nginx 无限循环301

txjcv

1. server
   
2. {
   
3. listen 80;
   
4. listen [::]:80;
   
5. server_name test.com ;
   
6. index index.html index.htm index.php default.html default.htm default.php;
   
7. root/home/wwwroot/test.com;
   
8. #include rewrite/none.conf;
   
9. #error_page 404 /404.html;
   
10. 
    
11. # Deny access to PHP files in specific directory
    
12. #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    
13. 
    
14. include enable-php.conf;
    
15. 
    
16. location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    
17. {
    
18. expires 30d;
    
19. }
    
20. 
    
21. location ~ .*\.(js|css)?$
    
22. {
    
23. expires 12h;
    
24. }
    
25. 
    
26. location ~ /.well-known {
    
27. allow all;
    
28. }
    
29. 
    
30. location ~ /\.
    
31. {
    
32. deny all;
    
33. }
    
34. 
    
35. location / {
    
36. return 301 https://$host$request_uri;
    
37. }
    
38. 
    
39. access_log/home/wwwlogs/test.com.log;
    
40. }
    
41. 
    
42. server
    
43. {
    
44. listen 443 ssl http2;
    
45. listen [::]:443 ssl http2;
    
46. server_name test.com ;
    
47. 
    
48. index curl.html index.html index.htm index.php default.html default.htm default.php;
    
49. root/home/wwwroot/test.com;
    
50. 
    
51. ssl_certificate /usr/local/nginx/conf/ssl/test.com/fullchain.cer;
    
52. ssl_certificate_key /usr/local/nginx/conf/ssl/test.com/test.com.key;
    
53. ssl_session_timeout 5m;
    
54. ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    
55. ssl_prefer_server_ciphers on;
    
56. ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    
57. ssl_session_cache builtin:1000 shared:SSL:10m;
    
58. # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    
59. ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
    
60. 
    
61. if ( $http_user_agent !~* curl ){
    
62. 
    
63. return 301 https://test.com/other/index.html;
    
64. 
    
65. }
    
66. 
    
67. include rewrite/none.conf;
    
68. #error_page 404 /404.html;
    
69. 
    
70. # Deny access to PHP files in specific directory
    
71. #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    
72. 
    
73. include enable-php.conf;
    
74. 
    
75. location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    
76. {
    
77. expires 30d;
    
78. }
    
79. 
    
80. location ~ .*\.(js|css)?$
    
81. {
    
82. expires 12h;
    
83. }
    
84. 
    
85. location ~ /.well-known {
    
86. allow all;
    
87. }
    
88. 
    
89. location ~ /\.
    
90. {
    
91. deny all;
    
92. }
    
93. 
    
94. access_log/home/wwwlogs/test.com.log;
    
95. }
    

复制代码

curl -I--user-agent "Mozilla" http://test.com/other/index.html
无限循环本身

榆木

带套了吧 把套的回源改成 443

txjcv

榆木 发表于 2024-4-15 13:15
带套了吧 把套的回源改成 443

没有套cdn
我是这样的 curl 访问网站就让他默认访问一个 curl.html 无意的空白内容
然后非curl访问的话我就让他301到 网站/other/index.html正常页面

allnetstore

这种事情问GPT

jqbaobao

请求访问80
80收到，你应该跳转443
请求访问443
443收到，回源80

重复以上操作

榆木

txjcv 发表于 2024-4-15 13:17
没有套cdn
我是这样的 curl 访问网站就让他默认访问一个 curl.html 无意的空白内容
然后非curl访问的话我 ...

if ( $http_user_agent !~* curl ){

return 301 http://test.com/other/index.html;

}


改成 https://test.com/other/index.html

wuxudd

你301不写在 location下，那不等于所有非curl请求都进行一遍301啊，包括已经301跳转的请求。

txjcv

榆木 发表于 2024-4-15 13:20
if ( $http_user_agent !~* curl ){

return 301 http://test.com/other/index.html;

也不行 ，非得要再开一个子域名网站吗？或者外部域

txjcv

wuxudd 发表于 2024-4-15 13:21
你301不写在 location下，那不等于所有非curl请求都进行一遍301啊，包括已经301跳转的请求。 ...

这个301是默认lnmp脚本的http重定向到https的配置


我重新修改下

1. server
   
2. {
   
3. listen 80;
   
4. listen [::]:80;
   
5. server_name test.com ;
   
6. index index.html index.htm index.php default.html default.htm default.php;
   
7. root/home/wwwroot/test.com;
   
8. return 301 https://$server_name$request_uri;
   
9. #include rewrite/none.conf;
   
10. #error_page 404 /404.html;
    
11. 
    
12. # Deny access to PHP files in specific directory
    
13. #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    
14. 
    
15. include enable-php.conf;
    
16. 
    
17. location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    
18. {
    
19. expires 30d;
    
20. }
    
21. 
    
22. location ~ .*\.(js|css)?$
    
23. {
    
24. expires 12h;
    
25. }
    
26. 
    
27. location ~ /.well-known {
    
28. allow all;
    
29. }
    
30. 
    
31. location ~ /\.
    
32. {
    
33. deny all;
    
34. }
    
35. 
    
36. #location / {
    
37. # return 301 https://$host$request_uri;
    
38. #}
    
39. 
    
40. access_log/home/wwwlogs/test.com.log;
    
41. }
    
42. 
    
43. server
    
44. {
    
45. listen 443 ssl http2;
    
46. listen [::]:443 ssl http2;
    
47. server_name test.com ;
    
48. 
    
49. index curl.html index.html index.htm index.php default.html default.htm default.php;
    
50. root/home/wwwroot/test.com;
    
51. 
    
52. ssl_certificate /usr/local/nginx/conf/ssl/test.com/fullchain.cer;
    
53. ssl_certificate_key /usr/local/nginx/conf/ssl/test.com/test.com.key;
    
54. ssl_session_timeout 5m;
    
55. ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    
56. ssl_prefer_server_ciphers on;
    
57. ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    
58. ssl_session_cache builtin:1000 shared:SSL:10m;
    
59. # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    
60. ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
    
61. 
    
62. if ( $http_user_agent !~* curl ){
    
63. 
    
64. return 301 https://test.com/other/index.html;
    
65. 
    
66. }
    
67. 
    
68. include rewrite/none.conf;
    
69. #error_page 404 /404.html;
    
70. 
    
71. # Deny access to PHP files in specific directory
    
72. #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    
73. 
    
74. include enable-php.conf;
    
75. 
    
76. location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    
77. {
    
78. expires 30d;
    
79. }
    
80. 
    
81. location ~ .*\.(js|css)?$
    
82. {
    
83. expires 12h;
    
84. }
    
85. 
    
86. location ~ /.well-known {
    
87. allow all;
    
88. }
    
89. 
    
90. location ~ /\.
    
91. {
    
92. deny all;
    
93. }
    
94. 
    
95. access_log/home/wwwlogs/test.com.log;
    
96. }
    

复制代码

也是不行

wuxuddtxjcv

txjcv 发表于 2024-4-15 13:25
这个301是默认lnmp脚本的http重定向到https的配置

if ( $http_user_agent !~* curl ){

return 301 https://test.com/other/index.html;

}

这一行，你在location下写，排除other目录。

wuxudd 发表于 2024-4-15 13:28
if ( $http_user_agent !~* curl ){

return 301 https://test.com/other/index.html ...

不行那这样的话会301到 http://test.com/other/index.html;
然后 http://test.com/other/index.html; 又301到https://test.com/other/index.html;