Table of Contents
ACL configuration
Example Demonstration
URL path matching
Summary
Home Operation and Maintenance Nginx ACL configuration based on URL matching in Nginx reverse proxy

ACL configuration based on URL matching in Nginx reverse proxy

Jun 11, 2023 am 09:43 AM
nginx reverse proxy acl configuration

Nginx is a high-performance open source web server and reverse proxy server. Its scalability and powerful configuration options make it one of the indispensable components in web development. Nginx's reverse proxy function can send requests from the client to multiple back-end servers to achieve load balancing and high availability.

In a reverse proxy, since the backend server may handle multiple services, it needs to be matched according to the path of the request URL and forward the request to the correct backend server. Nginx provides ACL (Access Control List) configuration based on URL path, which can route requests to the corresponding backend server according to the specified URL rules.

This article will introduce how to implement ACL configuration in Nginx reverse proxy based on URL path matching.

ACL configuration

ACL is a mechanism used to control access permissions. It can determine whether a request is allowed to access based on certain rules. In Nginx, you can use the location directive to configure ACL rules. locationThe instruction syntax is as follows:

location [ = | ~ | ~* | ^~ ] uri { ... }
Copy after login

The uri parameter can be an ordinary URI path or a regular expression. When using URI paths as ACL rules, you can use the following matching characters:

  • =: Exact match, only the URI path is exactly the same as the value in the location directive. success.
  • ~: Regular expression matching, case sensitive.
  • ~*: Regular expression matching, case-insensitive.
  • ^~: Prefix matching, if the URI path starts with the value in the location directive, the match is successful.

Example Demonstration

Assume that there are three services that need to be load balanced in the Nginx reverse proxy. Their URI paths are:

  • / app1
  • /app2
  • /app3

#We need to forward the request to three backend servers, their IP addresses are:

  • 192.168.0.1
  • 192.168.0.2
  • 192.168.0.3

We can use the following Nginx configuration file to implement the reverse proxy function:

http {
    upstream myapp1 {
        server 192.168.0.1;
    }

    upstream myapp2 {
        server 192.168.0.2;
    }

    upstream myapp3 {
        server 192.168.0.3;
    }

    server {
        listen 80;
        server_name myserver.com;

        location /app1 {
            proxy_pass http://myapp1;
        }

        location /app2 {
            proxy_pass http://myapp2;
        }

        location /app3 {
            proxy_pass http://myapp3;
        }
    }
}
Copy after login

In the above configuration file, we use the upstream directive to define three backend servers, and then use the location directive in the server block respectively Three reverse proxy rules are configured. When the request URI path is /app1, /app2, /app3, Nginx will forward the request to the corresponding back-end server to achieve load balancing and high availability. .

URL path matching

If our URI path is relatively complex and needs to be matched according to certain rules, regular expressions can be used to achieve URL path matching.

Assume that there are two services that need to be load balanced in the Nginx reverse proxy. Their URI paths are:

  • /api/v1/app1
  • /api/v2/app2

We need to forward the request to two backend servers, their IP addresses are:

  • 192.168.0.1
  • 192.168.0.2

We can use the following Nginx configuration file to implement ACL configuration based on URL path:

http {
    upstream myapp1 {
        server 192.168.0.1;
    }

    upstream myapp2 {
        server 192.168.0.2;
    }

    server {
        listen 80;
        server_name myserver.com;

        location ~ ^/api/v1/app1 {
            proxy_pass http://myapp1;
        }

        location ~ ^/api/v2/app2 {
            proxy_pass http://myapp2;
        }
    }
}
Copy after login

In the above configuration file, we use location The regular expression matching function of the directive matches the request path to the corresponding backend server.

  • ~: Regular expression matching, case sensitive.
  • ^: Regular expression start symbol, "^/api" means that the request path starts with /api.
  • /v1/app1 indicates that the request path ends with /v1/app1.

In this way, we can match based on complex URL paths to achieve more detailed reverse proxy control and forwarding functions.

Summary

This article introduces the ACL configuration method based on URL matching in Nginx reverse proxy. Through the location directive and the URI path or regular expression, the request can be realized Path matching and forwarding. This ACL configuration method can achieve load balancing and high availability for multiple backend servers and meet reverse proxy requirements in different scenarios.

The above is the detailed content of ACL configuration based on URL matching in Nginx reverse proxy. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

How to check nginx version How to check nginx version Apr 14, 2025 am 11:57 AM

The methods that can query the Nginx version are: use the nginx -v command; view the version directive in the nginx.conf file; open the Nginx error page and view the page title.

How to configure cloud server domain name in nginx How to configure cloud server domain name in nginx Apr 14, 2025 pm 12:18 PM

How to configure an Nginx domain name on a cloud server: Create an A record pointing to the public IP address of the cloud server. Add virtual host blocks in the Nginx configuration file, specifying the listening port, domain name, and website root directory. Restart Nginx to apply the changes. Access the domain name test configuration. Other notes: Install the SSL certificate to enable HTTPS, ensure that the firewall allows port 80 traffic, and wait for DNS resolution to take effect.

How to start nginx server How to start nginx server Apr 14, 2025 pm 12:27 PM

Starting an Nginx server requires different steps according to different operating systems: Linux/Unix system: Install the Nginx package (for example, using apt-get or yum). Use systemctl to start an Nginx service (for example, sudo systemctl start nginx). Windows system: Download and install Windows binary files. Start Nginx using the nginx.exe executable (for example, nginx.exe -c conf\nginx.conf). No matter which operating system you use, you can access the server IP

How to configure nginx in Windows How to configure nginx in Windows Apr 14, 2025 pm 12:57 PM

How to configure Nginx in Windows? Install Nginx and create a virtual host configuration. Modify the main configuration file and include the virtual host configuration. Start or reload Nginx. Test the configuration and view the website. Selectively enable SSL and configure SSL certificates. Selectively set the firewall to allow port 80 and 443 traffic.

How to check the name of the docker container How to check the name of the docker container Apr 15, 2025 pm 12:21 PM

You can query the Docker container name by following the steps: List all containers (docker ps). Filter the container list (using the grep command). Gets the container name (located in the "NAMES" column).

How to check whether nginx is started How to check whether nginx is started Apr 14, 2025 pm 01:03 PM

How to confirm whether Nginx is started: 1. Use the command line: systemctl status nginx (Linux/Unix), netstat -ano | findstr 80 (Windows); 2. Check whether port 80 is open; 3. Check the Nginx startup message in the system log; 4. Use third-party tools, such as Nagios, Zabbix, and Icinga.

How to start containers by docker How to start containers by docker Apr 15, 2025 pm 12:27 PM

Docker container startup steps: Pull the container image: Run "docker pull [mirror name]". Create a container: Use "docker create [options] [mirror name] [commands and parameters]". Start the container: Execute "docker start [Container name or ID]". Check container status: Verify that the container is running with "docker ps".

How to run nginx apache How to run nginx apache Apr 14, 2025 pm 12:33 PM

To get Nginx to run Apache, you need to: 1. Install Nginx and Apache; 2. Configure the Nginx agent; 3. Start Nginx and Apache; 4. Test the configuration to ensure that you can see Apache content after accessing the domain name. In addition, you need to pay attention to other matters such as port number matching, virtual host configuration, and SSL/TLS settings.

See all articles