http_referer 白名单

Posted 2020-10-06 运维工匠实战(如果发现有错误请大家把正确的方法发送给我，方便

    valid_referers none blocked *.ttlsa.com server_names ~\.image\. ~\.baidu\.;
    if ($invalid_referer) {
        return 403;


例如:
server {
        listen 80;
        server_name test.image.xxxxxxx.com;
        location / {
                proxy_pass http://test.image_pools;
                proxy_set_header Host           $host;
                proxy_set_header X-Real-IP      $remote_addr;
                proxy_set_header X-Forwoarded-For       $proxy_add_x_forwarded_for;
                }
    valid_referers none blocked *.ttlsa.com server_names ~\.image\. ~\.baidu\.;
    if ($invalid_referer) {
        return 403;
    }
 }
配置 到*.ttlsa.com的referer通过,如果有*.image.*,*.baidu.*的通过