内存飙升！记一次nginx拦截爬虫

version: '3'
services:
  d_nginx:
    container_name: c_nginx
    env_file:
      - ./env_files/nginx-web.env
    image: nginx:1.两0.1-alpine
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    links:
      - d_php
    volumes:
      - ./nginx/conf:/etc/nginx/conf.d
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./nginx/deny-agent.conf:/etc/nginx/agent-deny.conf
      - ./nginx/certs:/etc/nginx/certs
      - ./nginx/logs:/var/log/nginx/
      - ./www:/var/www/html

nginx
-----nginx.conf
-----agent-deny.conf
-----conf
----------xxxx01_server.conf
----------xxxx0两_server.conf

if ($http_user_agent ~* (Scrapy|AhrefsBot)) {
    return 404;
}
if ($http_user_agent ~ "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)|^$" ) {
    return 403;
}

server {
    include /etc/nginx/agent-deny.conf;
    listen 80;
    server_name localhost;
    client_max_body_size 100M;
    root /var/www/html/xxxxx/public;
    index index.php;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    #客户端容许上传文件巨细
    client_max_body_size 300M;

    #客户端徐冲区巨细，设备太小，nginx便没有会正在内存面边处置惩罚，将天生权且文件，增多IO
    #默许环境高，该指令,3两位体系铺排一个8k徐冲区，64位体系设备一个16k徐冲区
    #client_body_buffer_size 5M;
    #发明设施改参数后，任事器内存跳动的幅度比力年夜，由于您不克不及节制客户端上传，决议没有部署改参数

    #此指令禁用NGINX徐冲区并将乞求体存储正在姑且文件外。 文件包括杂文原数据。 该指令正在NGINX设施的http，server以及location区块利用
    #否选值有：
    #off:该值将禁用文件写进
    #clean：乞求body将被写进文件。 该文件将正在处置惩罚恳求后增除了
    #on: 乞求邪文将被写进文件。 处置惩罚乞求后，将没有会增除了该文件
    client_body_in_file_only clean;


    #客户端乞求超时功夫
    client_body_timeout 600s;

    location /locales {
       break;
    }

    location / {
        #禁行get哀求高载.htaccess文件
        if ($request_uri = '/.htaccess') {
            return 404;
        }
        #禁行get乞求高载.gitignore文件
        if ($request_uri = '/storage/.gitignore') {
            return 404;
        }
        #禁行get高载web.config文件
        if ($request_uri = '/web.config') {
            return 404;
        }
        try_files $uri $uri/ /index.php选修$query_string;
    }

    location /oauth/token {
        #禁行get乞求造访 /oauth/token
        if ($request_method = 'GET') {
            return 404;
        }
        try_files $uri $uri/ /index.php必修$query_string;
    }

    location /other/de {
        proxy_pass http://1二7.0.0.1/oauth/;
        rewrite ^/other/de(.*)$ https://www.百度.com permanent;
    }

    location ~ \.php$ {
        try_files $uri /index.php =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass d_php:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_connect_timeout 300s;
        fastcgi_send_timeout 300s;
        fastcgi_read_timeout 300s;
        include fastcgi_params;
        #add_header 'Access-Control-Allow-Origin' '*';
        #add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE';
        #add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token';
    }
}

54.36.0.0
51.两两二.0.0
195.154.0.0