nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
4 O3 j2 @# [: Ewget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
; q5 J" r- x& [- Dtar xvzf openssl-1.1.0f.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
5 `5 U, q6 D3 |tar xvzf pcre-8.41.tar.gz
, e7 j- v' s7 W; A( @
wget http://nginx.org/download/nginx-1.13.6.tar.gz
: p4 a9 g0 A9 s2 a% D8 itart xvzf nginx-1.13.6.tar.gz

wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip replace-filter-nginx-module-master.zip
, @7 ]( S) n% E& |9 Y, N) ]unzip replace-filter-nginx-module-master.zip

" E3 x* X3 c) X9 s. f. E  u8 r安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
& A) `9 N! r3 w; a; Amv master.zip sregex.zip
unzip sregex.zip
1 B& V# a% Y% ?* l) Jcd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
  G- [+ u0 U9 \; b6 \ldconfig
1 Y# ^  O2 B& ^  v: q  e2 b
安装modsecurity
) C" D% [- k; e8 {/ o5 l; K8 r『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
2 |+ v5 o3 b- ?1 t7 x5 m6 Q" j0 ucd mod_security
. H$ B. v7 a/ ^. K: F% F& X6 k) A./autogen.sh  
2 t0 T+ U. n& z( }8 J4 ^+ ^/ V./configure --enable-standalone-module
. Q: Z* s& L6 H6 u4 s+ |* @4 pmake

  f; t/ I- ^' I
* t: B' M. {# ]0 D7 G6 t安装nginx
cd nginx-1.13.6

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
) D2 e0 \3 \. ]1 q2 Q9 \0 c& Xmake install
4 T0 U- d1 k0 s. K; ^
/ N+ Z9 F7 v$ o$ G3 T& a  T注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

* q  B% |, c1 R% L, Z$ ^



2 Q7 `* l, K5 H  {
8 ]2 K0 Q' B# @' m, x* U- p

" m, N7 }! T* A' a+ r