现代计算机2024,Vol.30Issue(19) :110-113.DOI:10.3969/j.issn.1007-1423.2024.19.023

基于Nginx的动静分离架构部署方法研究

Research on deployment method of dynamic and static separation architecture based on Nginx

陈凌煜 董振华 杜武栋 邱恒 黄东明
现代计算机2024,Vol.30Issue(19) :110-113.DOI:10.3969/j.issn.1007-1423.2024.19.023

基于Nginx的动静分离架构部署方法研究

Research on deployment method of dynamic and static separation architecture based on Nginx

陈凌煜 1董振华 1杜武栋 1邱恒 1黄东明1
扫码查看

作者信息

  • 1. 泉州职业技术大学联合创新产业学院,泉州 362268
  • 折叠

摘要

为了优化在高校局域网环境中使用华为2288H V5机架服务器部署业务应用时所采取的安全措施,解决因关闭非必要端口而限制了服务的灵活性问题,提出一种基于Nginx中间件作为反向代理服务的解决方案.首先,用户发起服务请求先经过Nginx;然后,Nginx根据不同的请求地址,通过反向代理转发至本地服务中其他端口进行对应业务逻辑的处理;最后,再将请求结果响应给用户.实验结果表明,服务器仅对外提供一个业务端口,实际业务端口对用户来说是隐藏的,提高了安全性,同时端口对应的还可以是KVM虚拟化服务,大大提高了服务器的资源利用率.

Abstract

In order to optimize the security measures taken when using Huawei 2288H V5 rack server to deploy business ap-plications in the LAN environment of colleges and universities,and to solve the problem of limiting the flexibility of services due to the closure of non-essential ports,a solution based on Nginx middleware as a reverse proxy service is proposed.First of all,the user initiates the service request through Nginx;then,according to different request addresses,Nginx forwards it to other ports in the lo-cal service through reverse proxy to process the corresponding business logic.Finally,the results of the request response to the user.The experimental results show that the server only provides a service port,and the actual service port is hidden to the user,which improves the security.At the same time,the port can also correspond to the KVM virtualization service,which greatly im-proves the resource utilization of the server.

关键词

Nginx/动静分离/反向代理/KVM

Key words

Nginx/static and dynamic separation/reverse proxy/KVM

引用本文复制引用

出版年

2024
现代计算机
中大控股

现代计算机

影响因子:0.292
ISSN:1007-1423
段落导航相关论文