slb实例配置-j9九游会登录

slb实例配置

nginx配置

slb_instance_config/nginx.conf #nginx默认配置

#user  slb slb;
worker_processes auto;
#worker_cpu_affinity 0001 0010 0100 1000;
pid        logs/nginx.pid;
#####################################################################
### default: close the error log
error_log  /dev/null crit;
# nofile per worker around 20000-100000 is ok, eg, if have 8 worker, nginx will use no more than 8*worker_rlimit_nofile nofile, should make this result less than system nofile.
worker_rlimit_nofile 51200;
events {
    use epoll;
    # connections per worker, usually setup same or similar value as worker_rlimit_nofile.
    worker_connections 51200;
}
http {
    #####################################################################
    ### load basic lua script
    include 'lua/nginx.http.lua.conf';
    init_by_lua_file 'conf/lua/initial.lua';
    init_worker_by_lua_file 'conf/lua/initialworker.lua';
    log_by_lua_file 'conf/lua/monitor/logrequest.lua';
    #rewrite_by_lua_no_postpone on;
    #####################################################################
    uninitialized_variable_warn off;
    server_tokens off;
    autoindex off;
    port_in_redirect off;
    ssi off;
    proxy_hide_header x-powered-by;
    add_header x-xss-protection "1; mode=block";
    add_header x-frame-options sameorigin;
    add_header x-content-type-options  nosniff;
    add_header strict-transport-security "max-age=31536000; includesubdomains ";
    add_header content-security-policy "default-src 'self'";
    add_header cache-control "no-cache, no-store, must-revalidate";
    add_header pragma no-cache;
    add_header expires 0;
    client_header_timeout 60s;
    client_body_timeout 60s;
    keepalive_timeout 75s;
    send_timeout 60s;
    client_header_buffer_size 1k;
    large_client_header_buffers 4 8k;
    client_body_buffer_size 16k;
    client_max_body_size 1m;
    proxy_buffer_size 8k;
    proxy_buffers 8 8k;
    proxy_busy_buffers_size 16k;
    include mime.types;
    default_type text/html;
    #####################################################################
    ### gzip compress
    gzip on;
    gzip_http_version 1.1;
    gzip_comp_level 5;
    gzip_min_length 1k;
    gzip_disable "msie [1-6].";
    gzip_types
        text/plain text/css text/xml text/javascript
        application/json application/x-javascript application/xml application/xml rss application/xhtml xml;
    #####################################################################
    ### enabled the error page  process
    fastcgi_intercept_errors on;
    error_page 400 401 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 /4xx.html;
    error_page 500 501 502 503 504 505 /5xx.html;
    #####################################################################
    ### log format and switch.
    log_format  main  '$time_local|$request_time|$upstream_response_time|$uri'
        '|$status|$body_bytes_sent|$request_length|$bytes_sent|$http_user_agent|$http_host'
        '|$upstream_addr|$upstream_status|$scheme|$is_grey_server|$resp_status|$server_protocol';
    access_log logs/access.log  main buffer=5m flush=10s;
    log_format  bigdata  '$time_local|$server_addr|$upstream_addr|$is_grey_server|$uri'
        '|$upstream_status|$resp_status|$request_time|$upstream_response_time|$request_length|$bytes_sent|$connections_active|$target_all|$remote_addr'
        '|$http_x_forwarded_for|$request_method|$http_user_agent|$status|$http_referer|$server_protocol|$body_bytes_sent|$request_length|$http_host|$request'
        '|$server_port|-|$http_x_api_method||||||||||';
    access_log logs/access_for_big_data.log  bigdata buffer=5m flush=10s;
    #####################################################################
    ### load sub configure
    include vhosts/*.conf;
    include slb_conf/*.conf;
}

重写重定向配置

slb_instance_config/url_reset_config.yaml #重写重定向配置

- transfertype: rewritenormal               #必填，转发类型，rewritenormal代表生产重写
  source: /a1                               #必填，匹配路径
  target: /b1                               #必填，目标路径
- transfertype: rewritegrey                 #必填，转发类型，rewritegrey代表灰度重写
  source: /a2                               #必填，匹配路径
  target: /b2                               #必填，目标路径

内网段配置

slb_instance_config/inner_segments_config.yaml #内网段配置

- segment: 10.0.0.0/8               
- segment: 127.0.0.1/32
- segment: 172.16.0.0/12
- segment: 192.168.0.0/16
- segment: 100.125.0.0/16

降级配置

黑白名单配置

流控配置

其他配置

slb_instance_config/conf_lua_config.yaml #其他配置

addgreyflag: 'off'                                          #非必填，灰度标记开关，取值为off或on
greytestswitch: 'off'                                       #非必填，灰度测试开关，取值为off或on
greytestserviceid: 123456                                   #非必填，灰度测试服务id
isbypassongreydown: 'off'                                   #非必填，宕机时路由到生产集群开关，取值为off或on
areagreygetipfromleft: 'off'                                #非必填，地域灰度ip从左取值开关 ，取值为off或on
getiptype: 1                                                #非必填，取ip方式，取值为1或2
statisticsparams:                                           #非必填，统计日志参数
greytestqpslimit： 1000                                     #非必填，灰度测试每秒转发量限制，取值为1到1000
manyrequestalarmthreshold: 1000                             #非必填，请求数量告警 
successratealarmabsthreshold: 90                            #非必填，成功率告警阈值，取值为0到100
successratealarmoffsetthreshold: 90                         #非必填，成功率下降告警阈值，取值为0到100
healthcheckalarmservercountthreshold: 1000                  #非必填，健康检查告警阈值
healthcheckalarmdurationthreshold: 1000                     #非必填，健康告警持续时间阈值
concurrentflowcontrolalarmthreshold: 1000                   #非必填，并发连接流控告警阈值
serviceflowcontrolalarmthreshold: 1000                      #非必填，服务级流控告警阈值
multiparamflowcontrolalarmthreshold: 1000                   #非必填，多参数流控告警阈值
singleparamflowcontrolalarmthreshold: 1000                  #非必填，自定义参数流控告警阈值
quotaflowcontrolalarmthreshold: 1000                        #非必填，配额流控告警阈值
manyrequestprealarmthreshold: 1000                          #非必填，请求数量预告警

自定义lua配置

slb_instance_config/slb_100_global_init_iac3.lua #slb_100_global_init_iac3.lua默认配置

--the custom point slb_100_global_init, running when global init.
--will be triggered in exec function, so pls make sure there is a exec function in global_init
local global_init = {};
function global_init.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in global_init")
end
return global_init

slb_instance_config/slb_200_worker_init_iac3.lua #slb_200_worker_init_iac3.lua默认配置

--the custom point slb_200_worker_init, running when worker init.
--will be triggered in exec function, so pls make sure there is a exec function in worker_init
local worker_init = {};
function worker_init.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in worker init");
end
return worker_init

slb_instance_config/slb_300_pre_flowcontrol_iac3.lua #slb_300_pre_flowcontrol_iac3.lua默认配置

--the custom point slb_300_pre_flowcontrol, running before flowcontrol and blacklist.
--will be triggered in exec function, so pls make sure there is a exec function in pre_flowcontrol
local pre_flowcontrol = {};
function pre_flowcontrol.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in pre flowcontrol")
end
return pre_flowcontrol

slb_instance_config/slb_400_on_flowcontroled_iac3.lua #slb_400_on_flowcontroled_iac3.lua默认配置

--the custom point slb_400_on_flowcontrolled, running when request is flowcontrolled or blocked due to blacklist.
--will be triggered in exec function, so pls make sure there is a exec function in on_flowcontroled
local on_flowcontroled = {};
function on_flowcontroled.exec(gen_param)
    --eg:ngx.log(ngx.err,"the flowcontrol type is:",gen_param.control_type)
end
return on_flowcontroled

slb_instance_config/slb_500_pre_grey_iac3.lua #slb_500_pre_grey_iac3.lua默认配置

--the custom point slb_500_pre_grey, running before greyrule judge.
--will be triggered in exec function, so pls make sure there is a exec function in pre_grey
local pre_grey = {};
function pre_grey.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in pre grey");
end
return pre_grey

slb_instance_config/slb_600_post_grey_iac3.lua #slb_600_post_grey_iac3.lua默认配置

--the custom point slb_600_post_grey, running after get result of greyrule.
--will be triggered in exec function, so pls make sure there is a exec function in post_grey
local post_grey = {};
function post_grey.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in post grey");
end
return post_grey

slb_instance_config/slb_700_post_route_iac3.lua #slb_700_post_route_iac3.lua默认配置

--the custom point slb_700_post_route, running after get result of routerule.
--will be triggered in exec function, so pls make sure there is a exec function in post_route
local post_route = {};
function post_route.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in post route");
end
return post_route

slb_instance_config/slb_750_resp_header_filter_iac3.lua #slb_750_resp_header_filter_iac3.lua默认配置

--the custom point slb_750_resp_header_filter, running during header filter.
--will be triggered in exec function, so pls make sure there is a exec function in header_filter
local header_filter = {};
function header_filter.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in header filter");
end
return header_filter

slb_instance_config/slb_800_resp_body_filter_iac3.lua #slb_800_resp_body_filter_iac3.lua默认配置

--the custom point slb_800_resp_body_filter, running during body filter.
--will be triggered in exec function, so pls make sure there is a exec function in body_filter
local body_filter = {};
function body_filter.exec(gen_param)
    --eg:ngx.log(ngx.err,"i am in body filter");
end
return body_filter