nginx-1.13.6+replace-filter-nginx-module+modsecurity编译安装手迹

admin

准备文件：
6 `) K( v7 B) u- b- rwget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
tar xvzf openssl-1.1.0f.tar.gz
5 n$ O# D2 _- _: i7 P4 Y% E) m8 ]( r' vwget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.gz
tar xvzf pcre-8.41.tar.gz

1 N/ J) O# X, [& Lwget http://nginx.org/download/nginx-1.13.6.tar.gz
. p, N* ?* H! w/ d" x% M- Y1 S( atart xvzf nginx-1.13.6.tar.gz
" Q/ x4 W' A! p( a- d6 q; k
: J! U% S6 E  I, o( {" Z! [1 Cwget https://github.com/openresty/sregex/archive/master.zip
mv master.zip replace-filter-nginx-module-master.zip
unzip replace-filter-nginx-module-master.zip

安装sregex
[replace-filter-nginx-module-master关键词替换模块需要这个东西，如果不喜欢可以用ngx_http_substitutions_filter_module这个关键字替换模块]
' Q6 K, |9 L* uwget https://github.com/openresty/sregex/archive/master.zip
$ L" z" n4 v0 c$ S: k' ^5 pmv master.zip sregex.zip
unzip sregex.zip
cd sregex
' {: k0 T8 s# u- Emake && make installln -s /usr/lib/libsregex.so.0  /usr/local/lib/libsregex.so.0.0.1 #按实际情况调整
ldconfig
/ t+ w. f9 o( w& j5 |- h7 s
安装modsecurity
『依赖的包：pcre httpd-devel libxml2 apr 视情况安装。yum install httpd-devel apr apr-util-devel apr-devel  pcre pcre-devel  libxml2 libxml2-devel）』
git clone https://github.com/SpiderLabs/ModSecurity.git mod_security
: D! l, a; r: V4 e5 S5 c$ [cd mod_security
+ x( w( ?9 X3 i' y3 R: G./autogen.sh  
: Y) x5 j* j: p, ~./configure --enable-standalone-module
$ p+ X* D1 h; Hmake


$ L3 K! j5 v) a0 T6 ~安装nginx
- Z5 y" y* i. X3 D# e$ t! d2 e3 ?: [2 scd nginx-1.13.6

: J2 C& u# }) s" |; H. w

[Bash shell] 纯文本查看 复制代码

./configure \
--user=www \
--group=www \
--prefix=/www/webserver/nginx-1.13.6 \
--sbin-path=/www/webserver/nginx-1.13.6/sbin/nginx \
--pid-path=/www/webserver/nginx-1.13.6/logs/nginx.pid \
--conf-path=/www/webserver/nginx-1.13.6/conf/nginx.conf \
--error-log-path=/www/webserver/nginx-1.13.6/logs/error.log \
--http-log-path=/www/webserver/nginx-1.13.6/logs/access.log \
--http-client-body-temp-path=/www/webserver/nginx-1.13.6/temp/client \
--http-proxy-temp-path=/www/webserver/nginx-1.13.6/temp/proxy \
--http-fastcgi-temp-path=/www/webserver/nginx-1.13.6/temp/fcgi \
--http-scgi-temp-path=/www/webserver/nginx-1.13.6/temp/scgi \
--http-uwsgi-temp-path=/www/webserver/nginx-1.13.6/temp/uwsgi \
--with-http_flv_module \
--with-http_stub_status_module \
--with-http_realip_module \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_gzip_static_module \
--with-pcre=/root/pcre-8.41 \
--with-http_sub_module \
--add-module=/root/replace-filter-nginx-module-master \
--add-module=/root/mod_security/nginx/modsecurity \
--with-openssl=/root/openssl-1.1.0f

make
make install
2 R$ Z. y. ]; [  E( s$ t$ k
9 [7 Q' A8 y% X6 a* {9 Y( b注：--with-ipv6 已经被移除默认支持ipv6，   --with-http_spdy 已经被移除合并到--with-http_v2_module

* w1 D: G& P" i9 s. R8 T

. M1 r- u  k" ]2 q

  B6 S0 G/ k6 T4 z, k. Z2 G
5 J; s) K+ }. ]9 d& `


4 {) }4 s( {* \* w/ B$ h! f