修改nginx的http响应头server字段
修改源码 src/http/ngx_http_header_filter_module.c
修改前:
static u_char ngx_http_server_string[] = “Server: nginx” CRLF;
static u_char ngx_http_server_full_string[] = “Server: ” NGINX_VER CRLF;
static u_char ngx_http_server_build_string[] = “Server: ” NGINX_VER CRLF CRLF;
修改后:
static u_char ngx_http_server_string[] = “Server: X-Web” CRLF;
static u_char ngx_http_server_full_string[] = “Server: X-Web” CRLF;
static u_char ngx_http_server_build_string[] = “Server: X-Web” CRLF;
nginx安装https模块时,with-openssl 为openssl得源码路径,不是安装之后的路径
./configure –prefix=/opt/local/nginx –sbin-path=/opt/local/nginx/sbin/nginx –pid-path=/opt/logs/nginx/nginx.pid –error-log-path=/opt/logs/nginx/logs/error.log –http-log-path=/opt/logs/nginx/logs/access.log –with-http_v2_module –with-http_ssl_module –with-http_sub_module –with-http_stub_status_module –with-http_gzip_static_module –with-http_gunzip_module –with-stream_ssl_module –with-stream_realip_module –with-stream_ssl_preread_module –with-http_realip_module –with-openssl=/opt/soft/openssl-3.0.3
其中http_realip_module 为真实ip模块,http_gzip_static_module 为压缩模块
真实ip模块配置如下:
real_ip_header X-Forwarded-For;
set_real_ip_from x.x.x.x;
其中x.x.x.x 为来源ip,比如waf的ip
原创文章,作者:奋斗,如若转载,请注明出处:https://blog.ytso.com/269408.html