[Nginx] Nginx防止流量攻击的配置详解

#统一在http域中进行配置
#限制请求
limit_req_zone $binary_remote_addr $uri zone=api_read:20m rate=50r/s;
#按ip配置一个连接 zone
limit_conn_zone $binary_remote_addr zone=perip_conn:10m;
#按server配置一个连接 zone
limit_conn_zone $server_name zone=perserver_conn:100m;
server {
  listen  80;
  server_name report.52itstyle.com;
  index login.jsp;
  location / {
  #请求限流排队通过 burst默认是0
  limit_req zone=api_read burst=5;
  #连接数限制,每个IP并发请求为2
  limit_conn perip_conn 2;
  #服务所限制的连接数(即限制了该server并发连接数量)
  limit_conn perserver_conn 1000;
  #连接限速
  limit_rate 100k;
  proxy_pass  http://report;
  }
}
upstream report {
  fair;
  server 172.16.1.120:8882 weight=1 max_fails=2 fail_timeout=30s;
  server 172.16.1.120:8881 weight=1 max_fails=2 fail_timeout=30s;
}

503 Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later. Sorry for the inconvenience.
Please report this message and include the following information to us.
Thank you very much!

error_page 500 502 503 504 /50x.html;
location = /50x.html {
 root html;#自定义50X错误
}

ngx_http_limit_conn_module (static)
ngx_http_limit_req_module (static)