Nginx

By Known-Space -

What is a Web Server?

A web server is software and hardware that uses HTTP (Hypertext Transfer Protocol) and other protocols to respond to client requests made over the World Wide Web. The main job of a web server is to display website content through storing, processing, and delivering webpages to users. Besides HTTP, web servers also support SMTP (Simple Mail Transfer Protocol) and FTP (File Transfer Protocol), used for email, file transfer, and storage.

Web servers are used in web hosting or the hosting of data for websites and web-based applications -- or web applications.

How do web servers work?

Web server software is accessed through the domain names of websites and ensures the delivery of the site's content to the requesting user. The software side is also comprised of several components, with at least an HTTP server. The HTTP server is able to understand HTTP and URLs. As hardware, a web server is a computer that stores web server software and other files related to a website, such as HTML documents, images, and JavaScript files.

When a web browser, like Google Chrome or Firefox, needs a file that's hosted on a web server, the browser will request the file by HTTP. When the request is received by the web server, the HTTP server will accept the request, find the content, and send it back to the browser through HTTP.

More specifically, when a browser requests a page from a web server, the process will follow a series of steps. 

1.    First, a person will specify a URL in a web browser's address bar. 

2.    The web browser will then obtain the IP address of the domain name -- either translating the URL through DNS (Domain Name System) or by searching in its cache. This will bring the browser to a web server. 

3.    The browser will then request the specific file from the webserver by an HTTP request. The web server will respond, sending the browser the requested page, again, through HTTP. 

4.    If the requested page does not exist or if something goes wrong, the web server will respond with an error message. 

5.    The browser will then be able to display the webpage.

Multiple domains also can be hosted on one web server.

Examples of web server use

Web servers often come as part of a larger package of the internet- and intranet-related programs that are used for:

·        sending and receiving emails;

·        downloading requests for File Transfer Protocol (FTP) files;

·        building and publishing webpages.

 

Common and top web server software on the market

There are a number of common web servers available, some including:

·        Apache HTTP Server. Developed by Apache Software Foundation, it is a free and open-source web server for Windows, Mac OS X, Unix, Linux, Solaris, and other operating systems; it needs the Apache license.

·        Microsoft Internet Information Services (IIS). Developed by Microsoft for Microsoft platforms; it is not open-sourced but widely used.

·        Nginx. A popular open-source web server for administrators because of its light resource utilization and scalability. It can handle many concurrent sessions due to its event-driven architecture. Nginx also can be used as a proxy server and load balancer.

·        Lighttpd. A free web server that comes with the FreeBSD operating system. It is seen as fast and secure while consuming less CPU power.

·        Sun Java System Web Server. A free web server from Sun Microsystems that can run on Windows, Linux and Unix. It is well-equipped to handle medium to large websites.

 What is Nginx?

Nginx Architecture

Nginx uses Master-Slave architecture by supporting event-driven, asynchronous, and non-blocking model.


Why should we use Nginx?


Configuration Settings

The core settings of NGINX are mainly configured in the Nginx.conf file. The configuration file is mainly structured into contexts(event context and Http context).

worker_process: Settings that define the number of worker_process that NGINX use. The number will be the number of CPU cores.

worker_connections: Maximum number of simultaneous connections for each worker_process.

access_log & error_log: These are the files that Nginx uses to log any errors and access attempts. These loges are used for debugging and troubleshooting.

gzip: These are settings for gzip compression of Nginx responses.

How to install NGINX?



1. Open the terminal on Ubuntu or Debian and run the following command to ensure that all packages on the OS are up to date:

sudo apt-get update  


2. Since Nginx is available in the default repository of Debian or Ubuntu, it is possible to install it from these repositories using the apt packaging system.

sudo apt-get install nginx




3. Once it is done, use the following command to see the process for the webserver in a running state.

ps -ef | grep nginx




4. Adjusting the firewall to access Nginx: For accessing the Nginx from the web server, we have to allow access to the services from outside. To see the list of profiles available to allow from the firewall, use the following command:

sudo ufw app list


Here,

Nginx Full: It allows both ports 80 and 443.

Nginx HTTP: It allows only port 80.

Nginx HTTPS: It allows only port 443.

To allow both ports HTTP 80 and HTTPS 443 then use the following command:

sudo ufw allow 'Nginx Full' 

To allow only Nginx HTTP port 80 use the following command:

sudo ufw allow 'Nginx HTTP'  

To allow only Nginx HTTPS port 443, use the following command:

sudo ufw allow 'Nginx HTTPS' 

5. By default, after the installation of Ubuntu, the Nginx starts automatically and we can check the status of the Nginx with the help of the following command:

systemctl status nginx 


Manage the NGINX Process

Now that you have your web server up and running, we can go over some basic management commands.

To stop your web server

sudo systemctl stop nginx

To start the web server when it is stopped

sudo systemctl start nginx

To stop and then start the service again

sudo systemctl restart nginx

If you are simply making configuration changes, NGINX can often reload without dropping connections. To do this, this command can be used

sudo systemctl reload nginx

By default, NGINX is configured to start automatically when the server boots. If this is not what you want, you can disable this behavior by typing:

sudo systemctl disable nginx

To re-enable the service to start up at boot

sudo systemctl enable nginx

To test your config file

sudo nginx -t

 

Important NGINX Files and Directories

So once you get to know how to manage the service itself, you should take a few minutes to familiarize yourself with a few important directories and files.

Content

·        /var/www/html: The actual web content, which by default only consists of the default Nginx page you saw earlier, is served out of the /var/www/html directory. This can be changed by altering NGINX configuration files.

Server Configuration

·        /etc/nginx: The NGINX configuration directory. All of the Nginx configuration files reside here.

·        /etc/nginx/nginx.conf: The main NGINX configuration file. This can be modified to make changes to the NGINX global configuration.

·        /etc/nginx/sites-available/: The directory where per-site “server blocks” can be stored. NGINX will not use the configuration files found in this directory unless they are linked to the sites-enabled directory (see below). Typically, all server block configuration is done in this directory and then enabled by linking to the other directory.

·        /etc/nginx/sites-enabled/: The directory where enabled per-site “server blocks” are stored. Typically, these are created by linking to configuration files found in the sites-available directory.

·        /etc/nginx/snippets: This directory contains configuration fragments that can be included elsewhere in the NGINX configuration. Potentially repeatable configuration segments are good candidates for refactoring into snippets.

Server Logs

·        /var/log/nginx/access.log: Every request to your web server is recorded in this log file unless and until NGINX is configured to do otherwise.

·        /var/log/nginx/error.log: Every NGINX error will be recorded in this log only.

Configure NGINX to serve your website

You’ll need to tell NGINX about your website and how to serve it.

cd into /etc/nginx/. This is where the NGINX configuration files are located.

The two directories we are interested in are sites-available and sites-enabled.

·        sites-available contains individual configuration files for all of your possible static websites.

·        sites-enabled contains links to the configuration files that NGINX will actually read and run.

Now, cd into /etc/nginx/sites-enabled and edit default file using nano or vi as per your choice to following :

server {
    listen 80 default_server;
    listen [::]:80 default_server; 
    root /var/www/html;  
    index index.html; 
    server_name _;  

    location / {
       try_files $uri $uri/ =404;
     }
}

The above code is for:

·        Deliver files from the folder /var/www/html or this can be a path to your index.html.

·        The main index page is called index.html.

·        Requests that are requesting should be served by this server block.

Now, if you are about to restart NGINX you should see your site!

sudo systemctl restart nginx

Configure NGINX to serve your backend

You’ll need to tell NGINX about your website and how to serve it.

cd into /etc/nginx/. This is where the NGINX configuration files are located.

The two directories we are interested in are sites-available and sites-enabled.

·        sites-available contains individual configuration files for all of your possible static websites.

·        sites-enabled contains links to the configuration files that NGINX will actually read and run.

Now, cd into /etc/nginx/sites-enabled and edit default file using nano or vi as per your choice to following :

server {
    listen 80 default_server
    listen [::]:80 default_server; 
    root /var/www/html;  
    index index.html; 
    server_name _;  

    location / {
       try_files $uri $uri/ =404;
    }

    location /api/ {
           proxy_pass http://localhost:8080/;
           proxy_http_version 1.1;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection 'upgrade';
           proxy_set_header Host $host;
           proxy_cache_bypass $http_upgrade;
    }

}

What does the above code means

·        On /api route back-end can be accessed which is a link to out local-host process in the port 8080

If you have gone through the entire blog, you might have understood everything on how to install Nginx and configure it for your usage. The blog has also given you information about creating a reverse proxy and creating redirects.

Configure NGINX to serve your Image folder

cd into /etc/nginx/sites-enabled and edit default file using nano or vi as per your the choice to following:

server {
    listen 80 default_server;
    listen [::]:80 default_server; 
    root /var/www/html;  
    index index.html; 
    server_name _;  

    location / {
       try_files $uri $uri/ =404;
    }
    location /api/ {
           proxy_pass http://localhost:8080/;
           proxy_http_version 1.1;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection 'upgrade';
           proxy_set_header Host $host;
           proxy_cache_bypass $http_upgrade;
    }  location /images {
           alias uploads/images/;
    }
}

What does the above code means

·        On /images route images can be accessed which is a link to instance folder uploads/images. It will point to all images in the images folder.

Conclusion

If you have gone through the entire blog, you might have understood everything on how to install Nginx and configure it for your usage.

Comments

Post a Comment

Popular posts from this blog

AWS Configuration For RDS(postgres),ElastiCache(Redis) with ElasticBean

By Known-Space -
AWS Configuration For RDS(postgres),ElastiCache(Redis) with ElasticBean RDS Database Creation Go to AWS Management Console and use Find Services to search for RDS Click Create database button Select PostgreSQL Check 'only enable options eligible for RDS Free Usage Tier' and click Next button Scroll down to Settings Form Set DB Instance identifier to multi-docker-postgres Set Master Username to postgres Set Master Password to postgres and confirm Click Next button Make sure VPC is set to Default VPC Scroll down to Database Options Set Database Name to fibvalues Scroll down and click Create Database button ElastiCache Redis Creation Go to AWS Management Console and use Find Services to search for ElastiCache Click Redis in sidebar Click the Create button Make sure Redis is set as Cluster Engine In Redis Settings form, set Name to multi-docker-redis Change Node type to 'cache.t2.micro' Change Number of re...
Read more

Use @Initbinder in Spring MVC

By Known-Space -
Image
In this blog we will learn how to use @initbinder Annotation in Spring MVC. We will walk through a small example with help of a demo application. If you’re familiar with MVC architecture ,you must all be aware that controller is used for processing the web request and rendering the response to the View. Now,Initbinder comes into picture if you want to customize the request being sent to the controller.It is defined in the controller, helps in controlling and formatting each and every request that comes to it. This annotation is used with the methods which initializes  WebDataBinder  and works as a preprocessor for each request coming to the controller. InitBinder interaction with other Components Seems lot of gyaan right ! So,now to explain this let’s take an example. Consider we have student management portal for a school ,which manages the information of all the students present in the school.It has a feature for registering a student when he is admitted to the school. ...
Read more

CSRF Protection using Synchronizer Tokens

By Known-Space -
Image
What is cross site request forgery? Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently  authenticated. CSRF attacks specifically target state-changing requests,  not theft of data, since the attacker has no way to see the response to the forged request We can avoid these kind of attack (CSRF) by two ways 1. Synchronizer Tokens 2. Double submitted cookies Here we are considering on Synchronize Tokens. When we login, there will be a random number generated and stored on the client side and server side as well. So when the attacker creates the code he doesn't know the token value. So he can not create a code with the correct token value. Anyhow, if the victim clicks the link, that won't be harmful. because the verification will fail. For the first step we want to create the session in the client side (index.php). Then we want create a cookies and set session id to the cook...
Read more

How to read Dates with Hibernate

By Known-Space -
Handling Dates with Hibernate You can make use of a combination of Java's date formatting class and Hibernate annotations. Sample output: Student [id=50, firstName=Paul, lastName=Doe, email=paul@luv2code.com, dateOfBirth=null] Student [id=51, firstName=Daffy, lastName=Duck, email=daffy@luv2code.com, dateOfBirth=null] Student [id=52, firstName=Paul, lastName=Doe, email=paul@luv.com, dateOfBirth=31/12/1998] Development Process Overview 1. Alter database table for student 2. Add a date utils class for parsing and formatting dates 3. Add date field to Student class 4. Add toString method to Student class 5. Update CreateStudentDemo ---- Detailed steps 1. Alter database table for student We need to alter the database table to add a new column for "date_of_birth". Run the following SQL in your MySQL Workbench tool. ALTER TABLE `hb_student_tracker` . `student` ADD COLUMN `date_of_birth` DATETIME NULL AFTER `last_name` ; -- 2....
Read more

CSRF Protection using Double Submitted Cookies

By Known-Space -
Image
Here we will look about the Double Submitted Cookies to CSRF protection. In Synchronizer Token the client and the server should wants to generate the token value. So this process is time consuming and get load the server. For reduce this kind of issues we are using double submitted cookies. We need java script to run double submitted cookies. For that the http flag should be off. Here we are sending two cookies through the http header and the http body. Then the server will validate these two cookies and if its same it will allow, if its not deny the request. In the client side (index.php) we create the session and store it in the cookie.After that create a token and store it in a new cookie. After that we shoud set the estimation of hidden token as "<? echo $token ?>" This will send the hidden token to server side when client click on login button. After that create a function to validate login in the server side Get the full code from here
Read more

Add Logging Messages in Spring 5.1 - All Java Config Version

By Known-Space -
Image
Add Logging Messages in Spring 5.1 - All Java Config Version The Problem In Spring 5.1, the Spring Development team changed the logging levels internally. As a result, by default you will no longer see the red logging messages at the INFO level. This is different than in the videos. The Solution If you would like to configure your app to show similar logging messages as in the video, you can make the following updates. Note, you will not see the EXACT same messages, since the Spring team periodically changes the text of the internal logging messages. However, this should give you some additional logging data. Overview of the steps 0. Create a logging properties file 1. Create a configuration class to configure the parent logger and console handler Detailed Steps 0. Create a logging properties file This properties file will define the logging levels for the application. The props file sets the logger level to FINE. For more detailed logging info, you can s...
Read more

The TRUE difference between [] and {{}} bindings in Angular

By Known-Space -
  One of the parts of Angular that most developers think they understand, but many don’t, is the true nature of [] and {{}} bindings. A fundamental lack of understanding of these bindings can become a major issue when working with templates and trying to get them to do exactly what you want. It can also be the cause of spending an unnecessary amount of hours trying to figure out a bug. So I’m going to run down exactly what these two bindings do, and what it is that many developers misunderstand about them. You’re probably familiar with the typical usage of {{}} bindings: <h1>{{title}}</h1> And you’re probably familiar with the typical usage of [] or property bindings: <img [src]="imgsrc"> But do you truly understand what each binding is doing? And why we use them in this situation? Many if not most developers simply know to use {{}} when putting text in an element, and [] for binding to properties. But have you ever wondered with reactive forms why the  form...
Read more

Hibernate and Primary Keys

By Known-Space -
Image
Hibernate and Primary Keys Primary Key :  Uniquely identifies each row in a table  Must be a unique value Cannot contain NULL values MySQL - Auto Increment Hibernate Identity - Primary Key ID Generation Strategies You can define your own CUSTOM generation strategy :-) Create implementation of org.hibernate.id.IdentifierGenerator Override the method: public Serializable generate(…)
Read more