all!

Installation

	You'll need to re-compile Nginx from source to include this module.
	Modify your compile of Nginx by adding the following directive
	(modified to suit your path of course):

	./configure ... --add-module=/absolute/path/to/nginx-sticky-module
	make
	make install

Usage
	upstream {
		sticky;
		server 127.0.0.1:9000;
		server 127.0.0.1:9001;
		server 127.0.0.1:9002;
	}

	sticky [name=route] [domain=.foo.bar] [path=/] [expires=1h] [hash=index|md5|sha1] [hmac hmac_key=private_key] [no_fallback];
	  - name:    the name of the cookies used to track the persistant upstream srv
	             default: route

	  - domain:  the domain in which the cookie will be valid
	             default: nothing. Let the browser handle this.

	  - path:    the path in which the cookie will be valid
	             default: nothing. Let the browser handle this.

	  - expires: the validity duration of the cookie
	             default: nothing. It's a session cookie.
	             restriction: must be a duration greater than one second

	  - hash:    the hash mechanism to encode upstream server. It cant' be used
	             with hmac.
	             md5|sha1: well known hash
	             index:    it's not hashed, an in-memory index is used instead
	                       it's quicker and the overhead is shorter
	                       Warning: the matching against upstream servers list
	                       is inconsistent. So, at reload, if upstreams servers
	                       has changed, index values are not guaranted to
	                       correspond to the same server as before!
	                       USE IT WITH CAUTION and only if you need to!
	             default: md5

	  - hmac:    the HMAC hash mechanism to encode upstream server
	             It's like the hash mechanism but it uses hmac_key
	             to secure the hashing. It can't be used with hash.
	             md5|sha1: well known hash
	             default: none. see hash.

	  -hmac_key: the key to use with hmac. It's mandatory when hmac is set
	             default: nothing.

	  -no_fallback: when this flag is set, nginx will return a 502 (Bad Gateway or
		              Proxy Error) if a request comes with a cookie and the
		              corresponding backend is unavailable.

Detail Mechanism
	see docs/sticky.{vsd,pdf}	

Contributing
	http://code.google.com/p/nginx-sticky-module/

TODO
	Stress
	Code review

Author
	Jerome Loyet <jerome at loyet dot net>

Copyright & License
	This module is licenced under the BSD license.

	Copyright (C) 2010 Jerome Loyet (jerome at loyet dot net)

	Redistribution and use in source and binary forms, with or without
	modification, are permitted provided that the following conditions
	are met:

	1. Redistributions of source code must retain the above copyright
	notice, this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright
	notice, this list of conditions and the following disclaimer in the
	documentation and/or other materials provided with the distribution.

	THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
	ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
	FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	SUCH DAMAGE.


已修改于2023-03-08 15:24
创作不易,留下一份鼓励
皮皮鲁

暂无个人介绍

关注



写下您的评论
发表评论
全部评论(0)

按点赞数排序

按时间排序

关于作者
皮皮鲁
这家伙很懒还未留下介绍~
85
文章
2
问答
45
粉丝
相关文章
概述 Nginx 从 1.9.0 开始加入了 stream 模块支持四层的代理,转发和负载均衡。但是,stream 模块的功能相对简单。对需要 ALG 处理的协议比如 FTP 的支持也远远不够。我试着去修改了 Nginx 的源代码,添加了alg模块。使之支持了 FTP主动模式和被动模式下的 ALG 功能。 Github 的源码地址为 : https://github.com/pei-jikui/nginx-alg。代码本身不困难,困难的是如何把代码模块化,有机地融入nginx原有的框架结构中,尽量少地修改已有的框架代码。而后者,需要对stream模块乃至nginx本身的框架和代码有一定的熟悉程度。图 1:FTP被动模式 数据连接 图2 :FTP主动模式 数据连接可能大家会说,Passive 模式不需要ALG 。准确
点赞 6
浏览 13.2k
使用配置方式:install./configure--add-module={module_dir}&&make&&makeinstallconfserver{ listen80; client_max_body_size100m; location/{ roothtml/upload; } #Uploadformshouldbesubmittedtothislocation location/upload{ #Passalteredrequestbodytothislocation upload_pass/example.php; #Storefilestothisdirectory #Thedirectoryishashed,subdirectories0123456789shouldexist
点赞 3
浏览 11.8k
使用方法:1.创建tableCREATETABLE oauth_access_token (id int(10)NOTNULLAUTO_INCREMENT,access_token varchar(255)DEFAULTNULL,expires_in int(10)NOTNULL,last_used_time int(10)NOTNULL,PRIMARYKEY(id),KEY ACCESS_TOKEN (access_token))ENGINE=InnoDBDEFAULTCHARSET=utf8;2.安装Oauth模块cd/work/nginx-1.8.0&&./configure--add-module=/work/nginx-http-oauth-module&&make3.添加配置请参照源码连接中的nginx.conf 4.使用Oauth模块a)创建访问tokenhttp://192.168.1.104/token?appid=
点赞 3
浏览 10.3k