nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
6 m+ q& L+ ^+ E8 {/ `, Twget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
5 S7 d9 t3 Y  G6 Utar xvzf openssl-1.1.0f.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz

wget http://nginx.org/download/nginx-1.13.6.tar.gz
tart xvzf nginx-1.13.6.tar.gz
5 b. s' c( l6 s0 K5 V: J' I
9 [6 d& o. c  @& {1 u  uwget https://github.com/openresty/sregex/archive/master.zip
( x' ?% x' ^2 I, ~& E) Nmv master.zip replace-filter-nginx-module-master.zip
2 q; y- ?1 _+ R: f9 R8 nunzip replace-filter-nginx-module-master.zip

安装sregex
) k0 _, ?! s3 u- p  Y3 s! i6 f[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
, q( a+ V  A1 k% G8 I9 iwget https://github.com/openresty/sregex/archive/master.zip
mv master.zip sregex.zip
3 @0 x; B" F, G) funzip sregex.zip
* H/ p0 c6 M+ m, zcd sregex
9 B( i8 ]/ d3 ?3 w8 ]" ymake && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
0 ~. @9 @- S! yldconfig
! N% Z; a# S( i
安装modsecurity
# M( i0 U- k+ [! t6 ^, F6 C9 M3 ]; r『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
+ w- X6 P+ h9 T7 s% ~/ ygit clone https://github.com/SpiderLabs/ModSecurity.git mod_security
cd mod_security
9 L- w  ^$ y/ `7 w. |5 T9 N./autogen.sh  
./configure --enable-standalone-module
make


* v/ M! z1 a$ k8 L4 \/ k5 G安装nginx
cd nginx-1.13.6
$ S. S0 B: T( d$ [
4 }0 t& k7 E9 B

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
0 h1 E- t% ~1 }* M( A5 Gmake install
2 }# |! S6 h" s6 q
. Q0 P0 r, ?5 q0 @$ W0 A注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module
  l' n7 q7 Z  u, p' N+ H
  i. D* ]4 P# `


4 s9 _: G& L% U4 y
' m/ T$ g0 S; Q9 @  ^



! _9 L# v2 ]; l