nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
tar xvzf openssl-1.1.0f.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz
1 J0 j0 w# ~3 c! A8 u5 e; o
wget http://nginx.org/download/nginx-1.13.6.tar.gz
  |! H, M# c( N. rtart xvzf nginx-1.13.6.tar.gz

" l4 T0 R$ E  u" u/ L/ }/ {8 G* ewget https://github.com/openresty/sregex/archive/master.zip
mv master.zip replace-filter-nginx-module-master.zip
unzip replace-filter-nginx-module-master.zip
% o/ }( Z! N- g% L) G: T0 y. J
. w/ R/ ^: A) D9 p  o安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
unzip sregex.zip
cd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
6 |( l" t; M" q2 yldconfig
7 ~% u. {" h# p, `' q
安装modsecurity
$ X  H) W% F+ O3 d) a『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
: W# A  u; O5 _$ x# Q1 D% f$ c( Jcd mod_security
./autogen.sh  
$ C  L( O" G$ M0 ?+ g! M  ^./configure --enable-standalone-module
make


安装nginx
cd nginx-1.13.6

8 i$ b" ]- K2 y0 l

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

# o$ r% j& B2 L% y# a+ Y9 Xmake
make install
  I, s  z9 v9 S7 t
' a; M; R# g0 |' B( M% ^( m6 r注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module
7 n# p7 T1 s( G+ @
6 M; E* u/ f* {" X- q/ A, E' n


" [* q2 d; p. D- O7 Q' j
$ }: [- }: I2 k6 l$ [( `
+ m; s$ ]* F! ~: i5 q* O$ a  ]; J, ~
/ J) A/ ]3 [) d1 y8 w6 m
: @8 a6 R) c- ?2 z( e& O4 V
) T$ Q+ A* V- G4 I! g5 k