Nginx configuration
worker_processes auto; | |
events { | |
use epoll; | |
worker_connections 1024; | |
multi_accept on; | |
} | |
http { | |
limit_req_zone $binary_remote_addr zone=ddos:10m rate=50r/s; | |
server { | |
location / { | |
limit_req zone=ddos burst=20 nodelay; | |
} | |
} | |
client_body_buffer_size 10K; | |
client_header_buffer_size 1k; | |
client_max_body_size 8m; | |
large_client_header_buffers 2 1k; | |
server_names_hash_bucket_size 64; | |
sendfile on; | |
# tcp_nopush on; | |
tcp_nodelay on; | |
proxy_buffering off; | |
keepalive_timeout 15; | |
keepalive_requests 200; | |
reset_timedout_connection on; | |
client_body_timeout 10; | |
send_timeout 5; | |
server_tokens off; | |
types_hash_max_size 2048; | |
include /etc/nginx/mime.types; | |
default_type application/octet-stream; | |
access_log off; | |
# access_log /www/logs/nginx.log; | |
error_log /var/log/nginx/error.log; | |
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; | |
ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM; | |
ssl_prefer_server_ciphers on; | |
ssl_session_cache shared:SSL:10m; | |
ssl_session_timeout 10m; | |
proxy_http_version 1.1; | |
include /www/nginx/*.conf; | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment