首页|基于Nginx的动静分离架构部署方法研究

基于Nginx的动静分离架构部署方法研究

扫码查看
为了优化在高校局域网环境中使用华为2288H V5机架服务器部署业务应用时所采取的安全措施,解决因关闭非必要端口而限制了服务的灵活性问题,提出一种基于Nginx中间件作为反向代理服务的解决方案.首先,用户发起服务请求先经过Nginx;然后,Nginx根据不同的请求地址,通过反向代理转发至本地服务中其他端口进行对应业务逻辑的处理;最后,再将请求结果响应给用户.实验结果表明,服务器仅对外提供一个业务端口,实际业务端口对用户来说是隐藏的,提高了安全性,同时端口对应的还可以是KVM虚拟化服务,大大提高了服务器的资源利用率.
Research on deployment method of dynamic and static separation architecture based on Nginx
In order to optimize the security measures taken when using Huawei 2288H V5 rack server to deploy business ap-plications in the LAN environment of colleges and universities,and to solve the problem of limiting the flexibility of services due to the closure of non-essential ports,a solution based on Nginx middleware as a reverse proxy service is proposed.First of all,the user initiates the service request through Nginx;then,according to different request addresses,Nginx forwards it to other ports in the lo-cal service through reverse proxy to process the corresponding business logic.Finally,the results of the request response to the user.The experimental results show that the server only provides a service port,and the actual service port is hidden to the user,which improves the security.At the same time,the port can also correspond to the KVM virtualization service,which greatly im-proves the resource utilization of the server.

Nginxstatic and dynamic separationreverse proxyKVM

陈凌煜、董振华、杜武栋、邱恒、黄东明

展开 >

泉州职业技术大学联合创新产业学院,泉州 362268

Nginx 动静分离 反向代理 KVM

2024

现代计算机
中大控股

现代计算机

影响因子:0.292
ISSN:1007-1423
年,卷(期):2024.30(19)