nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
7 [; k1 \$ Z; m' s! Awget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
tar xvzf openssl-1.1.0f.tar.gz
- g. b9 c& {& ~) ]- swget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz

wget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz

wget https://github.com/openresty/sregex/archive/master.zip
3 X+ E8 |% ?" u. ]9 p: B% l: \mv master.zip replace-filter-nginx-module-master.zip
unzip replace-filter-nginx-module-master.zip

安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
unzip sregex.zip
  @* E/ t9 L+ r+ y) t% mcd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
. X0 k( }9 v' g% L1 j' s0 l' kldconfig
, b' ~9 {$ y6 V5 Y9 D9 K
安装modsecurity
『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
: Z/ _5 k& [% l! ?cd mod_security
./autogen.sh  
# p9 ?0 h) G/ S8 I; v./configure --enable-standalone-module
make
4 w' O7 _7 k. h- g1 U- H* P* s# C
* O7 T* P# w4 ?) Q0 _1 M' e
4 N1 \0 E* I1 r4 W9 Q# _1 N3 M安装nginx
cd nginx-1.13.6
; T) Y1 @% v0 r2 W# q% L

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
make install
1 [  S1 e5 z( _2 u7 e" g; z' R3 q
注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

( E% j8 d  N2 n9 D! j0 q9 y. |* g
' [: N- J$ c; n* t  k* a5 Q

8 _8 A+ {* V: P$ @) I) d

/ d8 P$ F7 T1 P
+ u+ C  j6 i4 L2 e4 ^* J# U" M* D8 B