444狀態碼說明

444是Nginx中特殊的狀態碼，代表的含義是：Nginx關閉連接而不向客戶端發送響應，可以用來抵擋ddos攻擊

配置

#user  nobody;
#worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  3000000;
}

http {
	client_max_body_size 1024m; #上傳文件大小
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    geo $allowlist {  #allowlist默認獲取的是$remote_addr變量的值
        default 0;
        x.x.x.x 1;
        y.y.y.y 1;
    }
    server {
        listen       80;
        server_name  localhost;
	    location /test/getid {
            if ( $allowlist = 0 ) {
                return 444; 
            }
            proxy_set_header            Host $host;
            proxy_set_header            X-real-ip $remote_addr;
            proxy_set_header            X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://192.168.2.2:4333/getid;
        }
}