server {
    listen 80;
    server_name example.com;
    # 動(dòng)態(tài)請(qǐng)求：轉(zhuǎn)發(fā)到后端應(yīng)用服務(wù)器（如Tomcat/Node.js）
    location /api/ {
        proxy_pass http://backend_server:8080/;  # 指向后端服務(wù)地址
        proxy_set_header Host $host;             # 傳遞原始請(qǐng)求頭
    }
    # 靜態(tài)資源：直接由Nginx從本地目錄返回
    location ~* \.(jpg|jpeg|png|gif|css|js|woff|woff2|ico)$ {
        root /var/www/static;                   # 靜態(tài)資源存放目錄
        expires 30d;                            # 緩存30天（可選優(yōu)化）
    }
    # 默認(rèn)動(dòng)態(tài)請(qǐng)求（如PHP/HTML模板）
    location / {
        proxy_pass http://app_server:3000/;     # 指向應(yīng)用服務(wù)器
    }
}

expires 30s; //表示把數(shù)據(jù)緩存30秒
expires 30m; //表示把數(shù)據(jù)緩存30分
expires 10h; //表示把數(shù)據(jù)緩存10小時(shí)
expires 3d;  //表示把數(shù)據(jù)緩存3天

add_header Cache-Control no-store;

location ~* \.(jpg|jpeg|gif|png|js|css)$ {
    expires 1d;
    #add_header Cache-Control no-store;
}

gzip on;                     # 第1行：開(kāi)啟Gzip壓縮功能
gzip_min_length 1k;          # 第2行：僅壓縮大于1KB的文件（小于1KB的壓縮后可能更大，不處理）
gzip_buffers 4 16k;          # 第3行：壓縮時(shí)使用的緩沖區(qū)數(shù)量（4個(gè)）和大小（每個(gè)16KB）
gzip_http_version 1.1;       # 第4行：兼容HTTP/1.1協(xié)議（主流瀏覽器均支持）
gzip_comp_level 5;           # 第5行：壓縮級(jí)別（1-10），數(shù)字越大壓縮率越高但CPU消耗越大（推薦5~6）
gzip_types text/plain 
           text/css 
           text/javascript 
           application/javascript 
           application/x-javascript 
           image/jpeg 
           image/gif 
           image/png 
           image/x-ms-bmp;    # 第6行：指定要壓縮的文件類(lèi)型（優(yōu)先壓縮文本和圖片）
gzip_vary on;                 # 第7行：在響應(yīng)頭中添加Vary: Accept-Encoding，幫助緩存服務(wù)器區(qū)分壓縮/未壓縮版本
gzip_disable "MSIE [1-6]\.";  # 第8行：禁用對(duì)IE6及以下版本的Gzip（兼容性問(wèn)題）

cat /var/log/nginx/access.log
或者
cat /usr/local/nginx/logs/access.log

vim /etc/nginx/nginx.conf
或者
vim /usr/local/nginx/conf/nginx.conf

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;

nginx -s reload

cat /var/log/nginx/error.log
或者
cat /usr/local/nginx/logs/error.log

vim /etc/nginx/nginx.conf
或者
vim /usr/local/nginx/conf/nginx.conf

cat /var/log/nginx/error.log
或者
cat /usr/local/nginx/logs/error.log

安裝 GoAccess
dnf install goaccess -y
如果安裝GoAccess不成功，可以先完善一下 EPEL 倉(cāng)庫(kù)
安裝 EPEL 倉(cāng)庫(kù)（Extra Packages for Enterprise Linux）
dnf install epel-release -y  

cd /usr/local/nginx/

goaccess -f /usr/local/nginx/logs/access.log  --log-format=COMBINED >  /usr/local/nginx/html/itheimadevops/report.html
或者
goaccess -f /usr/local/nginx/logs/access.log  --log-format=COMBINED > report.html
或者
goaccess -f /var/log/nginx/access.log  --log-format=COMBINED > report.html
-f：指定文件
--log-format：分析的文件格式
    COMBINED代表組合日志格式(XLF/ELF) Apache | Nginx
    COMMON代表通用日志格式(CLF) Apache

vi /usr/local/nginx/conf/nginx.conf
...
     server {
        # 監(jiān)聽(tīng)端口
        listen 80;
        # 配置域名
        server_name www.itheimadevops.com;
        # 配置目錄
        root html/itheimadevops;
        access_log logs/www.itheimadevops.com.access.log main;
        error_log logs/www.itheimadevops.com.error.log;
        # 配置uri匹配規(guī)則
        location / {
               index index.html index.htm;
        }
        location ~ \.(jpg|jpeg|gif|png|js|css)$ {
               add_header Cache-Control no-store;
        }
  }
...

goaccess -f /var/log/nginx/access.log --log-format=COMBINED > report.html
ls -hl report.html
goaccess -f /usr/local/nginx/logs/access.log --log-format=COMBINED > report.html
ls -hl report.html

goaccess /usr/local/nginx/logs/access.log \
  --no-global-config \
  --log-format='%h %^ %^ [%d:%t %^] "%r" %s %b "%R" "%u"' \
  --date-format='%d/%b/%Y' \
  --time-format='%H:%M:%S'
或者
goaccess /var/log/nginx/access.log \
  --no-global-config \
  --log-format='%h %^ %^ [%d:%t %^] "%r" %s %b "%R" "%u"' \
  --date-format='%d/%b/%Y' \
  --time-format='%H:%M:%S'

# 提取日志中的 IP（假設(shè)為每行第一個(gè)字段，符合 Nginx 默認(rèn)日志格式）并統(tǒng)計(jì)頻次，按次數(shù)降序排序，取前 10
awk '{print $1}' /usr/local/nginx/logs/access.log | sort | uniq -c | sort -nr | head -n 10
說(shuō)明：
    awk '{print $1}'：提取日志每行的第一個(gè)字段（通常是客戶(hù)端 IP，Nginx 默認(rèn)日志格式中 $1為 IP）。
    sort：對(duì) IP 列表進(jìn)行排序（uniq -c要求輸入已排序）。
    uniq -c：統(tǒng)計(jì)每個(gè)唯一 IP 的出現(xiàn)次數(shù)（-c表示計(jì)數(shù)）。
    sort -nr：按計(jì)數(shù)結(jié)果降序排序（-n數(shù)值排序，-r逆序）。
    head -n 10：僅顯示前 10 條結(jié)果。

# grep 查找關(guān)鍵狀態(tài)碼 404
grep '404' /usr/local/nginx/logs/access.log
或者
grep '404' /var/log/nginx/access.log
# 提取所有狀態(tài)碼為 404 的日志行（Nginx 默認(rèn)日志格式中狀態(tài)碼是第9個(gè)字段）
awk '$9 == 404' /usr/local/nginx/logs/access.log
或者
awk '$9 == 404' /var/log/nginx/access.log

awk '$9 == 200' /usr/local/nginx/logs/access.log|more

# 進(jìn)階：提取 404 請(qǐng)求的路徑（第7個(gè)字段），統(tǒng)計(jì)頻次并排序
awk '$9 == 404 {print $7}' /usr/local/nginx/logs/access.log | sort | uniq -c | sort -nr | head -n 10
或者
awk '$9 == 404 {print $7}' /var/log/nginx/access.log | sort | uniq -c | sort -nr | head -n 10
或者
awk '$9 == 404' /usr/local/nginx/logs/access.log | awk '{ print $7}' | sort | uniq -c | sort -nr | head -n 10
或者
awk '$9 == 404' /var/log/nginx/access.log | awk '{ print $7}' | sort | uniq -c | sort -nr | head -n 10

# 提取日志中的請(qǐng)求路徑（第11個(gè)字段），統(tǒng)計(jì)頻次并排序，取前 10
awk '{print $11}' /usr/local/nginx/logs/access.log | sort | uniq -c | sort -nr | head -n 10
或者
awk '{print $11}' /var/log/nginx/access.log | sort | uniq -c | sort -nr | head -n 10

mkdir /scripts
cd /scripts
vim logrotate.sh
------------------分割線(xiàn)-------------------
#!/bin/bash
date_info=$(date +%F-%H-%M)
mv /usr/local/nginx/logs/access.log /usr/local/nginx/logs/access.log.$date_info
/usr/local/nginx/sbin/nginx -s reload
------------------分割線(xiàn)-------------------
chmod +x /scripts/logrotate.sh

crontab -e
* * * * * /bin/bash /scripts/logrotate.sh &>/dev/null
或者
0 */6 * * * /bin/bash /scripts/logrotate.sh &>/dev/null
或者
0 * * * * /bin/bash /scripts/logrotate.sh &>/dev/null
30 2 * * * /bin/bash /scripts/logrotate.sh &>/dev/null

mv /usr/local/nginx/logs/access.log /usr/local/nginx/logs/access.log.$(date +%F_%H-%M-%S) && /usr/local/nginx/sbin/nginx -s reopen

hostnamectl set-hostname nginx1.itcast.cn && bash
hostnamectl set-hostname nginx2.itcast.cn && bash
cat >/etc/hosts<<EOF
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.88.101   nginx1  nginx1.itcast.cn
192.168.88.102   nginx2  nginx2.itcast.cn
EOF

iptables -F
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
sed -i '/SELINUX=enforcing/cSELINUX=disabled' /etc/selinux/config

# 安裝依賴(lài)包
yum install vim wget rsync net-tools epel-release -y
# 更新安裝ntp時(shí)間服務(wù)器（可選）
yum install ntpsec -y
ntpdate cn.ntp.org.cn
說(shuō)明：
    ntpsec?：是 NTP (Network Time Protocol) 的一個(gè)安全增強(qiáng)分支版本，用于系統(tǒng)時(shí)間同步；
    cn.ntp.org.cn：是中國(guó)國(guó)家授時(shí)中心維護(hù)的 NTP 服務(wù)器地址
# 如果Linux服務(wù)器通不了外網(wǎng)，可以考慮配置一下DNS解析地址
cat >/etc/resolv.conf<<EOF
nameserver 192.168.88.2
nameserver 114.114.114.114
EOF

[root@nginx2 ~]# dnf install nginx -y
修改nginx服務(wù)運(yùn)行端口為8080
[root@nginx2 ~]# vim /etc/nginx/nginx.conf
    ...
    server {
        listen       8080;
        listen       [::]:8080;
        server_name  _;
        root         /usr/share/nginx/html;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
    ...
[root@nginx2 ~]# cat /etc/nginx/nginx.conf
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       8080;
        listen       [::]:8080;
        server_name  _;
        root         /usr/share/nginx/html;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
# Settings for a TLS enabled server.
#
#    server {
#        listen       443 ssl http2;
#        listen       [::]:443 ssl http2;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers PROFILE=SYSTEM;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        error_page 404 /404.html;
#            location = /40x.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#            location = /50x.html {
#        }
#    }
}
[root@nginx2 ~]# cat >/usr/share/nginx/html/index.html <<EOF
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <title>后端Web服務(wù)器</title>
</head>
<body>
    這是后端Web服務(wù)器
</body>
</html>
EOF
[root@nginx2 ~]# cat /usr/share/nginx/html/index.html
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <title>后端Web服務(wù)器</title>
</head>
<body>
    這是后端Web服務(wù)器
</body>
</html>
[root@nginx2 ~]#
檢查nginx配置文件是否正確
[root@nginx2 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx2 ~]# systemctl restart nginx
[root@nginx2 ~]# systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; preset: disabled)
     Active: active (running) since Thu 2025-12-11 11:34:51 CST; 4s ago
    Process: 29371 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
    Process: 29373 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS)
    Process: 29374 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
   Main PID: 29375 (nginx)
      Tasks: 3 (limit: 22927)
     Memory: 3.0M
        CPU: 25ms
     CGroup: /system.slice/nginx.service
             ├─29375 "nginx: master process /usr/sbin/nginx"
             ├─29376 "nginx: worker process"
             └─29377 "nginx: worker process"
Dec 11 11:34:51 nginx2.itcast.cn systemd[1]: Starting The nginx HTTP and reverse proxy server...
Dec 11 11:34:51 nginx2.itcast.cn nginx[29373]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
Dec 11 11:34:51 nginx2.itcast.cn nginx[29373]: nginx: configuration file /etc/nginx/nginx.conf test is successful
Dec 11 11:34:51 nginx2.itcast.cn systemd[1]: Started The nginx HTTP and reverse proxy server.
[root@nginx2 ~]# systemctl enable nginx
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
[root@nginx2 ~]# netstat -pantul|grep nginx
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      30551/nginx: master
tcp6       0      0 :::8080                 :::*                    LISTEN      30551/nginx: master
[root@nginx2 ~]#

[root@nginx2 ~]# ls /usr/local/nginx/
client_body_temp  fastcgi_temp  logs        sbin       uwsgi_temp
conf              html          proxy_temp  scgi_temp
[root@nginx2 ~]# ls /usr/local/nginx/conf/
fastcgi.conf            mime.types          scgi_params.default
fastcgi.conf.default    mime.types.default  uwsgi_params
fastcgi_params          nginx.conf          uwsgi_params.default
fastcgi_params.default  nginx.conf.bak      win-utf
koi-utf                 nginx.conf.default
koi-win                 scgi_params
[root@nginx2 ~]# vim /usr/local/nginx/conf/nginx.conf
[root@nginx2 ~]# cat /usr/local/nginx/conf/nginx.conf
worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    server {
        listen       8080;
        server_name  192.168.88.102;
        root /usr/local/nginx/html;
        location / {
            root   html;
            index  index.html index.htm;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}
[root@nginx2 ~]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@nginx2 ~]# nginx -s reload
[root@nginx2 ~]#  cat >/usr/local/nginx/html/index.html <<EOF
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <title>后端Web服務(wù)器</title>
</head>
<body>
    這是后端Web服務(wù)器
</body>
</html>
EOF
[root@nginx2 ~]# cat /usr/local/nginx/html/index.html
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <title>后端Web服務(wù)器</title>
</head>
<body>
    這是后端Web服務(wù)器
</body>
</html>
[root@nginx2 ~]# systemctl restart nginx
[root@nginx2 ~]# systemctl status nginx
● nginx.service - Nginx Web Server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: d>
     Active: active (running) since Tue 2026-03-24 09:40:53 CST; 5s ago
    Process: 4706 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, sta>
    Process: 4708 ExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/co>
   Main PID: 4709 (nginx)
      Tasks: 2 (limit: 22927)
     Memory: 2.1M
        CPU: 17ms
     CGroup: /system.slice/nginx.service
             ├─4709 "nginx: master process /usr/local/nginx/sbin/nginx -c /usr>
             └─4710 "nginx: worker process"
Mar 24 09:40:53 nginx2.itcast.cn systemd[1]: Starting Nginx Web Server...
Mar 24 09:40:53 nginx2.itcast.cn systemd[1]: Started Nginx Web Server.
[root@nginx2 ~]# netstat -pantul|grep nginx
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      4709/nginx: master
[root@nginx2 ~]#

[root@nginx2 ~]# curl 192.168.88.102:8080
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <title>后端Web服務(wù)器</title>
</head>
<body>
    這是后端Web服務(wù)器
</body>
</html>
[root@nginx2 ~]#

[root@nginx1 ~]# dnf install nginx -y
修改nginx1配置文件，對(duì)接nginx2
[root@nginx1 ~]# find / -name nginx.conf
/etc/nginx/nginx.conf
/usr/lib/sysusers.d/nginx.conf
[root@nginx1 ~]# vim /etc/nginx/nginx.conf
user nginx;
worker_processes  auto;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    server {
        listen       80;
        server_name  _;
        # root         /usr/share/nginx/html;
        location / {
            proxy_pass http://192.168.88.102:8080;      # 關(guān)鍵！指定后端服務(wù)器的IP和端口
            proxy_set_header Host $host;                # 傳遞原始請(qǐng)求的Host頭（重要！）
            proxy_set_header X-Real-IP $remote_addr;    # 傳遞客戶(hù)端真實(shí)IP（后端可通過(guò)此頭獲?。?
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # 傳遞完整的代理鏈路IP
        }
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            # root   html;
        }
    }
}
[root@nginx1 ~]# cat /etc/nginx/nginx.conf
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        # root         /usr/share/nginx/html;
        location / {
            proxy_pass http://192.168.88.102:8080;      # 關(guān)鍵！指定后端服務(wù)器的IP和端口
            proxy_set_header Host $host;                # 傳遞原始請(qǐng)求的Host頭（重要?。?
            proxy_set_header X-Real-IP $remote_addr;    # 傳遞客戶(hù)端真實(shí)IP（后端可通過(guò)此頭獲取）
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # 傳遞完整的代理鏈路IP
        }
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
# Settings for a TLS enabled server.
#
#    server {
#        listen       443 ssl http2;
#        listen       [::]:443 ssl http2;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers PROFILE=SYSTEM;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        error_page 404 /404.html;
#            location = /40x.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#            location = /50x.html {
#        }
#    }
}
[root@nginx1 ~]#

[root@nginx1 ~]# vim /usr/local/nginx/conf/nginx.conf
[root@nginx1 ~]# cat /usr/local/nginx/conf/nginx.conf
worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    server {
        listen       80;
        server_name  _;
        # root /usr/local/nginx/html;
        location / {
          proxy_pass http://192.168.88.102:8080;      # 關(guān)鍵！指定后端服務(wù)器的IP和端口
          proxy_set_header Host $host;                # 傳遞原始請(qǐng)求的Host頭（重要?。?
          proxy_set_header X-Real-IP $remote_addr;    # 傳遞客戶(hù)端真實(shí)IP（后端可通過(guò)此頭獲?。?
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # 傳遞完整的代理鏈路IP
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}
[root@nginx1 ~]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@nginx1 ~]# nginx -s reload
[root@nginx1 ~]#

[root@nginx1 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx1 ~]# systemctl restart nginx
[root@nginx1 ~]# systemctl enable nginx
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
[root@nginx1 ~]# systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: d>
     Active: active (running) since Sat 2025-12-13 12:07:24 CST; 7s ago
   Main PID: 30749 (nginx)
      Tasks: 3 (limit: 22926)
     Memory: 3.0M
        CPU: 37ms
     CGroup: /system.slice/nginx.service
             ├─30749 "nginx: master process /usr/sbin/nginx"
             ├─30750 "nginx: worker process"
             └─30751 "nginx: worker process"
Dec 13 12:07:24 nginx1.itcast.cn systemd[1]: Starting The nginx HTTP and rever>
Dec 13 12:07:24 nginx1.itcast.cn nginx[30747]: nginx: the configuration file />
Dec 13 12:07:24 nginx1.itcast.cn nginx[30747]: nginx: configuration file /etc/>
Dec 13 12:07:24 nginx1.itcast.cn systemd[1]: Started The nginx HTTP and revers>
# nginx -s reload # 可選

server {
    listen 80;
    server_name _;
    location / {
        return 500 "broken\n";
    }
}

[root@nginx1 ~]# cd /etc/nginx
[root@nginx1 nginx]# pwd
/etc/nginx
[root@nginx1 nginx]# vim nginx.conf
[root@nginx1 nginx]# cat nginx.conf
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    #include /etc/nginx/conf.d/*.conf;
    server {
        listen       80;
        server_name  _;
        location / {
        return 500 "broken\n";
       }
        #root         /usr/share/nginx/html;
#       location / {
#            proxy_pass http://192.168.88.102:8080;      # 關(guān)鍵！指定后端服務(wù)器的IP和端口
#            proxy_set_header Host $host;                # 傳遞原始請(qǐng)求的Host頭（重要?。?
#            proxy_set_header X-Real-IP $remote_addr;    # 傳遞客戶(hù)端真實(shí)IP（后端可通過(guò)此頭獲取）
#            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # 傳遞完整的代理鏈路IP
#        }
        #include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}
[root@nginx1 nginx]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx1 nginx]# nginx -s reload
[root@nginx1 nginx]# curl 127.0.0.1
broken
[root@nginx1 nginx]#

[root@nginx1 ~]# vim /etc/nginx/nginx.conf
[root@nginx1 ~]# cat /etc/nginx/nginx.conf
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        # root         /usr/share/nginx/html;
        location / {
            proxy_http_version 1.1;
            proxy_pass http://192.168.88.102:8080;      # 關(guān)鍵！指定后端服務(wù)器的IP和端口
            proxy_set_header Host $host;                # 傳遞原始請(qǐng)求的Host頭（重要?。?
            proxy_set_header X-Real-IP $remote_addr;    # 傳遞客戶(hù)端真實(shí)IP（后端可通過(guò)此頭獲取）
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # 傳遞完整的代理鏈路IP
            proxy_set_header X-Original-Protocol $server_protocol;
        }
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
# Settings for a TLS enabled server.
#
#    server {
#        listen       443 ssl http2;
#        listen       [::]:443 ssl http2;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers PROFILE=SYSTEM;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        error_page 404 /404.html;
#            location = /40x.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#            location = /50x.html {
#        }
#    }
}
[root@nginx1 ~]#
[root@nginx1 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx1 ~]# nginx -s reload

hostnamectl set-hostname lb1.itcast.cn && bash
hostnamectl set-hostname web1.itcast.cn && bash
hostnamectl set-hostname web2.itcast.cn && bash
cat >/etc/hosts<<EOF
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.88.100   lb1   lb1.itcast.cn
192.168.88.101   web1  web1.itcast.cn
192.168.88.102   web2  web2.itcast.cn
EOF

iptables -F
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
sed -i '/SELINUX=enforcing/cSELINUX=disabled' /etc/selinux/config

yum install vim wget rsync net-tools epel-release -y
yum install ntpsec -y
ntpdate cn.ntp.org.cn
cat >/etc/resolv.conf<<EOF
nameserver 192.168.88.2
nameserver 114.114.114.114
EOF

cat >/etc/resolv.conf<<EOF
nameserver 192.168.88.2
nameserver 114.114.114.114
EOF

systemctl status nginx --no-pager

# 在LB1上執(zhí)行，統(tǒng)一 一下三臺(tái)的nginx配置文件（可選）
scp /etc/nginx/nginx.conf 192.168.88.101:/etc/nginx/
scp /etc/nginx/nginx.conf 192.168.88.102:/etc/nginx/
# 在 Web1 上執(zhí)行
echo "This is Web Server1" > /usr/share/nginx/html/index.html
或者
echo "This is Web Server1" > /usr/local/nginx/html/index.html
# 在 Web2 上執(zhí)行
echo "This is Web Server2" > /usr/share/nginx/html/index.html
或者
echo "This is Web Server2" > /usr/local/nginx/html/index.html

curl 127.0.0.1

第一步，備份
[root@lb1 ~]# cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak # 這是 dnf/yum 安裝的 Nginx
第二步，去掉注釋?zhuān)招?
[root@lb1 ~]# grep -Ev '#|^$' /etc/nginx/nginx.conf.bak > /etc/nginx/nginx.conf
第三步，簡(jiǎn)單查看配置
[root@lb1 ~]# cat /etc/nginx/nginx.conf
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        root         /usr/share/nginx/html;
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}
[root@lb1 ~]#

vim /etc/nginx/nginx.conf
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    # include /etc/nginx/conf.d/*.conf;
    ####################  配置開(kāi)始  ######################
    upstream my_web_service {
        server 192.168.88.101:80;
        server 192.168.88.102:80;
    }
    ####################  配置結(jié)束  ######################
    server {
        listen       80;
        listen       [::]:80;
        ####################  配置開(kāi)始  ######################
        server_name  192.168.88.100;             # 替換為實(shí)際域名或 IP
        location / {
            proxy_pass http://my_web_service;    # 將請(qǐng)求轉(zhuǎn)發(fā)到負(fù)載均衡組
            proxy_set_header HOST $host;
        }
        ####################  配置結(jié)束  ######################
        # server_name  _;
        # root         /usr/share/nginx/html;
        # include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}

nginx -t
nginx -s reload
[root@lb1 ~]# curl 192.168.88.100
This is Web Server1
[root@lb1 ~]# curl 192.168.88.100
This is Web Server2
[root@lb1 ~]# curl 192.168.88.100
This is Web Server1
[root@lb1 ~]# curl 192.168.88.100
This is Web Server2

sed  -i -r 's/SELINUX=[ep].*/SELINUX=disabled/g' /etc/selinux/config
setenforce 0
systemctl stop firewalld &> /dev/null
systemctl disable firewalld &> /dev/null
iptables -F
iptables -t nat -F
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT

cat >index.html<<EOF
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
 <HEAD>
  <TITLE> New Document </TITLE>
  <META NAME="Generator" CONTENT="EditPlus">
  <META NAME="Author" CONTENT="">
  <META NAME="Keywords" CONTENT="">
  <META NAME="Description" CONTENT="">
  <style>
   body {
  background: #060e1b;
  overflow: hidden;
}
  </style>
 </HEAD>
 <BODY>
  <canvas id="canvas"></canvas>
  <script>
   "use strict";
var canvas = document.getElementById('canvas'),
  ctx = canvas.getContext('2d'),
  w = canvas.width = window.innerWidth,
  h = canvas.height = window.innerHeight,
  hue = 217,
  stars = [],
  count = 0,
  maxStars = 1400;
// Thanks @jackrugile for the performance tip! https://codepen.io/jackrugile/pen/BjBGoM
// Cache gradient
var canvas2 = document.createElement('canvas'),
    ctx2 = canvas2.getContext('2d');
    canvas2.width = 100;
    canvas2.height = 100;
var half = canvas2.width/2,
    gradient2 = ctx2.createRadialGradient(half, half, 0, half, half, half);
    gradient2.addColorStop(0.025, '#fff');
    gradient2.addColorStop(0.1, 'hsl(' + hue + ', 61%, 33%)');
    gradient2.addColorStop(0.25, 'hsl(' + hue + ', 64%, 6%)');
    gradient2.addColorStop(1, 'transparent');
    ctx2.fillStyle = gradient2;
    ctx2.beginPath();
    ctx2.arc(half, half, half, 0, Math.PI * 2);
    ctx2.fill();
// End cache
function random(min, max) {
  if (arguments.length < 2) {
    max = min;
    min = 0;
  }
  if (min > max) {
    var hold = max;
    max = min;
    min = hold;
  }
  return Math.floor(Math.random() * (max - min + 1)) + min;
}
function maxOrbit(x,y) {
  var max = Math.max(x,y),
      diameter = Math.round(Math.sqrt(max*max + max*max));
  return diameter/2;
}
var Star = function() {
  this.orbitRadius = random(maxOrbit(w,h));
  this.radius = random(60, this.orbitRadius) / 12;
  this.orbitX = w / 2;
  this.orbitY = h / 2;
  this.timePassed = random(0, maxStars);
  this.speed = random(this.orbitRadius) / 50000;
  this.alpha = random(2, 10) / 10;
  count++;
  stars[count] = this;
}
Star.prototype.draw = function() {
  var x = Math.sin(this.timePassed) * this.orbitRadius + this.orbitX,
      y = Math.cos(this.timePassed) * this.orbitRadius + this.orbitY,
      twinkle = random(10);
  if (twinkle === 1 && this.alpha > 0) {
    this.alpha -= 0.05;
  } else if (twinkle === 2 && this.alpha < 1) {
    this.alpha += 0.05;
  }
  ctx.globalAlpha = this.alpha;
    ctx.drawImage(canvas2, x - this.radius / 2, y - this.radius / 2, this.radius, this.radius);
  this.timePassed += this.speed;
}
for (var i = 0; i < maxStars; i++) {
  new Star();
}
function animation() {
    ctx.globalCompositeOperation = 'source-over';
    ctx.globalAlpha = 0.8;
    ctx.fillStyle = 'hsla(' + hue + ', 64%, 6%, 1)';
    ctx.fillRect(0, 0, w, h)
  ctx.globalCompositeOperation = 'lighter';
  for (var i = 1, l = stars.length; i < l; i++) {
    stars[i].draw();
  };
  window.requestAnimationFrame(animation);
}
animation();
  </script>
 </BODY>
</HTML>
EOF

cat >index.html<<EOF
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
 <HEAD>
  <TITLE> New Document </TITLE>
  <META NAME="Generator" CONTENT="EditPlus">
  <META NAME="Author" CONTENT="">
  <META NAME="Keywords" CONTENT="">
  <META NAME="Description" CONTENT="">
  <style>
  /*Twitter @locoalien*/
/*Sitio web www.locoaliensoft.com*/
/*www.facebook.com/CulturaInformatica*/
                * {margin: 0; padding: 0;}
                canvas {display: block;}
                body {background: black;}
  </style>
 </HEAD>
 <BODY>
 <html>
<head>
        <title>Hacking locoalien Matrix console</title>
        <meta charset="UTF-8">
</head>
<body>
<canvas id="locoalien"></canvas>
<script type="text/javascript">
        </script>
</body>
</html>
  <script>
  //*--------------------------------------*
//* Desarrollado por Locoalien           *
//* Twitter @locoalien                   *
//* Sitio web: www.locoaliensoft.com     *
//*--------------------------------------*
//+++++++++++++++++++++++++++++++++++++
// El objetivo de este ejemplo es aprender a dar animacion y utilizar las propiedades
// Mas comunes de JavaScript. Veremos el poder que tiene HTML5 implementando el Canvas
// Espero les guste este ejemplo
// Para mas informacion visitar nuestra pagina de Facebook: https://www.facebook.com/CulturaInformatica
//+++++++++++++++++++++++++++++++++++++
window.onload = hacking;//Llamamos a la funcion despues de que el documento ha sido cargado completamente
function hacking(){
        var c = document.getElementById("locoalien");
        c.height = window.innerHeight;  //innerHeight se utiliza para saber la altura de la pantalla
        c.width = window.innerWidth;    //innerHeight se utiliza para saber la altura de la pantalla
        var letraTam=12; //Tama?o de la letras por pixel
        var columnas=c.width/letraTam; //El ancho dividido por el tamano que tendra las letras
        var Texto="0"; //El testo que aparecera en pantalla
        Texto=Texto.split("");//La función split() permite dividir una cadena de caracteres (string) en varios bloques y crear un array con estos
        var Texto2="1";
        Texto2=Texto2.split("");
        var letras=[];
        for(var i=0; i<columnas;i++){
                letras[i]=1;//Siver para saber la cantidad de letras que tendra en la pantalla
        }
        contexto= c.getContext('2d');//Muy importante especificar el contexto en el cual vamos a trabajar
        function dibujar(){
                contexto.fillStyle="rgba(0,0,0,0.05)";//Damos el color que tendra el recuadro en el que estara la animacion. en este caso sera transparente 0.05
                contexto.fillRect(0,0,c.width,c.height);//Damos las dimensiones alto y ancho que tendra el cuadrado, que en este caso es de toda la pantalla
                contexto.fillStyle= "#0f0";//Color de las letras
                contexto.font= letraTam+"px arial";//Tama?o de la letra
                for(var i=0;i<letras.length;i++){
                        text=Texto; //Le asigno el texto que definimos en la parte de arriba
                        //El ciclo for me permite darle las coordenadas correctas para posicionar el text x, y 
                        text2=Texto2;//El texto dos que mostrara solo el 1
                        if(i%2==1){contexto.fillText(text,i*letraTam, letras[i]*letraTam);//Para imprimir texto disponesmos de fillText(texto,x,y)
                        }else{
                                contexto.fillText(text2,i*letraTam, letras[i]*letraTam);//Para imprimir texto disponesmos de fillText(texto,x,y)        
                        }
                        if(letras[i]*letraTam > c.height && Math.random()>0.975){
                                letras[i]=0;
                        }
                        letras[i]++;
                }
        }
        setInterval(dibujar,120);//velocidad a la que se ejecuta la funcion en milisegundos
}
  </script>
 </BODY>
</HTML>
EOF

# 在 Web1 和 Web2 上分別執(zhí)行
tail /var/log/nginx/access.log

vi /etc/nginx/nginx.conf

worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    ####################  配置開(kāi)始  ######################
    upstream my_web_service {
        server 192.168.88.101:80;
        server 192.168.88.102:80;
    }
    ####################  配置結(jié)束  ######################
    server {
        listen       80;
        listen       [::]:80;
        ####################  配置開(kāi)始  ######################
        server_name  192.168.88.100;             # 替換為實(shí)際域名或 IP
        location / {
            proxy_pass http://my_web_service;    # 將請(qǐng)求轉(zhuǎn)發(fā)到負(fù)載均衡組
            proxy_set_header HOST $host;
            proxy_set_header X-Real-IP $remote_addr;                      # 添加這兩行  
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        ####################  配置結(jié)束  ######################
        server_name  _;
        root         /usr/share/nginx/html;
        include /etc/nginx/default.d/*.conf;
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}

/usr/sbin/nginx -s reload

在Web01和Web02服務(wù)器上
# vi /etc/nginx/nginx.conf
...
http {
    ...
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  logs/access.log main;
    ...
}
在Web01和Web02服務(wù)器上，分別重啟
# /usr/sbin/nginx -s reload

tail -3 /var/log/nginx/access.log

# 在宿主機(jī)（筆記本 Windows 電腦）上，執(zhí)行
ipconfig

# vim conf/nginx.conf
http {
        ...
        upstream my_web_service {
                server 192.168.88.101:80 backup;    # 優(yōu)先訪(fǎng)問(wèn)其他的服務(wù)器
                server 192.168.88.103:80;
        }
        ...
}

# vim conf/nginx.conf
http {
        ...
        upstream my_web_service {
                server 192.168.88.101:80;
                server 192.168.88.103:80 down;    # 下線(xiàn)了
        }
        ...
}

# vim conf/nginx.conf
http {
        ...
        upstream my_web_service {
                server 192.168.88.101:80 weight=4;
                server 192.168.88.103:80 weight=6;
        }
        ...
}

# vim conf/nginx.conf
http {
        ...
        upstream my_web_service {
                ip_hash;                    # 加上這個(gè) IP Hash 就可以
                server 192.168.88.101:80;
                server 192.168.88.103:80;
        }
        ...
}

# vim conf/nginx.conf
http {
        ...
        upstream my_web_service {        # 加上這個(gè) IP Hash 就可以
                ip_hash;
                server 192.168.88.101:80;
                server 192.168.88.103:80;
        }
        ...
}