sudo yum -y install epel-release
sudo yum -y update
Download repository
Windows 安裝 nginx
a. 下載
GCA 憑證處理紀錄
a. GRCA1 自簽憑證 GRCA 自發憑證(GRCA1 簽 GRCA1.5) GRCA 自發憑證(GRCA1.5 簽 GRCA2) GCA2 自簽憑證
| # version 2025 august 18 | |
| ssl_certificate /etc/letsencrypt/live/my.jult.net/fullchain.pem; | |
| ssl_certificate_key /etc/letsencrypt/live/my.jult.net/privkey.pem; | |
| ssl_trusted_certificate /etc/letsencrypt/live/my.jult.net/chain.pem; | |
| #ssl_protocols TLSv1.2 TLSv1.3; | |
| ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; | |
| # generated using:# openssl dhparam -dsaparam -out /etc/ssl/dh4096.pem 4096 | |
| ssl_dhparam /etc/ssl/dh4096.pem; |
For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.
Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.
You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.