nginx之rewrite模块

指令语法：rewrite regex replacement[flag];

rewrite ^/(.*) http://www.baidu.com/ permanent;     # 匹配成功后跳转到百度，执行永久301跳转

rewrite ^/users/(.*)$ /show?user=$1? last;

rewrite ^/users/(.*)$ /show?user=$1 last;

server {
    ...
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png last;
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png  last;
    return  403; #没有匹配上，那就返回403
    ...
}

location /download/ {
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png break;
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/mp3/$2.png  break;
    return  403;
}

基本语法：if (condition) { ... }
上下文：server, location

基本语法：return code [text];或者return code URL;或者return URL;
上下文：server, location, if

Stops processing and returns the specified code to a client. The non-standard code 444 closes a connection without sending a response header.

Starting from version 0.8.42, it is possible to specify either a redirect URL (for codes 301, 302, 303, 307, and 308) or the response body text (for other codes). A response body text and redirect URL can contain variables. As a special case, a redirect URL can be specified as a URI local to this server, in which case the full redirect URL is formed according to the request scheme ($scheme) and the server_name_in_redirect and port_in_redirect directives.

In addition, a URL for temporary redirect with the code 302 can be specified as the sole parameter. Such a parameter should start with the “http://”, “https://”, or “$scheme” string. A URL can contain variables.

Only the following codes could be returned before version 0.7.51: 204, 400, 402 — 406, 408, 410, 411, 413, 416, and 500 — 504.
The code 307 was not treated as a redirect until versions 1.1.16 and 1.0.13.
The code 308 was not treated as a redirect until version 1.13.0.

基本语法：set $variable value;
上下文：server, location, if

set $var = $http_x_forwarded_for;

基本语法：rewrite_log on | off;
上下文：http, server, location, if

server {
    ...
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png last;
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png  last;
    return  403; #没有匹配上，那就返回403
    ...
}

location /download/ {
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/img/$2.png break;
    rewrite ^(/download/.*)/show/(.*)\..*$ $1/mp3/$2.png  break;
    return  403;
}

if( !-e $request_filename )
{
rewrite ^/(.*)$ index.php last;
}

rewrite ^/(\d+)/(.+)/ /$2?id=$1 last;

if( $http_user_agent ~ MSIE)
{
rewrite ^(.*)$ /ie/$1 break;
}

location ~ ^/(cron|templates)/
{
deny all;
break;
}

location ~ .*\.(sh|flv|mp3)$
{
return 403;
}

location ~ ^/data
{
deny all;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
    expires 30d;
}
location ~ .*\.(js|css)$
{
    expires 1h;
}

location ^~ /html/scripts/loadhead_1.js {
    access_log off;
    root /opt/lampp/htdocs/web;
    expires 600;
    break;
}

location ~(favicon.ico) {
log_not_found off;
expires 99d;
break;
}
location ~(robots.txt) {
log_not_found off;
expires 7d;
break;
}

location ~* ^.+\.(jpg|jpeg|gif|png|swf|rar|zip|css|js)$ {
    valid_referers none blocked *.nixi8.com nixi8.com localhost 192.168.1.208; #定义none(空,直接访问),blocked(被防火墙标记过的来路),
    nixi8.com的二级域名和一级域名,localhost,192.168.1.208
    if ($invalid_referer) { # 如果不是上面定义的其中一个
        rewrite ^/ http://www.nixi8.com/none.gif;  # 就重写到一张gif图片上;
        return 412;
         break;
    }

    access_log   off;  # 关闭日志,降低服务器的损耗
    root /opt/lampp/htdocs/web; 
    expires 3d; //所有文件3天缓存
    break;
}

if (-d $request_filename){
    rewrite ^/(.*)([^/])$ http://$host/$1$2/ permanent;
}
目录自动加/:用([^/])匹配最后一个非'/'的字符,然后自己强行再添加一个'/'($2变量后的那个）

root /opt/htdocs/www;
allow 208.97.167.194; 
allow 222.33.1.2; 
allow 231.152.49.4;
deny all;
auth_basic “C1G_ADMIN”;
auth_basic_user_file htpasswd;

rewrite ^/job-([0-9]+)-([0-9]+)-([0-9]+)\.html$ /job/$1/$2/jobshow_$3.html last;

如/shanghaijob/ 指向 /area/shanghai/
如果你将last改成permanent，那么浏览器地址栏显是/location/shanghai/
rewrite ^/([0-9a-z]+)job/(.*)$ /area/$1/$2last;
上面例子有个问题是访问/shanghai时将不会匹配
rewrite ^/([0-9a-z]+)job$ /area/$1/ last;
rewrite ^/([0-9a-z]+)job/(.*)$ /area/$1/$2last;
这样/shanghai 也可以访问了，但页面中的相对链接无法使用，
如./list_1.html真实地址是/area/shanghia/list_1.html会变成/list_1.html,导至无法访问。
那我加上自动跳转也是不行咯
(-d $request_filename)它有个条件是必需为真实目录，而我的rewrite不是的，所以没有效果
if (-d $request_filename){
rewrite ^/(.*)([^/])$ http://$host/$1$2/permanent;
}
知道原因后就好办了，让我手动跳转吧
rewrite ^/([0-9a-z]+)job$ /$1job/permanent;
rewrite ^/([0-9a-z]+)job/(.*)$ /area/$1/$2last;

server
{
listen 80;
server_name jump.linuxidc.com;
index index.html index.htm index.php;
root /opt/lampp/htdocs/www;
rewrite ^/ http://www.linuxidc.com/;
access_log off;
}

server_name www.linuxidc.comwww.linuxidc.net;
index index.html index.htm index.php;
root /opt/lampp/htdocs;
if ($host ~ "linuxidc\.net") {
rewrite ^(.*) http://www.linuxidc.com$1permanent;
}

if ($slow) {
    limit_rate 10k;
    break;
}

if ($http_user_agent ~ MSIE) {
    rewrite ^(.*)$ /msie/$1 break;
}

if ($http_cookie ~* "id=([^;]+)(?:;|$)") {
    set $id $1;
}

if ($request_method = POST) {
    return 405;
}

if ($slow) {
    limit_rate 10k;
}

if ($invalid_referer) {
    return 403;
}

if ( $query_string ~* ".*[;'<>].*" ) {
    return 404;
}

location / {
    if (!-e $request_filename){
        rewrite ^(.*)$ /app.php break;
    }
}