don't move ladders these days. Users of the Internet are not high-quality readers.The following is to tell you how I use CloudFlare CDN, the lower part of the content directly copied the jar, who let him in front of me to write the article, make me not only this article will not write, even the article name do not know how to get good.1. DNS settings:DNS records inside will be pan-resolution removed (if any), leaving only
constitutes depending on the load value can be based on the computer and run on the software, but generally over 10-20 of the average load may mean that the server is overloaded with different high loads. This is best for your host or this system administrator to check if you are unsure. The origin has a firewall (or rate limiter) that blocks our requestThis is the most common cause of intermittent 522 errors. The key thing to check out initially is-
Make sure you do not have the IP
DemandFirst make sure you have an own domain name, then log in to CloudFlare and add your domain name. Follow the instructions and use the default values given by it. You will have cloudflare to host your domain, so you need to adjust your registration authority settings. If you want to use a subdomain, add a ' a ' record to it. Currently, any IP address is available.Ddclient is a Perl client that updates d
ConceptUsing the BPF (Berkeley Packet filter) toolset combined with the Iptables XT_BPF module enables high-performance packet filtering to address large-scale DDoS attacks. BPF Tools contains a simple set of Python scripts that are used to parse the Pcap file, and others are primarily used to generate BPF bytecode.First, download and install BpftoolsDownload the zip file in Https://github.com/cloudflare/bpftools, or you can download it via git, and t
Investigate how CVE-2015-5477 CloudFlare Virtual DNS protects its users
Last week, ISC released a patch to fix a remote vulnerability in the BIND9 DNS server. This vulnerability causes the server to crash when processing a certain data packet.The announcement indicates that an error occurs when the server processes a TKEY-type query. This error causes assertion fail, which causes the server to crash. Because assertion occurs in the query parsing proc
CloudFlare is the world-famous CDN service provider, its free package is enough to meet the average user. Optimize the load speed of the website, cache the static resources, distribute the content near the local area to protect against the DDoS attack. In short, very good, very honest. But in the celestial many nodes are sealed, its own DNS was sealed, and Google and FB, the same as the end of the people (in fact, we are).
When I looked at CloudFlare
servers are losing market share, Nginx's market share is growing because of its unpretentious business philosophy and the skills to handle multiple network links at the same time. Apache is still the king of all Web servers, but the number of Nginx has doubled in the past two years.
Currently, it serves 15% of sites, including startups like CloudFlare, parse, and internet giants like Automattic and Netfli
Nginx is generally recommended to install to a Linux system, and to install the C language compilation environment GCC
* Download Nginx
Enter http://nginx.org/en/download.html download Nginx (take 1.8 for example)
* install Nginx-dependent packages First:
1, the installation of
Case 1: Building an Nginx serverCase 2: User authenticationCase 3: Domain-based virtual hostCase 4:SSL Virtual Host1 Case 1: Building Nginx Server1.1 QuestionsInstall the Nginx service on the host with IP address 192.168.4.5 and the Nginx server, which requires the following functions to be enabled at compile time:Supp
Guide
Nginx is an open source high-performance HTTP server and reverse proxy server, while supporting the IMAP/POP3 Proxy service, is a free software, but also the operation and maintenance engineers will be a kind of server, the following I would simply say the installation of Nginx server and file resolution.
Simple installation
This tutorial is a CentOS 6.3 example, the package can be downlo
First, nginx anti-theft chain
The configuration is as follows and can be combined with the above configuration.
vim /usr/local/nginx/conf/vhost/test.com.conflocation ~* ^.+\.(gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls)$ //location后面的*是忽略大小写{ expires 7d; valid_referers none blocked server_names *.test.com ; //白名单 if ($invalid_referer) { return 403; } acce
49, Nginx Anti-theft chain, nginx access control, Nginx parsing PHP-related configuration, nginx agentFirst, nginx anti-theft chainMust be combined with "do not log and expire" because they are used at the same time.# vim/usr/local/nginx
12.13 Nginx anti-theft chainCd/usr/local/nginx/conf/vhostVI test.com.confCopy the above content to a locationTest, successPremise data/wwwroot/test.com directory to have 1.gif12.14 Nginx Access ControlCd/usr/local/nginx/conf/vhostVI test.com.conffffff,t_100,g_se,x_10,y_10,shadow_90,type_zmfuz3pozw5nagvpdgk= "alt="
Blocking call: The event is not ready, it will only wait, wait until the event is ready, you can continue.Blocking calls into the kernel waits, the CPU will let go out to others, for the single-threaded workers, obviously inappropriate, when the network event more time, everyone is waiting, CPU idle No one use, CPU utilization naturally not go, not to talk about high concurrency.Asynchronous non-blocking: asynchronous, non-blocking event handling mechanism, specifically to system calls such as S
One: Nginx anti-theft chainAdd the following code in the server section of nginx.confLocation ~ ^.+. ( Gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls) $ {Valid_referers None blocked Server_names taobao.com . baidu.com. google.com. cn . soso.com; The sites for these domain names are not hotlinking.if ($invalid _referer) {#return 403;Rewrite ^/http://www.example.com/nophoto.gif;}}Note: If location is already added to the previous configuration.
Nginx
Nginx is a high-performance HTTP and reverse proxy server, also a IMAP/POP3/SMTP server.
To support the response of up to 5w concurrent connections, Nginx chooses epoll/kqueue as the network IO model.
Nginx can also be used as a Load balancer server, nginx written in C
Configuration items for debugging and locating problems
Whether to run Nginx in daemon mode
Syntax: Daemon On|offDefault: Daemon onRole: Daemons are processes that can be detached from the terminal and run in the background. He was removed from the process to avoid the information in the process of printing at the terminal, so that the process will not be interrupted by any information generated by the terminal. By default, the daemon is turned on.Ho
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.