nginx设置IP白名单详解程序员

http { 
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" ' 
                      '$status $body_bytes_sent "$http_referer" ' 
                      '"$http_user_agent" "$http_x_forwarded_for"'; 
 
    access_log  /var/log/nginx/access.log  main; 
 
    sendfile            on; 
    tcp_nopush          on; 
    tcp_nodelay         on; 
    keepalive_timeout   65; 
    types_hash_max_size 2048; 
 
    include             /etc/nginx/mime.types; 
    default_type        application/octet-stream; 
 
    geo $remote_addr $geo { 
        default 0; #0表示禁止访问 
        127.0.0.1 1; #1表示可以访问 
    } 
 
    # Load modular configuration files from the /etc/nginx/conf.d directory. 
    # See http://nginx.org/en/docs/ngx_core_module.html#include 
    # for more information. 
    include /etc/nginx/conf.d/*.conf; 
 
    server { 
        listen       80 default_server; 
        listen       [::]:80 default_server; 
        server_name  _; 
        root         /usr/share/nginx/html; 
 
        # Load configuration files for the default server block. 
        include /etc/nginx/default.d/*.conf; 
 
        location / { 
            # 如果不是白名单则 显示403 禁止访问 
            if ( $geo  = 0 ) { 
                return 403; 
            } 
            root   html; 
            index  index.html index.htm; 
        } 
 
        error_page 404 /404.html; 
            location = /40x.html { 
        } 
 
        error_page 500 502 503 504 /50x.html; 
            location = /50x.html { 
        } 
    } 
}