去评论
dz插件网

dz站长神级组合：宝塔面板+长亭雷池waf享受比宝塔付费WAF更牛逼的防网站攻击dz论坛防DDOS防CC攻击宝塔+雷池waf共存解决方案

惧愁人
2024/06/30 17:10:33
dz站长神级组合：宝塔面板+长亭雷池waf享受比宝塔付费WAF更牛逼的防网站攻击dz论坛防DDOS防CC攻击宝塔+雷池waf共存解决方案：

WAF 是什么
WAF 是 Web Application Firewall 的缩写，也被称为 Web 应用防火墙。区别于传统防火墙，WAF 工作在应用层，对基于 HTTP/HTTPS 协议的 Web 系统有着更好的防护效果，使其免于遭到黑客的攻击。
雷池是什么
Slogan:不让黑客越雷池半步
雷池一款足够简单、足够好用、足够强的免费 WAF，由长亭科技耗时近 10 年倾情打造，中心检测才能由智能语义剖析算法驱动，作为反向代理接入，维护你的网站不受黑客攻击。

废话不多说，下面是实操：
已安装好的宝塔面板里面安装雷池共存教程：
单机下部署：宝塔担任运维管理网站、长亭WAF担任防护外来攻击
修正默许端口
这里需求修正 nginx 默许监听端口 80（http）443（https）
找到/www/server/panel/vhost/nginx/0.default.conf文件修改如下：【改默认80监听端口为：8080端口，仅改端口，请勿全抄~】
  1. server
  2. {
  3. listen 8080;
  4. server_name _;
  5. index index.html;
  6. root /www/server/nginx/html;
  7. }
找到/www/server/panel/vhost/nginx/phpfpm_status.conf文件修正如下：【改默认80监听端口为：8080端口，仅改端口，请勿全抄~】
  1. server {
  2. listen 8080;
  3. server_name 127.0.0.1;
  4. allow 127.0.0.1;
  5. location /nginx_status {
  6. stub_status on;
  7. access_log off;
  8. }
  9. location /phpfpm_52_status {
  10. fastcgi_pass unix:/tmp/php-cgi-52.sock;
  11. include fastcgi_params;
  12. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  13. }
  14. location /phpfpm_53_status {
  15. fastcgi_pass unix:/tmp/php-cgi-53.sock;
  16. include fastcgi_params;
  17. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  18. }
  19. location /phpfpm_54_status {
  20. fastcgi_pass unix:/tmp/php-cgi-54.sock;
  21. include fastcgi_params;
  22. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  23. }
  24. location /phpfpm_55_status {
  25. fastcgi_pass unix:/tmp/php-cgi-55.sock;
  26. include fastcgi_params;
  27. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  28. }
  29. location /phpfpm_56_status {
  30. fastcgi_pass unix:/tmp/php-cgi-56.sock;
  31. include fastcgi_params;
  32. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  33. }
  34. location /phpfpm_70_status {
  35. fastcgi_pass unix:/tmp/php-cgi-70.sock;
  36. include fastcgi_params;
  37. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  38. }
  39. location /phpfpm_71_status {
  40. fastcgi_pass unix:/tmp/php-cgi-71.sock;
  41. include fastcgi_params;
  42. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  43. }
  44. location /phpfpm_72_status {
  45. fastcgi_pass unix:/tmp/php-cgi-72.sock;
  46. include fastcgi_params;
  47. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  48. }
  49. location /phpfpm_73_status {
  50. fastcgi_pass unix:/tmp/php-cgi-73.sock;
  51. include fastcgi_params;
  52. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  53. }
  54. location /phpfpm_74_status {
  55. fastcgi_pass unix:/tmp/php-cgi-74.sock;
  56. include fastcgi_params;
  57. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  58. }
  59. location /phpfpm_75_status {
  60. fastcgi_pass unix:/tmp/php-cgi-75.sock;
  61. include fastcgi_params;
  62. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  63. }
  64. location /phpfpm_80_status {
  65. fastcgi_pass unix:/tmp/php-cgi-80.sock;
  66. include fastcgi_params;
  67. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  68. }
  69. location /phpfpm_81_status {
  70. fastcgi_pass unix:/tmp/php-cgi-81.sock;
  71. include fastcgi_params;
  72. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  73. }
  74. location /phpfpm_82_status {
  75. fastcgi_pass unix:/tmp/php-cgi-82.sock;
  76. include fastcgi_params;
  77. fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
  78. }
  79. }
更改完成后需求到nginx面板去重载配置以及重启操作！以防万一这两项操作必需都停止！
新建网站时，域名后边加除80的其他端口。比如修正成8080
网站开启ssl后需求修正端口除443的其他端口。比如修正成8443

装置长亭的雷池waf，官网提供了三种装置方式，这里我选择在线装置，运用命令：
  1. bash -c "$(curl -fsSLk https://waf-ce.chaitin.cn/release/latest/setup.sh)"
依据脚本提示装置，完成后是这样的

阅读器翻开后台管理页面 https://ip地址:9443。依据界面提示，运用 支持 TOTP 的认证软件或者小程序 扫描二维码，然后输入动态口令登录：
看到这个页面阐明 长亭waf 装置胜利啦。

配置防护网站

宝塔开启强制ssl，然后依照图中我的配置停止设置，上游就是https://127.0.0.1:8443

进入原文参与互动