[B! Nginx] junichi_yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

junichi_y id:junichi_y

Nginxã«é–¢ã™ã‚‹junichi_yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Nginxã§SSLã®è©•ä¾¡ã‚’A+ã«ã™ã‚‹æ‰‹é †
æ˜¨æ—¥ HTTPS åŒ–ã—ãŸ ã‚·ãƒ£ãƒ³ãƒ—ãƒ¼è©•ä¾¡ã‚µã‚¤ãƒˆ ã®SSLè©•ä¾¡ã‚’A+ã«ã—ã¾ã—ãŸã€‚ å‚è€ƒã«ã—ãŸã®ã¯ä¸‹ã®è¨˜äº‹ HTTPS on Nginx: From Zero to A+ (Part 2) - Configuration, Ciphersuites, and Performance - Julian Simioni ã“ã®è¨˜äº‹ã®Nginxè¨¼æ˜Žæ›¸è¨å®šã‚’POSTDã•ã‚“ãŒç¿»è¨³ã—ã¦ã„ã‚‹ã®ã§ã€è¿‘ã„ã†ã¡ã«è©³ã—ã„è¨³ã¯æ—¥æœ¬èªžã§èªã‚ã‚‹ã‹ã‚‚ã€‚ã“ã“ã§ã¯é©å½“ã«ã‹ã„ã¤ã¾ã‚“ã æ‰‹é †ã‚’æ›¸ã„ã¦ãŠãã€‚ä¸€éƒ¨æ™‚é–“ã®ã‹ã‹ã‚‹ã‚³ãƒžãƒ³ãƒ‰ã‚‚ã‚ã‚‹ã‘ã©ã€åŸºæœ¬çš„ã«æ±ºã¾ã£ãŸè¨å®šæ›¸ãã ã‘ãªã®ã§æ™‚é–“ã¯ã‹ã‹ã‚Šã¾ã›ã‚“ã€‚ï¼ˆã‚‚ã¡ã‚ã‚“ã©ã†ã„ã†æ„å‘³ãªã®ã‹çŸ¥ã£ã¦ãŠãã«è¶Šã—ãŸã“ã¨ã¯ãªã„ï¼‰ SSLã®è©•ä¾¡è¨ˆæ¸¬ã«ã¤ã„ã¦ SSLã‚µãƒ¼ãƒãƒ¼ã®ãƒ†ã‚¹ãƒˆã¯Qualys SSL Reportã§ç¢ºèªã—ã¾ã™ã€‚ Nginxãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®è¨å®šã§è¨ˆæ¸¬ã—ãŸã‚‰Cã ã£ãŸã€‚ SSLv3 ã‚’ç„¡åŠ¹ã«ã™ã‚‹ SSLv3
junichi_y 2015/08/13
nginx

HTTPS

ssl

TLS

security
ãƒªãƒ³ã‚¯
H2Oã¨PHPã‚’çµ„ã¿åˆã‚ã›ã‚‹ã®ã€è¶…ç°¡å˜ã§ã™ï¼ˆã‚‚ã—ãã¯mod_rewriteãŒä¸è¦ãªç†ç”±ï¼‰
FastCGIå¯¾å¿œæ©Ÿèƒ½ãŒH2Oã«ãƒžãƒ¼ã‚¸ã•ã‚ŒãŸã“ã¨ã‚’å—ã‘ã¦ã€uzullaã•ã‚“ãŒã€ŒH2Oã§PHPï¼ˆãŒã¡ã‚‡ã£ã¨ã ã‘å‹•ãã¾ã§ï¼‰ã€ã¨ã„ã†è¨˜äº‹ã‚’æ›¸ã„ã¦ãã ã•ã£ã¦ã„ã¾ã™ã€‚ ã‚ã‚ŠãŒãŸã‚„ã‚ã‚ŠãŒãŸã‚„ã€‚ ãã®ä¸ã§ã€ http://hoge/entry/1 ã¿ãŸã„ãªã®ã‚’phpã«ãƒžãƒƒãƒ—ã™ã‚‹æ–¹æ³•ã¯ã¾ã ã‚ˆãã‚ã‹ã£ã¦ã¾ã›ã‚“ã€‚ãã®å†…ã—ã‚‰ã¹ã¾ã™ github.comã‚’èªã‚€é™ã‚Š FastCGI (or PHP) applications should be as easily configurable as it is for the Apache HTTP serverã¨ã„ã†ã“ã¨ã§ã€ã‚„ã£ãŸãœï¼ã£ã¦ãªã‚‹ã‚“ã§ã™ã‘ã©ã€nginxã¯ã‚‚ã¨ã‚ˆã‚Šã€Apacheã«ãŠã„ã¦ã‚‚ç¾çŠ¶ãƒ«ãƒ¼ã‚¿ãƒ¼ã‚’ã¤ã‹ã£ã¦ã„ã‚‹ã‚ˆã†ãªã‚¢ãƒ—ãƒªã ã¨htaccessã‚’ã„ã¡ã„ã¡ã‹ã‹ãªã„ã¨ã„ã‘ãªã„ã®ã§ã€Apacheã¿ãŸã„ãªã‚¹ã‚¿ã‚¤ãƒ«ãŒæ¥½ãªã®ã‹ï¼Ÿã¨ã„ã†ã¨ã¡ã‚‡ã£ã¨ç–‘å•ãŒã‚ã‚Šã¾ã™ã€‚ ï¼ˆãŸã¨
junichi_y 2015/06/19
H2Oã¨PHPã‚’çµ„ã¿åˆã‚ã›ã‚‹ã®ã€è¶…ç°¡å˜ã§ã™ï¼ˆã‚‚ã—ãã¯mod_rewriteãŒä¸è¦ãªç†ç”±ï¼‰ #H2O #browser #Apache #nginx #mod_rewrite #security

H2O

browser

Apache

nginx

mod_rewrite

security
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
junichi_y 2015/04/06
#configuration #Apache #Nginx #ssl #security #https #TLS #OpenSSL

configuration

Apache

Nginx

ssl

security

https

TLS

OpenSSL
ãƒªãƒ³ã‚¯
æˆ‘ã€…ã¯ã©ã®ã‚ˆã†ã«ã—ã¦å®‰å…¨ãªHTTPSé€šä¿¡ã‚’æä¾›ã™ã‚Œã°è‰¯ã„ã‹ - Qiita
Modern Ciphersuite: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES1
junichi_y 2014/05/21
#nginx #HTTPS #SSL #web #WebServer #webservice #Server #security #OpenSSL #Apache #TLS #FS #PFS #CRL #OCSP #HSTS #AWS ELB #SPDY #BEAST #BREACH

nginx

HTTPS

SSL

web

WebServer

webservice

Server

security

OpenSSL

Apache
ãƒªãƒ³ã‚¯
nginx
Two projects, similar names, very different futures. Watch the CNCF webinar: ingress-nginx and NGINX Ingress Controller. nginx ("engine x") is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy server, and mail proxy server. Originally written by Igor Sysoev and distributed under the 2-clause BSD License. Enterprise distributions, commercial support and training are ava
junichi_y 2012/04/25
2012-04-23 nginx-1.2.0 stable version has been released.

nginx

WebServer

Server

HTTP

httpd

http
ãƒªãƒ³ã‚¯
http://blog.av-jyo.com/2011-08/watching-servers-for-a-small-web-service.html
junichi_y 2011/08/18
linux

ã‚µãƒ¼ãƒç›£è¦–

server

nginx

apache

php-fpm

MySQL

AWStats

Zabbix

Logwatch
ãƒªãƒ³ã‚¯
è»½é‡é«˜é€ŸWebã‚µãƒ¼ãƒã®nginxã§é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ã¨ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«
nginxã¨ã¯ï¼Ÿ nginxã¯ãƒã‚·ã‚¢ã§é–‹ç™ºã•ã‚Œã¦ã„ã‚‹è»½é‡ã§é«˜é€ŸãªWebã‚µãƒ¼ãƒã§ã™ã€‚ ç¾åœ¨ã‚·ã‚§ã‚¢ã¯ 7% è¿‘ãã‚ã‚‹ã‚ˆã†ã§ã™ã€‚ã‚‚ã¡ã‚ã‚“Apacheã«æ¯”ã¹ã‚Œã°å°‘ãªã„ã§ã™ãŒã€Apache 55%ã€IIS 25%, nginx 7%ã§3ç•ªç›®ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹Webã‚µãƒ¼ãƒã«ãªã‚Šã¾ã™ã€‚ æ˜”ã¯ã€Pound+Lighttpd+Apacheã®çµ„ã¿åˆã‚ã›ã‚’ã‚ˆãä½¿ã£ã¦ã„ã¾ã—ãŸãŒã€ã“ã“æ•°å¹´ã¯nginx+Apacheã¨ã‹ã«ãªã‚Šã¾ã—ãŸã€‚ ä¸»ã«ã€é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’nginxãŒå—ã‘æŒã¡ã€PHPãªã©ã®å‹•çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¯Apacheã«æ¸¡ã™å½¢ã«ãªã‚Šã¾ã™ã€‚Railsã‚’ä½¿ã†å ´åˆã¯ã€nginx+Unicornã®çµ„ã¿åˆã‚ã›ãŒå¤šã„ã§ã™ã€‚ ã„ã¾ã•ã‚‰ãªæ„Ÿã˜ã‚‚ã‚ã‚Šã¾ã™ãŒã€ã‚¤ãƒ³ãƒ•ãƒ©å‘¨ã‚Šã®è¦‹ç›´ã—ã‚‚å«ã‚ã¦ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’nginxã«ä»»ã›ã‚‹ nginx+Apacheã®å ´åˆã®è¨å®šã¯æ¬¡ã®ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ï¼ˆnginxãŒport 80ã€Apac
junichi_y 2011/08/15
nginx

apache

web

server

mod_rpaf

expires

linux
ãƒªãƒ³ã‚¯
nginx+apacheã§ã¡ã‚‡ã£ã´ã‚Šå¿«é©ãªWebã‚µãƒ¼ãƒãƒ¼ã‚’ç›®æŒ‡ã—ã¦ã¿ã‚‹(CentOS ã•ãã‚‰ã®VPS)
nginxã¯ç„¡æ–™ã§åˆ©ç”¨ã§ãã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ãƒã‚¤ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹HTTPã‚µãƒ¼ãƒ Nginxã¯C10Kå•é¡Œã« å–ã‚Šçµ„ã‚€ã¹ãé–‹ç™ºã•ã‚ŒãŸä¸€æ¡ã‚Šã®ã‚µãƒ¼ãƒã®ã†ã¡ã®ä¸€ã¤ã§ã™ã€‚å¾“æ¥ã®ã‚µãƒ¼ãƒã¨ã¯ç•°ãªã‚Šã€Nginxã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å‡¦ç†ã‚’ã‚¹ãƒ¬ãƒƒãƒ‰ã«ä¾å˜ã—ã¦ã„ã¾ã›ã‚“ã€‚ãã®ä»£ã‚ ã‚Šã«ã‚‚ã£ã¨ã‚¹ã‚±ãƒ¼ãƒ©ãƒ–ãƒ«ãªï¼ˆéžåŒæœŸã®ï¼‰ã‚¤ãƒ™ãƒ³ãƒˆé§†å‹•ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚’ä½¿ç”¨ã—ã¦ã„ã¾ã™ã€‚ã“ã®ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã¯ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒå°‘ãªã„ã ã‘ã§ãªãã€æœ€ã‚‚é‡è¦ãªäº‹ ã¨ã—ã¦ã€ç¨¼åƒæ™‚ã®ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒäºˆæ¸¬å¯èƒ½ã§ã‚ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ NginxJa ( æ—¥æœ¬èªžWiki ) â€»C10Kå•é¡Œã¯ã€Web2.0ã®å…ˆã«ã‚ã‚‹C10Kå•é¡Œ âˆ’ ï¼ ITãŒç«¯çš„ãªèª¬æ˜Žã‚’ç¤ºã—ã¦ã„ã‚‹ nginxã£ã¦ã®ã‚’ä½¿ã£ã¦ã¿ã‚ˆã† ãã‚“ãªã‚ã‘ã§nginxã£ã¦ã®ãŒé€Ÿãã¦ã‚¤ã‚«ã—ã¦ã‚‹ã¨ã®ã“ã¨ãªã®ã§ã€ã¨ã‚Šã‚ãˆãšå°Žå…¥ã ã‘ã—ã¦ã¿ã‚ˆã†ã¨ã„ã†ã“ã¨ã§ãƒˆãƒ©ã‚¤ã€‚æœ€çµ‚çš„ã«ã¯ã€ç”»åƒã‚„CSSãªã©ã®é™çš„ãƒ•ã‚¡ã‚¤ãƒ«ã‚’nginxãŒè¿”ã—ã€å‹•çš„éƒ¨
junichi_y 2011/08/15
nginx

apache

server

vps

mod_rpaf

apxs

CentOS

linux

ã•ãã‚‰
ãƒªãƒ³ã‚¯
ã•ãã‚‰ VPS + CentOS ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã‚„é«˜é€ŸåŒ–ã§ä»¥å‰è©¦ã›ãªã‹ã£ãŸè¨å®š
ã¯ã˜ã‚ã¦ã®ã•ãã‚‰ VPS + CentOS ã®åˆæœŸè¨å®šã‹ã‚‰ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ãªã©ã®ä½œæ¥ã¾ã¨ã‚ã§ä¸€èˆ¬çš„ãªã‚µãƒ¼ãƒãƒ¼ã®è¨å®šæ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã—ãŸãŒã€ã•ãã‚‰ã®VPS ã®è¨å®šã®ä¸ã§ APC ã®å…¥ã‚Œæ–¹ã‚„ nginx ã®å…¥ã‚Œæ–¹ãªã©ã¯è©¦ã›ãªã‹ã£ãŸã®ã§è¿½è¨˜ã¨ã—ã¦ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ ä»Šå›žã‚‚ä»¥ä¸‹ã®è¨˜äº‹ã‚’å‚è€ƒã«ã•ã›ã¦é ‚ãã¾ã—ãŸã€‚ã“ã“ã«å…¨ã¦ãŒã‚ã‚‹ã®ã§ç§ã®è¨˜äº‹ã§ã¯ä½œæ¥ã‚’ã‚·ãƒ³ãƒ—ãƒ«ã«ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ã“ã“ã«æ›¸ã„ã¦ãªã„ç‰©ã«ã¤ã„ã¦ã¯ã“ã®è¨˜äº‹ã§æ›¸ã„ã¦ã¿ã¾ã™ã€‚ ã‚¦ã‚§ãƒ–é–‹ç™ºè€…ã®ãŸã‚ã®ã€1æ™‚é–“ã§ã§ãã‚‹LAMPç’°å¢ƒæ§‹ç¯‰è¡“ï¼ˆCentOSç·¨ï¼‰ â€“ ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå‰µæ¥æ—¥è¨˜ CentOS 5.6 ã¸ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã™ã‚‹ ã•ãã‚‰ VPS ã¯ã“ã®ãƒ–ãƒã‚°ã‚’æ›¸ã„ã¦ã„ã‚‹ç¾æ™‚ç‚¹ã§å¥‘ç´„ã—ãŸçŠ¶æ…‹ã ã¨ CentOS 5.5 ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ CentOS ã‚’ 5,6 ã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ã¾ã™ã€‚ ã¾ãšè‡ªåˆ†ã®ç’°å¢ƒãŒ CentOS 5.5 ãªã®ã‹ã‚’èª¿ã¹ã¾ã™
junichi_y 2011/08/14
ã•ãã‚‰

VPS

CentOS

apache

nginx
ãƒªãƒ³ã‚¯
ã€How toã€‘Nginx + PHP(FastCGIãƒ¢ãƒ¼ãƒ‰)ã§æœ€é€Ÿãªwebã‚µãƒ¼ãƒ Â« æŠ€è¡“è€…æ´¾é£ã®æŠ€è¡“æ—¥èªŒãƒ–ãƒã‚°
Nginx + PHP(FastCGIãƒ¢ãƒ¼ãƒ‰)ã§æœ€é€Ÿãªwebã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã—ã¾ã™ã€‚ å¤§ä½“ã®å†…å®¹ã¯ä¸å›½ã®å¼µå®´ãƒ–ãƒã‚° ã‚’å‚ç…§ã—ã¦ç¿»è¨³ã—ãŸã‚‚ã®ã§ã™ã€‚ Nginx(ã‚¨ãƒ³ã‚¸ãƒ³ã‚¨ãƒƒã‚¯ã‚¹)ã¨ã¯ è»½é‡é«˜æ€§èƒ½ãªWebã‚µãƒ¼ãƒ/ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§ã‚ã‚Šã€åŒæ™‚ã«é›»åãƒ¡ãƒ¼ãƒ«ï¼ˆIMAP/POP3ï¼‰ãƒ—ãƒã‚ã‚·ã§ã‚ã‚Šã¾ã™ã€‚ nginx ã¯å½“åˆã€RamblerãŒé‹å–¶ã™ã‚‹å„ç¨®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®ãƒ‹ãƒ¼ã‚ºã‚’æº€ãŸã™ãŸã‚ã«é–‹ç™ºã•ã‚ŒãŸã€‚2009å¹´5æœˆã®ãƒãƒƒãƒˆã‚¯ãƒ©ãƒ•ãƒˆã®èª¿æŸ»ã«ã‚ˆã‚Œã°ã€nginx ã¯6,342,250ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ä½¿ã‚ã‚Œã¦ãŠã‚Šã€Webã‚µãƒ¼ãƒã¨ã—ã¦ã®ã‚·ã‚§ã‚¢ã¯ç¬¬5ä½ã§ã‚ã‚Šã¾ã™ã€‚ ä¸å›½ã¨ã‚¢ãƒ¡ãƒªã‚«ã§ã€ã™ã§ã«ä¸€èˆ¬çš„ã«ä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ å¼µå®´ã•ã‚“ã®ãƒ†ã‚¹ãƒˆã‚ˆã‚Šãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹çš„ã«apacheã®10å€ã§ã™ã€‚ ç†è€…ã‚‚webbenchã‚’ä½¿ã£ã¦ãƒ†ã‚¹ãƒˆã—ã¾ã—ãŸã€å¼µå®´ã•ã‚“ã¨ä¼¼ã¦ã„ã‚‹çµæžœã‚’å¾—ã¾ã—ãŸã€‚ Nginxã¯epollï¼ˆLinux Kernel2.6ï¼‰ã¨k
junichi_y 2009/09/28
CentOS

Linux

MySQL

nginx

php

php-fpm

FastCGI

Server
ãƒªãƒ³ã‚¯
1