nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
1 a$ ~( H3 B* N4 E) |" Ptar xvzf openssl-1.1.0f.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz
9 t( r8 J' n! s( J' {
( r( x# I9 K8 g8 J" j/ _/ f3 Iwget http://nginx.org/download/nginx-1.13.6.tar.gz
. O: }' w1 _/ k: w0 Ttart xvzf nginx-1.13.6.tar.gz

7 [1 t7 ~2 h1 X: X& A' nwget https://github.com/openresty/sregex/archive/master.zip
mv master.zip replace-filter-nginx-module-master.zip
( j* w- }0 d; y* R! `unzip replace-filter-nginx-module-master.zip
8 Y, k5 E& ^5 X
% s4 U/ k* c9 `& m2 w% q& {安装sregex
, h! W& l" n' P- h) H- ~[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
wget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
unzip sregex.zip
cd sregex
+ P% A6 J8 h# p1 xmake && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
ldconfig

% p. P* E% N1 D6 y# g安装modsecurity
, m8 Q  o# y7 l0 N8 w- {. W『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
, Z( S# {4 n: a: y  H1 Z" G, g. n0 igit clone https://github.com/SpiderLabs/ModSecurity.git mod_security
cd mod_security
./autogen.sh  
./configure --enable-standalone-module
9 C6 e  v, b' bmake

! _( `# Q: J" w$ {/ V
6 C( I1 w/ G4 ]2 u+ l& }' N4 u2 {% C安装nginx
4 p) ~' x+ C3 l. }+ M/ E1 ?% Wcd nginx-1.13.6
8 M* `9 ~' [! Z: W1 n
" k' C4 R: G' w' [  Z

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
' E0 Z8 F( Z* M+ O6 o; o; H% h' z- Bmake install

注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

: L/ g6 {  |+ z, b! D+ o6 C






, Y7 c4 l8 [  P0 z