Nginx ๋ฐ LuaJIT(OpenResty)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ฆ‰์‹œ ์ด๋ฏธ์ง€ ํฌ๊ธฐ ์กฐ์ •

๊ฝค ์˜ค๋žซ๋™์•ˆ, ๊ธฐ์‚ฌ์—์„œ ์˜๊ฐ์„ ๋ฐ›์•˜์Šต๋‹ˆ๋‹ค. ์ฆ‰์„์—์„œ ์ด๋ฏธ์ง€ ํฌ๊ธฐ ์กฐ์ • ์ด๋ฏธ์ง€ ํฌ๊ธฐ ์กฐ์ •์€ ๋‹ค์Œ์„ ์‚ฌ์šฉํ•˜์—ฌ ๊ตฌ์„ฑ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ngx_http_image_filter_module ๊ทธ๋ฆฌ๊ณ  ๋ชจ๋“  ๊ฒƒ์ด ์ œ๋Œ€๋กœ ์ž‘๋™ํ–ˆ์Šต๋‹ˆ๋‹ค. ํ•˜์ง€๋งŒ ๊ด€๋ฆฌ์ž๊ฐ€ ์ผ๋ถ€ ์„œ๋น„์Šค์— ์—…๋กœ๋“œํ•˜๊ธฐ ์œ„ํ•ด ์ •ํ™•ํ•œ ํฌ๊ธฐ์˜ ์ด๋ฏธ์ง€๋ฅผ ๋ฐ›์•„์•ผ ํ•  ๋•Œ ํ•˜๋‚˜์˜ ๋ฌธ์ œ๊ฐ€ ๋ฐœ์ƒํ–ˆ์Šต๋‹ˆ๋‹ค. ์ด๋Š” ํ•ด๋‹น ์„œ๋น„์Šค์˜ ๊ธฐ์ˆ ์  ์š”๊ตฌ ์‚ฌํ•ญ์ด์—ˆ๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ์˜ˆ๋ฅผ ๋“ค์–ด, ์›๋ณธ ์ด๋ฏธ์ง€ ํฌ๊ธฐ๊ฐ€ ์žˆ๋Š” ๊ฒฝ์šฐ 1200 ร— 1200, ๊ทธ๋ฆฌ๊ณ  ํฌ๊ธฐ๋ฅผ ์กฐ์ •ํ•  ๋•Œ ์šฐ๋ฆฌ๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์ด ์”๋‹ˆ๋‹ค. ?ํฌ๊ธฐ ์กฐ์ •=600ร—400๊ทธ๋Ÿฌ๋ฉด ์šฐ๋ฆฌ๋Š” ๊ฐ€์žฅ ์ž‘์€ ๊ฐ€์žฅ์ž๋ฆฌ๋ฅผ ๋”ฐ๋ผ ๋น„๋ก€์ ์œผ๋กœ ์ถ•์†Œ๋œ ์ด๋ฏธ์ง€๋ฅผ ์–ป์Šต๋‹ˆ๋‹ค. 400 ร— 400. ๋” ๋†’์€ ํ•ด์ƒ๋„(์—…์Šค์ผ€์ผ)์˜ ์ด๋ฏธ์ง€๋ฅผ ์–ป๋Š” ๊ฒƒ๋„ ๋ถˆ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ์ €๊ฒƒ๋“ค. ?ํฌ๊ธฐ ์กฐ์ •=1500ร—1500 ๋ชจ๋‘ ๋™์ผํ•œ ์ด๋ฏธ์ง€๋ฅผ ๋ฐ˜ํ™˜ํ•ฉ๋‹ˆ๋‹ค 1200 ร— 1200

๊ธฐ์‚ฌ๊ฐ€ ๊ตฌํ•ด์คฌ์–ด์š” OpenResty: NGINX๋ฅผ ๋ณธ๊ฒฉ์ ์ธ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์„œ๋ฒ„๋กœ ์ „ํ™˜ Nginx๊ฐ€ Lua์™€ Lua ์ž์ฒด ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ์™€ ์–ด๋–ป๊ฒŒ ์ž‘๋™ํ•˜๋Š”์ง€ ์ดํ•ดํ•˜๋ ค๋ฉด ์ด์‚ฌ์ง€/๋ฃจ์•„-์ด๋งค์ง - ImageMagick์— Lua pure-c ๋ฐ”์ธ๋”ฉ์„ ์ ์šฉํ•ฉ๋‹ˆ๋‹ค. ์™œ ํŒŒ์ด์ฌ์ด ์•„๋‹Œ ์ด ์†”๋ฃจ์…˜์„ ์„ ํƒํ–ˆ์„๊นŒ์š”? ๋น ๋ฅด๊ณ  ํŽธ๋ฆฌํ•˜๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ์•„๋ฌด ํŒŒ์ผ๋„ ๋งŒ๋“ค ํ•„์š”๋„ ์—†๊ณ , ๋ชจ๋“  ๊ฒƒ์ด Nginx ์„ค์ •์— ๋“ค์–ด์žˆ์Šต๋‹ˆ๋‹ค(ํ•„์ˆ˜ ์•„๋‹˜).

๊ทธ๋Ÿฌ๋ฉด ์šฐ๋ฆฌ์—๊ฒŒ ํ•„์š”ํ•œ ๊ฒƒ์€ ๋ฌด์—‡์ผ๊นŒ?

์˜ˆ์‹œ๋Š” ๋‹ค์Œ์„ ๊ธฐ์ค€์œผ๋กœ ์ œ์‹œ๋ฉ๋‹ˆ๋‹ค. Debian.

nginx ๋ฐ nginx-extras ์„ค์น˜

apt-get update
apt-get install nginx-extras

LuaJIT ์„ค์น˜

apt-get -y install lua5.1 luajit-5.1 libluajit-5.1-dev

Imagemagick ์„ค์น˜

apt-get -y install imagemagick

๊ทธ๋ฆฌ๊ณ  ๋„์„œ๊ด€ ์š”์ˆ ๋ด‰ ๋‚ด ๊ฒฝ์šฐ์—๋Š” ๋ฒ„์ „ 6์— ๋Œ€ํ•ด์„œ์š”

apt-cache search libmagickwand
apt-get -y install libmagickwand-6.q16-3 libmagickwand-6.q16-dev

lua-imagick ๋นŒ๋“œ

์ €์žฅ์†Œ๋ฅผ ๋ณต์ œํ•ฉ๋‹ˆ๋‹ค(๋˜๋Š” zip ํŒŒ์ผ์„ ๊ฐ€์ ธ์™€ ์••์ถ•์„ ํ’‰๋‹ˆ๋‹ค)

cd ~
git clone https://github.com/isage/lua-imagick.git
cd lua-imagick
mkdir build
cd build
cmake ..
make
make install

๋ชจ๋“  ๊ฒƒ์ด ์›ํ™œํ•˜๊ฒŒ ์ง„ํ–‰๋˜๋ฉด Nginx๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์‹ค์ œ๋กœ ํฌ๊ธฐ ์กฐ์ •์„ ์ฒ˜๋ฆฌํ•˜๋Š” ๋ฐฑ์—”๋“œ ํ˜ธ์ŠคํŠธ ๊ตฌ์„ฑ์˜ ์˜ˆ๋ฅผ ๋“ค์–ด๋ณด๊ฒ ์Šต๋‹ˆ๋‹ค. Nginx๋ฅผ ํƒ‘์žฌํ•œ ํ”„๋ŸฐํŠธ ์„œ๋ฒ„๋กœ ํ”„๋ก์‹œ๋ฅผ ๊ตฌ์„ฑํ•˜์—ฌ ํŠน์ • ๊ธฐ๊ฐ„(ํ•˜๋ฃจ) ๋™์•ˆ ์บ์‹ฑ์„ ์ˆ˜ํ–‰ํ•˜๊ณ  ๊ธฐํƒ€ ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•ฉ๋‹ˆ๋‹ค.

nginx ๋ฐฑ์—”๋“œ ์„ค์ •

# Backend image server
server {
    listen       8082;
    listen [::]:8082;
    set $files_root /var/www/example.lh/frontend/web;
    root $files_root;
    access_log off;
    expires 1d;

    location /files {
        # ะดะตั„ะพะปั‚ะฝั‹ะต ะทะฝะฐั‡ะตะฝะธั ั€ะตัะฐะนะทะฐ
        set $w 700;
        set $h 700;
        set $q 89;

        #1-89 allowed
        if ($arg_q ~ "^([1-9]|[1-8][0-9])$") {
            set $q $arg_q;
        }

        if ($arg_resize ~ "([d-]+)x([d+!^]+)") {  
            set $w $1;
            set $h $2;
            rewrite  ^(.*)$   /resize/$w/$h/$q$uri     last;
        }

        rewrite  ^(.*)$   /resize/$w/$h/$q$uri     last;
    }

    location ~* ^/resize/([d]+)/([d+!^]+)/([d]+)/files/(.+)$ {
        default_type 'text/plain';

        set $w $1;
        set $h $2;
        set $q $3;
        set $fname $4;

        # ะ•ัั‚ัŒ ะฒะพะทะผะพะถะฝะพัั‚ัŒ ะฒั‹ะฝะตัั‚ะธ ะฒะตััŒ Lua ะบะพะด ะฒ ะพั‚ะดะตะปัŒะฝั‹ะน ั„ะฐะนะป
        # content_by_lua_file /var/www/some.lua;
        # lua_code_cache off; #dev
        content_by_lua '
        local magick = require "imagick"
        local img = magick.open(ngx.var.files_root .. "/files/" .. ngx.var.fname)
        if not img then ngx.exit(ngx.HTTP_NOT_FOUND) end
        img:set_gravity(magick.gravity["CenterGravity"])

        if string.match(ngx.var.h, "%d+%+") then
            local h = string.gsub(ngx.var.h, "(%+)", "")
            resize = ngx.var.w .. "x" .. h
            -- ะดะปั png ั ะฐะปัŒั„ะฐ ะบะฐะฝะฐะปะพะผ
            img:set_bg_color(img:has_alphachannel() and "none" or img:get_bg_color())
            img:smart_resize(resize)
            img:extent(ngx.var.w, h)
        else
                img:smart_resize(ngx.var.w .. "x" .. ngx.var.h)
        end

        if ngx.var.arg_q then img:set_quality(ngx.var.q) end

        ngx.say(img:blob())
        ';
    }
}

# Upstream
upstream imageserver {
    server localhost:8082;
}

server {
    listen 80;
    server_name examaple.lh;

    # ะพั‚ะฟั€ะฐะฒะปัะตะผ ะฒัะต jpg ะธ png ะบะฐั€ั‚ะธะฝะบะธ ะฝะฐ imageserver
    location ~* ^/files/.+.(jpg|png) {
        proxy_buffers 8 2m;
        proxy_buffer_size 10m;
        proxy_busy_buffers_size 10m;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_pass     http://imageserver;  # Backend image server
    }
}

์š”๊ตฌ๋œ ์ž‘์—…(๊ฐ€์žฅ์ž๋ฆฌ ์ด๋ฏธ์ง€ ํ™•์žฅ)์€ ๋‹ค์Œ์˜ ๋„์›€์œผ๋กœ ์ˆ˜ํ–‰๋ฉ๋‹ˆ๋‹ค. img:extent() ๋งค๊ฐœ๋ณ€์ˆ˜๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ •์˜๋ฉ๋‹ˆ๋‹ค. resize ์„œ๋ช… + ๋์—.

๋‹ค์Œ๊ณผ ๊ฐ™์€ ์˜ต์…˜์„ ์‚ฌ์šฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

  • WxH (์ข…ํšก๋น„ ์œ ์ง€, ๋” ๋†’์€ ์ฐจ์› ์‚ฌ์šฉ)
  • WxH^ (์ข…ํšก๋น„ ์œ ์ง€, ๋” ๋‚ฎ์€ ์ฐจ์› ์‚ฌ์šฉ(์ž๋ฅด๊ธฐ))
  • ๊ฐ€๋กœx์„ธ๋กœ! (์ข…ํšก๋น„ ๋ฌด์‹œ)
  • WxH+ (์ข…ํšก๋น„ ์œ ์ง€, ์ธก๋ฉด ํ…Œ๋‘๋ฆฌ ์ถ”๊ฐ€)

ํฌ๊ธฐ ์กฐ์ • ๊ฒฐ๊ณผ๊ฐ€ ํฌํ•จ๋œ ์š”์•ฝ ํ‘œ

์š”์ฒญ uri ๋งค๊ฐœ๋ณ€์ˆ˜
์ถœ๋ ฅ ์ด๋ฏธ์ง€ ํฌ๊ธฐ

?ํฌ๊ธฐ ์กฐ์ •=400ร—200
200 ร— 200

?ํฌ๊ธฐ ์กฐ์ •=400ร—200^
400 ร— 400

?ํฌ๊ธฐ ์กฐ์ •=400ร—200!
400ร—200 (๋น„๋ก€ํ•˜์ง€ ์•Š์Œ)

?ํฌ๊ธฐ ์กฐ์ •=400ร—200+
400ร—200(๋น„๋ก€)

Nginx ๋ฐ LuaJIT(OpenResty)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ฆ‰์‹œ ์ด๋ฏธ์ง€ ํฌ๊ธฐ ์กฐ์ •

ํ•ฉ๊ณ„

์ด ์ ‘๊ทผ ๋ฐฉ์‹์˜ ๊ฐ•๋ ฅํ•จ๊ณผ ๋‹จ์ˆœ์„ฑ์„ ๊ณ ๋ คํ•˜๋ฉด ์›Œํ„ฐ๋งˆํฌ๋ฅผ ์ถ”๊ฐ€ํ•˜๊ฑฐ๋‚˜ ์ œํ•œ๋œ ์•ก์„ธ์Šค๋กœ ๊ถŒํ•œ์„ ๋ถ€์—ฌํ•˜๋Š” ๋“ฑ ์ƒ๋‹นํžˆ ๋ณต์žกํ•œ ๋…ผ๋ฆฌ๋ฅผ ๊ตฌํ˜„ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฏธ์ง€ ์ž‘์—…์„ ์œ„ํ•œ API ๊ธฐ๋Šฅ์— ๋Œ€ํ•ด ์•Œ์•„๋ณด๋ ค๋ฉด ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ ๋ฌธ์„œ๋ฅผ ์ฐธ์กฐํ•˜์„ธ์š”. ์ด์‚ฌ์ง€/๋ฃจ์•„-์ด๋งค์ง

์ถœ์ฒ˜ : habr.com

DDoS ๋ณดํ˜ธ, VPS VDS ์„œ๋ฒ„๊ฐ€ ์žˆ๋Š” ์‚ฌ์ดํŠธ๋ฅผ ์œ„ํ•œ ์•ˆ์ •์ ์ธ ํ˜ธ์ŠคํŒ… ๊ตฌ์ž… ๐Ÿ”ฅ DDoS ๊ณต๊ฒฉ ๋ฐฉ์ง€ ๊ธฐ๋Šฅ์ด ํƒ‘์žฌ๋œ ์•ˆ์ •์ ์ธ ์›น์‚ฌ์ดํŠธ ํ˜ธ์ŠคํŒ…, VPS ๋ฐ VDS ์„œ๋ฒ„๋ฅผ ๊ตฌ๋งคํ•˜์„ธ์š” | ProHoster