$ pstree |grep nginx
|-+= 81666 root nginx: master process nginx
| |--- 82500 nobody nginx: worker process
| \--- 82501 nobody nginx: worker process

DEBUG output created by Wget 1.14 on linux-gnu.
---request begin---                                            请求开始
GET /download/nginx-1.12.1.tar.gz HTTP/1.1       动作下载 页面地址 HTTP版本
User-Agent: Wget/1.14 (linux-gnu)                       代理程序：wget
Accept: */*                                                     接收的类型：任何类型
Host: nginx.org                                                目标主机：nginxorg
Connection: Keep-Alive                                      链接类型：启动长连接
---request end---                                          请求结束
HTTP request sent, awaiting response...                    发送请求中

---response begin---                                            响应开始
HTTP/1.1 200 OK                                             协议版本 状态码 结果
Server: nginx/1.13.3                                           服务器版本
Date: Fri, 06 Oct 2017 09:05:15 GMT                     相应时间
Content-Type: application/octet-stream                   接收应用类型：字节流（软件类）
Content-Length: 981093                                      文档大小
Last-Modified: Tue, 11 Jul 2017 15:45:09 GMT        资源最后修改的时间（stat文件即可查看）
Connection: keep-alive                                          长连接开启
Keep-Alive: timeout=15                                          长连接有效期
ETag: "5964f285-ef865"                                         校验值
Accept-Ranges: bytes                                            接收范围：字节的范围
---response end---
200 OK
Registered socket 3 for persistent reuse.
Saving to: ‘nginx-1.12.1.tar.gz’

nginx.org -> documents -> install -> linux -> RHEL


Install the prerequisites:

sudo yum install yum-utils
To set up the yum repository, create the file named /etc/yum.repos.d/nginx.repo with the following contents:

[nginx-stable]
name=nginx stable repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1
enabled=1
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true

[nginx-mainline]
name=nginx mainline repo
baseurl=http://nginx.org/packages/mainline/centos/$releasever/$basearch/
gpgcheck=1
enabled=0
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true
By default, the repository for stable nginx packages is used. If you would like to use mainline nginx packages, run the following command:

sudo yum-config-manager --enable nginx-mainline
To install nginx, run the following command:

sudo yum install nginx
When prompted to accept the GPG key, verify that the fingerprint matches 573B FD6B 3D8F BC64 1079 A6AB ABF5 BD82 7BD9 BF62, and if so, accept it.

[root@nginx-server ~]# rpm -ql nginx
/etc/logrotate.d/nginx # 日志轮转
/etc/nginx # 主配置文件夹
/etc/nginx/conf.d # 子配置文件
/etc/nginx/conf.d/default.conf # 默认子配置，默认网站
/etc/nginx/fastcgi_params # 动态网站模块 -python，php所需要的变量
/etc/nginx/mime.types # 文件程序关联 
/etc/nginx/modules	# nginx模块
/etc/nginx/nginx.conf	# 主配置
/etc/nginx/scgi_params	# 动态网站模块
/etc/nginx/uwsgi_params # 动态网站模块 python相关
/usr/lib/systemd/system/nginx-debug.service	# 服务debug脚本
/usr/lib/systemd/system/nginx.service	# 服务脚本
/usr/lib64/nginx
/usr/lib64/nginx/modules
/usr/libexec/initscripts/legacy-actions/nginx # 启动脚本
/usr/libexec/initscripts/legacy-actions/nginx/check-reload# 启动脚本
/usr/libexec/initscripts/legacy-actions/nginx/upgrade# 启动脚本
/usr/sbin/nginx # 主程序
/usr/sbin/nginx-debug # 调试nginx
/usr/share/doc/nginx-1.20.1 # 文档
/usr/share/doc/nginx-1.20.1/COPYRIGHT # 文档
/usr/share/man/man8/nginx.8.gz # 文档
/usr/share/nginx # 文档
/usr/share/nginx/html # 文档
/usr/share/nginx/html/50x.html # 文档
/usr/share/nginx/html/index.html # 文档
/var/cache/nginx # 缓存
/var/log/nginx # 日志

[root@nginx-server ~]# nginx -V
nginx version: nginx/1.20.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) 
built with OpenSSL 1.0.2k-fips  26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie'


configure arguments: # 编译参数./configure --help 查询帮助
--prefix=/etc/nginx # 安装路径
--sbin-path=/usr/sbin/nginx # 执行程序
--modules-path=/usr/lib64/nginx/modules # 模块位置
--conf-path=/etc/nginx/nginx.conf 著配置文件
--error-log-path=/var/log/nginx/error.log  错误日志
--http-log-path=/var/log/nginx/access.log 访问日志
--pid-path=/var/run/nginx.pid  pid
--lock-path=/var/run/nginx.lock  锁文件
--http-client-body-temp-path=/var/cache/nginx/client_temp 用户缓存位置 
--http-proxy-temp-path=/var/cache/nginx/proxy_temp 代理缓存
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp  中间件缓存
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp 中间件缓存
--http-scgi-temp-path=/var/cache/nginx/scgi_temp 中间件缓存

--user=nginx 用户
--group=nginx 组

--with-compat 启用动态模块支持

--with-file-aio 使用aio会大大提高性能，epoll模型等等 
--with-threads 多线程
--with-http_addition_module # css js 响应追加 响应之前或之后追加文本内容
--with-http_auth_request_module 认证模块
--with-http_dav_module 增加上传put，delete，mkcol，创建集合，copy，和move方法，默认情况下是关闭
--with-http_flv_module 增加mp4 flv视频支持模块
--with-http_gunzip_module 压缩模块
--with-http_gzip_static_module 压缩
--with-http_mp4_module 多媒体模块 mp4
--with-http_random_index_module 随机主页模块
--with-http_realip_module 获取真实ip
--with-http_secure_link_module 安全链接 nginx安全下载模块
--with-http_slice_module nginx中文文档
--with-http_ssl_module ssl加密
--with-http_stub_status_module 访问状态模块 
--with-http_sub_module 替换网站响应内容
--with-http_v2_module httpv2
--with-mail 邮件
--with-mail_ssl_module 邮件加密
--with-stream 负载均衡
--with-stream_realip_module 负载均衡
--with-stream_ssl_module 负载均衡
--with-stream_ssl_preread_module 负载均衡
--with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -fPIC' cpu优化参数
--with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie' 其他参数

[root@nginx-server ~]# cat /etc/nginx/conf.d/default.conf 
server {
    listen       80;
    server_name  localhost;

    #access_log  /var/log/nginx/host.access.log  main; # 日志

    location / {
        root   /usr/share/nginx/html; 网页目录
        index  index.html index.htm; 网站主页的名字
    }

    #error_page  404              /404.html;	# 404页面

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html; # 500错误
    location = /50x.html { # 50*页面
        root   /usr/share/nginx/html;
    }

# 动态页面
    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #    root           html;
    #    fastcgi_pass   127.0.0.1:9000;
    #    fastcgi_index  index.php;
    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    #    include        fastcgi_params;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

[root@nginx-server ~]# cat /etc/nginx/conf.d/net_map.conf 
server{
  server_name 127.0.0.1;
  listen      81;
  
  location / {
    root /www/wwwroot/net_map;
    index index.html;
	}


}

格式

默认值

log_format main '$remote_address - $remote_user [$time_local] "$request" ' ‘$status $body_type_sent "$http_referer"''$http_user_agent $http_x_forwarded_for"';

$remote_address 远程地址
$remote_user 远程用户（得验证）
$time_local 本地时间
$request 请求的方式 GET、POST 路由地址 HTTP版本 
$status 状态代码200
$body_type_sent 发送文件大小
$http_referer 记录从哪个页面链接访问过来 
$http_user_agent UA
$http_x_forwarded_for 代理ip

syntac: open_log_file_cache max=1000 inactive=20s min_uses=3 valid=1m

max=1000 是指文件日志的FD，最大缓存是1000次，超了怎么办

min_user=3 20秒小于三次访问FD，就给清理掉，结合inactive 20s

valid 1m 检查周期是1分钟

总结：缓存最多为1分钟，到了极限，每分钟开始清除掉，20秒内小于3次FD

[root@nginx-server ~]# rpm -ql nginx | grep log
/etc/logrotate.d/nginx
/var/log/nginx

$remote_addr, 远程地址： 记录客户端IP地址
$remote_user，远程用户：记录客户端用户名称
[$time_local]，本地时间：服务器自身时间
$request， 请求：记录请求的URL和HTTP协议
$status 状态：记录请求状态
$body_bytes_sent 发送给客户端的字节数，不包括响应头的大小
$http_referer 记录从哪个页面链接访问过来的  （超链接）（referer引用）
$http_user_agent ，记录客户端浏览器相关信息
$http_x_forwarded_for，代理IP
$request_length 请求的长度（包括请求行，请求头和请求正文）
$time_iso8601 ISO8601标准格式下的本地时间。
$bytes_sent 发送给客户端的总字节数    （可在主配置文件中，增加此项观c）
$msec 日志写入时间。单位为秒，精度是毫秒。

cat << EOF
 
=============================================================
 
1.  一天内访问最多的10个IP（ip top10）
 
2.  访问大于100次的IP
 
3.  PV量总量
 
4.  访问最多的10个页面（$request top 10）
 
5.  每个URL访问内容总大小（$body_bytes_sent）
 
6.  IP访问状态码为404及出现次数（$status）
 
7.  统计某天 每个IP访问状态码数量（$status）
 
8.  统计前一分钟的PV量
 
9. 统计某天 各种状态码数量
 
===============================================================
 
EOF
 
read -p "输入查询的日志目录的位置: " b
 
read -p "输入查询的时间 格式:如 05/Sep/2017 : " a
 
read -p "输入选项：" n
 
case "$n" in
 
        1)
 
        echo "正在查询一天内访问最多的10个IP"
 
        sleep 1
 
        #一天内访问最多的10个IP（ip top10）
 
        grep $a $b | awk '{ ips[$1]++ } END{for(i in ips){print i,ips[i]} } '| sort -k2 -rn | head -n10
 
        ;;
 
        2)
 
        echo " 访问大于100次的IP"
 
        #访问大于100次的IP
 
        grep $a $b | awk '{ ips[$1]++ } END{for(i in ips){ if(ips[i]>100)  {print i,ips[i]}} } '| sort -k2 -rn | head -n10
 
        ;;
 
        3)
 
        echo "pv总量"
 
        #pv总量
 
        grep $a $b |wc -l
 
        ;;
 
        4)
 
        echo "访问最多的10个页面（$request top 10）"
 
        #访问最多的10个页面（$request top 10）
 
        grep $a $b |awk '{urls[$7]++} END{for(i in urls){print urls[i],i}}' |sort -k1 -rn |head -n10
 
        ;;
 
        5)
 
        echo "每个URL访问内容总大小（$body_bytes_sent）"
 
        #每个URL访问内容总大小（$body_bytes_sent）
 
        grep $a $b |awk '{ urls[$7]++; size[$7]+=$10}END{for(i in urls){print urls[i],size[i],i}}'|sort -k1 -rn | head -n10
 
        ;;
 
        6)
 
        echo "IP访问状态码为404及出现次数（$status）"
 
        #IP访问状态码为404及出现次数（$status）
 
        grep $a $b | awk '{if($9="404"){ip_code[$1" "$9]++}}END{for(i in ip_code){print i,ip_code[i]}}'
 
        ;;
 
        7)
 
        echo " 统计$a 每个IP访问状态码数量（$status）"
 
        # 统计某天 每个IP访问状态码数量（$status）
 
        grep $a $b | awk '{ ip_code[$1" "$9]++}END{ for(i in ip_code){print i,ip_code[i]} }' | sort -k1 -rn | head -n10
 
        ;;
 
        8)
 
        echo "统计前一分钟的PV量"
 
        #8. 统计前一分钟的PV量
 
        date=$(date -d '-1 minute' +%d/%b/%Y:%H:%M);awk  -v date=$date '$0 ~ date {i++} END{print i}'  $b
 
        ;;
 
        9)
 
        echo "统计$a 各种状态码数量"
 
        #统计某天 各种状态码数量
 
        grep $a $b  | awk '{code[$9]++} END{for(i in code){print i,code[i]}}'
 
        echo "统计$a 各种状态码数量 百分比形式"
 
        #统计某天 各种状态码数量
 
        grep $a $b | awk '{code[$9]++;total++} END{for(i in code){printf i" ";printf code[i]"\t";printf "%.2f",code[i]/total*100;print "%"}}'
 
        ;;
 
esac

[root@nginx-server ~]# vim /etc/nginx/nginx.conf 
[root@nginx-server ~]#

 keepalive_timeout  65;

[root@nginx-server ~]# pwd
/root
[root@nginx-server ~]# mkdir app
[root@nginx-server ~]# touch app/{blue.html,.yellow.html,red.html,green.html}
[root@nginx-server ~]# ls app/
blue.html  green.html  red.html
[root@nginx-server ~]# ls -a app/
.  ..  blue.html  green.html  red.html  .yellow.html

[root@nginx-server ~]# echo blue >> app/blue.html 
[root@nginx-server ~]# echo green >> app/green.html 
[root@nginx-server ~]# echo red >> app/red.html 
[root@nginx-server ~]# echo yellow >> app/.yellow.html

[root@nginx-server ~]# cat /etc/nginx/conf.d/net_map.conf 
server{
  open_log_file_cache max=1000 inactive=20s min_uses=3 valid=1m;


  server_name 127.0.0.1;
  listen      81;
  
  location / {
    root /www/wwwroot/app;
    random_index on;
  }  

  location /111 {
    root /www/wwwroot/net_map;
    index index.html;
  }

  location /nginx_stus {
    stub_status;
    allow all;
  }
}
[root@nginx-server ~]#

[root@nginx-server ~]# cat /etc/nginx/conf.d/net_map.conf 
server{
  open_log_file_cache max=1000 inactive=20s min_uses=3 valid=1m;


  server_name 127.0.0.1;
  listen      81;
  
  sub_filter 云透视 'somestring';
  #sub_filter_once on; #只换一次

  location / {
    root /www/wwwroot/net_map;
    index index.html;
    
  }  


  location /222 {
    root /www/wwwroot/app;
    random_index on;
  }  

  location /111 {
    root /www/wwwroot/net_map;
    index index.html;
  }

  location /nginx_stus {
    stub_status;
    allow all;
  }
}

server {
...

tcp_nodelay on;
...
}

或者 

location /video/ {
...
  sendfile on;
  tcp_nopush on;
...
}

gzip  on;
gzip_http_version 1.1;
gzip_comp_level 9;
gzip_types  text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;

[root@nginx-server ~]# cat /etc/nginx/nginx.conf 

user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    gzip  on;
    gzip_http_version 1.1;
    gzip_comp_level 9;
    gzip_types  text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;

    include /etc/nginx/conf.d/*.conf;
}
[root@shell ~]# systemctl restart nginx

location / {
...
  expeires 24h;
...
}

location / {
  root /a.com;
  index index.html;
  valid_referer none block *.a.com;
  if ($invalid_referer){
    retuen 403;
  }
}

location / {
  root /a.com;
  index index.html;
  valid_referer none blocked *.b.com server_name 192.168.100.* ~tianyun ~\.google\. ~\.baidu\. b.com;
  if($invalid_referer) {
    return 403;
  }
}

location ~*\.(jpg|png|gif|bmp)$ {
  root /a.com;
  index index.html;
  valid_referer none blocked *.b.com server_name 192.168.100.* ~tianyun ~\.google\. ~\.baidu\. b.com;
  if($invalid_referer) {
    #return 403;
    rewrite .* http://a.com/403.jpg;
  }
}

#!/bin/bash
echo '*==========================================================*'
echo '|  本脚本工具基于ab(Apache benchmark)，请先安装好ab, awk   |'
echo '|  注意：                                                  |'    
echo '|     shell默认最大客户端数为1024                          |'
echo '|     如超出此限制，请使用管理员执行以下命令：             |'
echo '|     ulimit -n 655350                                 |'
echo '*==========================================================*'

function usage() {
    echo '  命令格式：'
    echo '  ab-test-tools.sh'
    echo '      -N|--count 总请求数，缺省 : 5w'
    echo '      -C|--clients 并发数, 缺省 : 100'
    echo '      -R|--rounds 测试次数, 缺省 : 10 次'
    echo '      -S|-sleeptime 间隔时间, 缺省 : 10 秒'
    echo '      -I|--min 最小并发数,　缺省: 0'
    echo '      -X|--max 最大并发数，缺省: 0'
    echo '      -J|--step 次递增并发数'
    echo '      -T|--runtime 总体运行时间,设置此项时最大请求数为5w' 
    echo '      -P|--postfile post数据文件路径'
    echo '      -U|--url 测试地址'
    echo ''
    echo '  测试输出结果*.out文件'

    exit;
}


# 定义默认参数量
# 总请求数
count=50000
# 并发数
clients=100O
# 测试轮数
rounds=10
# 间隔时间
sleeptime=10
# 最小并发数
min=0
# 最大数发数
max=0
# 并发递增数
step=0
# 测试地址
url=''
# 测试限制时间
runtime=0
# 传输数据
postfile=''


ARGS=`getopt -a -o N:C:R:S:I:X:J:U:T:P:h -l count:,client:,round:,sleeptime:,min:,max:,step:,runtime:,postfile:,help -- "$@"`
[ $? -ne 0 ] && usage
eval set -- "${ARGS}" 

while true 
do
    case "$1" in
    -N|--count)
        count="$2"
        shift
        ;;

    -C|--client)
        clients="$2"
        shift
        ;;

    -R|--round)
        rounds="$2"
        shift
        ;;

    -S|--sleeptime)
        sleeptime="$2"
        shift
        ;;

    -I|--min)
        min="$2"
        shift
        ;;

    -X|--max)
        max="$2"
        shift
        ;;

    -J|--step)
        step="$2"
        shift
        ;;

    -U|--url)
        url="$2"
        shift
        ;;

    -T|--runtime)
        runtime="$2"
        shift
        ;;

    -P|--postfile)
        postfile="$2"
        shift
        ;;

    -h|--help)
        usage
        ;;

    --)
        shift
        break
        ;;
    esac
shift
done

# 参数检查
if [ x$url = x ]
then
    echo '请输入测试url，非文件/以为结束'
    exit
fi

flag=0
if [ $min != 0 -a $max != 0 ]
then 
    if [ $max -le $min ] 
    then
        echo '最大并发数不能小于最小并发数'
        exit
    fi

    if [ $step -le 0 ]
    then
        echo '并发递增步长不能<=0'
        exit
    fi

    if [ $min -lt $max ]
    then
        flag=1
    fi
fi


# 生成ab命令串
cmd="ab -k -r"

#　数据文件
if [ x$postf != x ]
then
    cmd="$cmd -p $postf"
fi

if [ x$tl != x -a $tl != 0 ]
then 
    max=50000;
    cmd="$cmd -t$tl"
fi
cmd="$cmd -n$count"

echo '-----------------------------';
echo '测试参数';
echo "  总请求数：$count";
echo "  并发数：$clients";
echo "  重复次数：$rounds 次";
echo "  间隔时间：$sleeptime 秒";
echo "  测试地址：$url";

if [ $min != 0 ];then
echo "  最小并发数：$min";
fi

if [ $max != 0 ];then
echo "  最大并发数：$max";
fi

if [ $step != 0 ];then
echo " 每轮并发递增：$step" 
fi


# 指定输出文件名
datestr=`date +%Y%m%d%H%I%S`
outfile="$datestr.out";

# runtest $cmd $outfile $rounds $sleeptime
function runtest() {
    # 输出命令
    echo "";
    echo '  当前执行命令：'
    echo "  $cmd"
    echo '------------------------------'

    # 开始执行测试
    cnt=1
    while [ $cnt -le $rounds ];
    do
        echo "第 $cnt 轮 开始"
        $cmd >> $outfile 
        echo "\n\n" >> $outfile
        echo "第 $cnt 轮 结束"
        echo '----------------------------'

        cnt=$(($cnt+1))

        if [ $cnt -le $rounds ]; then
            echo "等待 $sleeptime 秒"
            sleep $sleeptime
        fi 
    done
}


temp=$cmd;
if [ $flag != 0 ]; then
    cur=$min
    over=0
    while [ $cur -le $max ]
    do
        cmd="$temp -c$cur $url"
        runtest $cmd $outfile $rounds $sleeptime 

        cur=$(($cur+$step))
        if [ $cur -ge $max -a $over != 1 ]; then
           cur=$max 
           over=1
        fi
    done
else 
    cmd="$cmd -c$clients $url"
    runtest $cmd $outfile $rounds $sleeptime 
fi


# 分析结果
if [ -f $outfile ]; then
echo '本次测试结果如下：'
echo '+------+----------+----------+---------------+---------------+---------------+--------------------+--------------------+'
echo '| 序号 | 总请求数 |  并发数  |   失败请求数  |   每秒事务数  |  平均事务(ms) | 并发平均事务数(ms) |　  总体传输字节数  |'
echo '+------+----------+----------+---------------+---------------+---------------+--------------------+--------------------+'

comp=(`awk '/Complete requests/{print $NF}' $outfile`) 
concur=(`awk '/Concurrency Level:/{print $NF}' $outfile`)
fail=(`awk '/Failed requests/{print $NF}' $outfile`)
qps=(`awk '/Requests per second/{print $4F}' $outfile`)
tpr=(`awk '/^Time per request:(.*)\(mean\)$/{print $4F}' $outfile`)
tpr_c=(`awk '/Time per request(.*)(mean, across all concurrent requests)/{print $4F}' $outfile`)
trate=(`awk '/Transfer rate/{print $3F}' $outfile`)

for ((i=0; i<${#comp[@]}; i++))
do
    echo -n "|"
    printf '%6s' $(($i+1)) 
    printf "|"

    printf '%10s' ${comp[i]}
    printf '|'
    
    printf '%10s' ${concur[i]}
    printf '|'

    printf '%15s' ${fail[i]}
    printf '|'

    printf '%15s' ${qps[i]}
    printf '|'

    printf '%15s' ${tpr[i]}
    printf '|'

    printf '%20s' ${tpr_c[i]}
    printf '|'

    printf '%20s' ${trate[i]}
    printf '|'

    echo '';
    echo '+-----+----------+----------+---------------+---------------+---------------+--------------------+--------------------+'
done
echo ''
fi

limit_req_zone $binary_remote_addr zone=req_zone:10m rate=1r/s
限制请求         二进制地址            限制策略的名称  占用10M空间 允许每秒1次请求

http {
  limit_req_zone $binary_remote_addr zone=req_zone:10m rate=1r/s;
  server {
    location / {
      root /usr/...;
      index ...;
       limit_req zone=req_zone;
       # limit_req zone=req_zone burst=5;
       # limit_req zone=req_zone burst=5 nodelay;
    }
  }
}

limit_req zone=req_zone

http {
  limit_conn_zone $binary_remote_addr zone=conn_zone:10m;
  server {
    location / {
      limit_conn conn_zone 1;
    }
  }
}

allow

deny

 allow address | CIDR | unix: |all;
 context: http,server,location,limit_except

http {
  ...
  allow 192.168.100.10;
  deny all;
  ...
}

ngx_http_auth_basic_module

auth_basic string | off;
context: http,server,location,limit_expcet

auth_basic_user_file file
context: http,server,location,limit_except

yum install httpd-tools
htpasswd -cm /etc/nginx/conf.d/passwd username10
-c 新的
-m  Force MD5 encryption of the password (default)
htpasswd -m /etc/nginx/conf.d/passwd username20
cat /etc/nginx/conf.d/passwd

server {
  auth_basic "来了老铁,对一下暗号！！";
  auth_basic_user_file /etc/nginx/conf.d/passwd;
}