nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
! b: i. s0 w5 c$ ~6 y& k7 r5 \wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
- Y) K' O, F) b, O4 E( }; ttar xvzf openssl-1.1.0f.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
- [' w! `1 S& Q# t, _tar xvzf pcre-8.41.tar.gz

1 {' Z& C! R0 m2 lwget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz

* U( o) w  L8 {$ @wget https://github.com/openresty/sregex/archive/master.zip
" ^0 t+ h! K2 I# H, Bmv master.zip replace-filter-nginx-module-master.zip
9 ~& G, x: i0 {9 q, k0 k9 ]unzip replace-filter-nginx-module-master.zip

安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
unzip sregex.zip
& D4 T0 {- Z# x: e$ Ycd sregex
make && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
; ]  B/ p6 |0 F. R3 |6 wldconfig
5 o% y8 E0 O$ e5 J
4 C' O' h9 \6 Q+ _+ U) I3 W安装modsecurity
『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
! H4 X9 Y3 C9 [' B& ~7 F& Ugit clone https://github.com/SpiderLabs/ModSecurity.git mod_security
" _- Q5 ^$ S8 C' ?- x4 g9 }' `cd mod_security
./autogen.sh  
" h' q) Y( r9 g- N8 O./configure --enable-standalone-module
make

9 I( c% F' _4 `. a
安装nginx
7 a* r" g$ K( k5 ~$ n6 bcd nginx-1.13.6

+ C2 H5 P  S( c3 f* i5 {

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

1 h+ K/ ]& i& l) [8 U! x5 y# P/ pmake
make install
0 A! `- ?8 \* {  U0 t3 n; ?
注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

) u* X: U- `; M3 \* ?8 t! \# M

$ W3 x. _' }! D. C' {: b

' |+ T- C, @0 e% S! u- X

. }& e5 |2 ]6 K! _
, B3 M/ ^6 F. @. I' h
; b% F( L, r0 B- R" |* R7 t