Detailed explanation of the practical record of solving network isolation through Nginx

# Download [work@40-10-14 opt]$ wget http://nginx.org/download/nginx-1.18.0.tar.gz
# Unzip the file [work@40-10-14 opt]$ tar -xvf nginx-1.18.0.tar.gz

# 1. Default installation: Enter the unzipped directory with root privileges and execute the following command to install [root@40-10-14 nginx-1.18.0]# ./configure && make && make install

# 2. Specify the directory: Install to the specified /opt/nginx directory [work@40-10-14 opt]$ mkdir /opt/nginx
[work@40-10-14 nginx-1.18.0]$ ./configure --prefix=/opt/nginx && make && mae install

mkdir: cannot create directory `/usr/local/nginx': Permission denied
make[1]: *** [install] Error 1
make[1]: Leaving directory `/opt/nginx-1.18.0'
make: *** [install] Error 2

[root@40-10-14 opt]# whereis nginx
nginx: /usr/local/nginx

# Add soft link [root@40-10-14 sbin]# ln -s /opt/nginx/sbin/nginx /usr/local/bin/
# Check the version [root@40-10-14 sbin]# nginx -v
nginx version: nginx/1.18.0

# View the Linux process id
[root@40-10-14 ~]# ps -ef | grep nginx
nobody 45198 1 0 16:12 ? 00:00:00 nginx: worker process
root 51261 50692 0 17:00 pts/0 00:00:00 grep nginx
# Close the process [root@40-10-14 ~]# kill 45198
# The previous process has been closed [root@40-10-14 ~]# ps -ef | grep nginx
root 51277 50692 0 17:00 pts/0 00:00:00 grep nginx

#user nobody;
worker_processes 1;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;


events {
  worker_connections 1024;
}


http {
  include mime.types;
  default_type application/octet-stream;

  #log_format main '$remote_addr - $remote_user [$time_local] "$request" '
  # '$status $body_bytes_sent "$http_referer" '
  # '"$http_user_agent" "$http_x_forwarded_for"';

  #access_log logs/access.log main;

  sendfile on;
  #tcp_nopush on;

  #keepalive_timeout 0;
  keepalive_timeout 65;

  #gzip on;

  # The request needs to be forwarded to the following two machines, with traffic equally divided; specify the IP and port upstream zpserver {
       server xx.xx.xx.22:10001;
       server xx.xx.xx.23:10001;
  }

  server {
    # The nginx service port is 80
    listen 80;
    server_name localhost;

    #charset koi8-r;

    #access_log logs/host.access.log main;

    # Only requests to the /user root path are forwarded location /user {
      root html;
      index index.html index.htm;
      proxy_pass http://zpserver;
    }

    #error_page 404 /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
      root html;
    }

    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    # proxy_pass http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #root html;
    # fastcgi_pass 127.0.0.1:9000;
    # fastcgi_index index.php;
    # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
    #include fastcgi_params;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    # deny all;
    #}
  }


  # another virtual host using mix of IP-, name-, and port-based configuration
  #
  #server {
  # listen 8000;
  # listen somename:8080;
  # server_name somename alias another.alias;

  # location / {
  #root html;
  # index index.html index.htm;
  # }
  #}


  # HTTPS server
  #
  #server {
  # listen 443 ssl;
  # server_name localhost;

  # ssl_certificate cert.pem;
  # ssl_certificate_key cert.key;

  # ssl_session_cache shared:SSL:1m;
  #ssl_session_timeout 5m;

  # ssl_ciphers HIGH:!aNULL:!MD5;
  # ssl_prefer_server_ciphers on;

  # location / {
  #root html;
  # index index.html index.htm;
  # }
  #}

}

#IP is the Nginx server IP
xx.xx.xx.14 xxx.daojia.com