Nginx 보안 접근 설정

#     IP    $binary_remote_addr    Key，   IP       50      
#             ？    50    ，     503     ，          
# limit single IP 50 concurrent control
limit_conn_zone $binary_remote_addr zone=TotalConnLimitZone:20m ;
limit_conn  TotalConnLimitZone  50;
limit_conn_log_level notice;

#     IP    $binary_remote_addr    Key，   IP        20    
#              ，  ，        ，     503     
# limit single IP/s 20 Request
limit_req_zone $binary_remote_addr zone=ConnLimitZone:20m  rate=20r/s;
limit_req_log_level notice;

...
location  /abc/ {
        limit_req zone=ConnLimitZone burst=5 nodelay;
        proxy_pass http://abc_pool/;
    }
...

#         IP  
map $http_x_forwarded_for  $clientRealIp {
    ""  $remote_addr;
    ~^(?P[0-9\.]+),?.*$  $firstAddr;
}

# limit single IP 50 concurrent control，   $binary_remote_addr  $clientRealIp，$clientRealIp Key
limit_conn_zone $clientRealIp zone=TotalConnLimitZone:20m ;
limit_conn  TotalConnLimitZone  50;
limit_conn_log_level notice;

# limit single IP/s 20 Request，   $binary_remote_addr  $clientRealIp，$clientRealIp Key
limit_req_zone $clientRealIp zone=ConnLimitZone:20m  rate=20r/s;
limit_req_log_level notice;

#        
server {
  listen   80;
  location ~ \.php$ {

    limit_req zone=ConnLimitZone burst=5 nodelay;

    fastcgi_pass   127.0.0.1:9000;
    fastcgi_index  index.php;
    include fastcgi_params;
}   
}

server {
listen   80;
    server_name  www.aaa.com;

    ##       /nginx-test    ，     $clientRealIp   ，      ，    IP   
    location /nginx-test {
            echo $clientRealIp;
    }
}