安装openresty
cd /usr/local mkdir openresty cd openresty wget https://openresty.org/download/openresty-1.21.4.1.tar.gz tar -xvf openresty-1.21.4.1.tar.gz yum install readline-devel pcre-devel openssl-devel gcc cd openresty-1.21.4.1 ./configure --prefix=/usr/local/openresty/server --with-luajit --with-http_stub_status_module --with-pcre --with-pcre-jit --with-http_gzip_static_module --with-http_ssl_module gmake && gmake install cd ../server/ ./nginx/sbin/nginx
配置waf
cd /usr/local/openresty/server/nginx/conf git clone https://gitee.com/yanglei_xyz/ngx_lua_waf.git mv ngx_lua_waf waf
在nginx.conf的http段添加
#WAF lua_package_path "/usr/local/openresty/server/nginx/conf/waf/?.lua"; lua_shared_dict limit 10m; init_by_lua_file /usr/local/openresty/server/nginx/conf/waf/init.lua; access_by_lua_file /usr/local/openresty/server/nginx/conf/waf/waf.lua;
配置config.lua里的waf规则目录(一般在waf/conf/目录下)
RulePath = "/usr/local/openresty/server/nginx/conf/waf/wafconf/" logdir = "/usr/local/openresty/server/nginx/logs/hack/"
添加软连接
ln -s /usr/local/openresty/server/lualib /usr/local/lib/lua ln -s /usr/local/openresty/server/lualib/resty /usr/local/openresty/server/nginx/conf/waf/resty
重新启动openresty
cd /usr/local/openresty/server/nginx/sbin ./nginx -s reload
查看是否生效
标签：Openresty,waf,配置,server,nginx,usr,openresty,local From： https://www.cnblogs.com/yanglei-xyz/p/16938842.html