L112
是基于TCP
POST_ACCEPT阶段 在建立连接后所做的事情
PREACCESS阶段 limit_conn 限流 与HTTP类似
ACCESS阶段 类似HTTP模块用于控制访问权限
SSL阶段 ssl请求
PREREAD阶段 ssl_preread 从头部取信息
CONTENT阶段 return,stream_proxy
LOG阶段 类似http log阶段
| Syntax: | stream { ... } 提供指定流服务器指令的配置文件上下文 |
|---|---|
| Default: | — |
| Context: | main |
| Syntax: | server { ... } |
|---|---|
| Default: | — |
| Context: | stream |
| Syntax: | listen |
|---|---|
| Default: | — |
| Context: | server |
模块 ngx_stream_return_module
| Syntax: | return |
|---|---|
| Default: | — |
| Context: | server |
需要编译进Nginx
http://nginx.org/en/docs/stream/ngx_stream_core_module.html
可以用 telnet 192.168.1.1 10004 方式查看数据
worker_processes auto;
error_log /var/log/nginx/error.log info;
events {
worker_connections ;
}
stream {
upstream backend {
hash $remote_addr consistent;
server backend1.example.com: weight=;
server 127.0.0.1: max_fails= fail_timeout=30s;
server unix:/tmp/backend3;
}
upstream dns {
server 192.168.0.1:;
server dns.example.com:;
}
server {
listen ;
proxy_connect_timeout 1s;
proxy_timeout 3s;
proxy_pass backend;
}
server {
listen 127.0.0.1: udp reuseport;
proxy_timeout 20s;
proxy_pass dns;
}
server {
listen [::]:;
proxy_pass unix:/tmp/stream.socket;
}
}
代码示列
stream {
log_format basic '$remote_addr [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time';
error_log logs/stream_error.log debug;
access_log logs/stream_access.log basic;
server {
listen proxy_protocol;
return '10002 server get ip: $remote_addr!\n';
}
server {
listen proxy_protocol;
return '10003 server get ip: $remote_addr!\n';
}
server {
#listen ;
listen proxy_protocol;
set_real_ip_from 127.0.0.1;
allow 202.112.144.236;
deny all;
return '10004 vars:
bytes_received: $bytes_received
bytes_sent: $bytes_sent
proxy_protocol_addr: $proxy_protocol_addr
proxy_protocol_port: $proxy_protocol_port
remote_addr: $remote_addr
remote_port: $remote_port
realip_remote_addr: $realip_remote_addr
realip_remote_port: $realip_remote_port
server_addr: $server_addr
server_port: $server_port
session_time: $session_time
status: $status
protocol: $protocol
';
}
}