nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
9 \+ e% `, Z$ i6 Z4 ?: Otar xvzf openssl-1.1.0f.tar.gz
, @. A' u( ~. y& K  zwget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz

- k$ U7 ~! t  K5 J: k* v. o( L" Vwget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz
6 i8 y" L! s" s7 \# t/ y8 {
wget https://github.com/openresty/sregex/archive/master.zip
4 o, x4 s& ?) a* o' p5 O4 w3 y3 vmv master.zip replace-filter-nginx-module-master.zip
' |  t. ^6 H0 V0 w. j6 Tunzip replace-filter-nginx-module-master.zip
6 L8 E: z9 q8 H3 P
1 r7 N5 k; q* W2 r0 ~2 ?安装sregex
7 q: G0 J/ j$ D+ H/ l9 G, B[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
6 L3 X' _6 u  I2 e) M6 M+ Y& wwget https://github.com/openresty/sregex/archive/master.zip
' J1 G5 K# _4 f% L4 j* e' F* q& M' umv master.zip sregex.zip
unzip sregex.zip
: X( {4 x' J2 h% E+ Zcd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
ldconfig
; L% R* {9 a- T2 L  ]" {2 y5 f
安装modsecurity
『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
( Z! K1 r1 M0 Q& t! Wgit clone https://github.com/SpiderLabs/ModSecurity.git mod_security
* a# q! T5 @$ \: d) n0 @0 tcd mod_security
2 n/ C8 ?: Q7 _; v# w  M- ?./autogen.sh  
9 R& h/ X4 D/ d# e+ p. W8 S8 F# `./configure --enable-standalone-module
# ^4 |9 c1 S! @4 P5 ?make


安装nginx
cd nginx-1.13.6
4 P$ H1 u8 p7 I5 A, c# G

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

; r9 F# s4 F. D+ y* Z8 z( lmake
* B; ^3 }! _+ N  }" N2 Jmake install
- _; D3 J6 a$ L8 @8 u
注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module
& R3 T4 d* J7 j+ R! C9 I6 J  ?0 |
: ^/ Z& ]) ~5 N. D9 s# ?


6 A' ~3 q7 D9 x# \/ D+ Z+ B


/ q, J3 ^- d, P. \& K6 ~& |
8 H- S: L5 B/ X" L: G5 t