首页 > 代码库 > nginx服务器屏蔽上游错误码

nginx服务器屏蔽上游错误码

平时的开发工作中,有时会遇到脚本权限不对导致403,文件被删除导致404,甚至后端业务异常导致5xx等情况,其实我们可以在服务器加上判断,检测当后端服务出现异常的时候前端返回一个指定的静态文件(也可以是一个动态资源)。

这样可以为一些关键业务(html或者动态资源,js等)配置此功能,当后端关键业务出现错误时,也会把一个指定的正确资源返回给用户。

 

想法自然是在nginx向客户端输出响应头时捕获信息,查看是不是异常,异常则跳转到指定文件

 

看了下nginx的第三方模块都没有实现这个功能,那还是自己来造轮子吧,最直接的开发方法是用openresty或者nginx+lua,nginx-lua提供了header_filter_by_lua挂载入口,可惜尝试下来却不行,仔细查看官方文档才发现这个入口里面禁用了一些关键IO操作的api

Uses Lua code specified in <lua-script-str> to define an output header filter.Note that the following API functions are currently disabled within this context:Output API functions (e.g., ngx.say and ngx.send_headers)Control API functions (e.g., ngx.exit and ngx.exec)Subrequest API functions (e.g., ngx.location.capture and ngx.location.capture_multi)Cosocket API functions (e.g., ngx.socket.tcp and ngx.req.socket).Here is an example of overriding a response header (or adding one if absent) in

只能做nginx模块开发来实现了。折腾了3个晚上,艰苦的调试过程就不提了,直接贴代码吧。

nginx配置文件如下:

location ~ \.php($|/) {        fastcgi_pass   127.0.0.1:9000;        fastcgi_index  index.php;        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;        include        fastcgi_params;        up_error_code   403 404 500 503 504 505;        up_error_go     /ok.html;}location / {        root   html;        index  index.html index.htm;        up_error_code   502;        up_error_go     /ok.html;}

其中:

up_error_code是需要屏蔽的后段错误码类型,支持多个;

up_error_go是需要跳转到的资源位置

(502错误需要在location /里面才能捕获到,这个非常奇怪,原因还不清楚,所以除了要在proxy的location里面设置其他错误过滤外也要在根目录下过滤502错误才行。)

代码(ngx_http_upstream_error_go_module.c)实现较为简单,具体如下:

/* * Copyright (C) Ciaos */#include <ngx_config.h>#include <ngx_core.h>#include <ngx_http.h>typedef struct {    ngx_array_t     *error_codes;    ngx_str_t       file_path;} ngx_http_upstream_error_go_conf_t;static void *ngx_http_upstream_error_go_create_conf(ngx_conf_t *cf);static char *ngx_http_upstream_error_go_merge_conf(ngx_conf_t *cf, void *parent,void *child);static char *ngx_http_upstream_error_go_set_code(ngx_conf_t *cf, ngx_command_t *cmd, void *conf);static char *ngx_http_upstream_error_go_set_file_path(ngx_conf_t *cf, ngx_command_t *cmd, void *conf);static ngx_int_t ngx_http_upstream_error_go_init(ngx_conf_t *cf);static ngx_command_t  ngx_http_upstream_error_go_commands[] = {    { ngx_string("up_error_code"),        NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_1MORE,        ngx_http_upstream_error_go_set_code,        NGX_HTTP_LOC_CONF_OFFSET,        0,        NULL },    { ngx_string("up_error_go"),        NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,        ngx_http_upstream_error_go_set_file_path,        NGX_HTTP_LOC_CONF_OFFSET,        0,        NULL },    ngx_null_command};static ngx_http_module_t  ngx_http_upstream_error_go_module_ctx = {    NULL,                                  /* preconfiguration */    ngx_http_upstream_error_go_init,              /* postconfiguration */    NULL,                                  /* create main configuration */    NULL,                                  /* init main configuration */    NULL,                                  /* create server configuration */    NULL,                                  /* merge server configuration */    ngx_http_upstream_error_go_create_conf,       /* create location configration */    ngx_http_upstream_error_go_merge_conf         /* merge location configration */};ngx_module_t  ngx_http_upstream_error_go_module = {    NGX_MODULE_V1,    &ngx_http_upstream_error_go_module_ctx,       /* module context */    ngx_http_upstream_error_go_commands,          /* module directives */    NGX_HTTP_MODULE,                       /* module type */    NULL,                                  /* init master */    NULL,                                  /* init module */    NULL,                                  /* init process */    NULL,                                  /* init thread */    NULL,                                  /* exit thread */    NULL,                                  /* exit process */    NULL,                                  /* exit master */    NGX_MODULE_V1_PADDING};static ngx_http_output_header_filter_pt  ngx_http_next_header_filter;static ngx_http_output_body_filter_pt    ngx_http_next_body_filter;static ngx_int_tngx_http_upstream_error_go_header_filter(ngx_http_request_t *r){    ngx_uint_t      e;    ngx_uint_t      *ecode;    ngx_http_upstream_error_go_conf_t *clcf;    clcf = ngx_http_get_module_loc_conf(r, ngx_http_upstream_error_go_module);    if(clcf == NULL) {        return NGX_ERROR;    }    if(clcf->error_codes){        ecode = clcf->error_codes->elts;        for(e = 0; e < clcf->error_codes->nelts; e ++){            if(r->headers_out.status == *(ecode+e)){                r->err_status = 0;                ngx_str_set(&r->headers_out.status_line, "200 OK");                ngx_http_internal_redirect(r, &clcf->file_path, &r->args);                return NGX_ERROR;            }        }    }    return ngx_http_next_header_filter(r);}static ngx_int_tngx_http_upstream_error_go_body_filter(ngx_http_request_t *r, ngx_chain_t *in){    return ngx_http_next_body_filter(r, in);}static char *ngx_http_upstream_error_go_set_code(ngx_conf_t *cf, ngx_command_t *cmd, void *conf){    ngx_http_upstream_error_go_conf_t *clcf = conf;    ngx_str_t       *value;    ngx_uint_t      i;    ngx_uint_t      *ecode;    if(clcf->error_codes == NGX_CONF_UNSET_PTR) {        clcf->error_codes = ngx_array_create(cf->pool, 4, sizeof(ngx_uint_t));        if(clcf->error_codes == NULL)        {            return NGX_CONF_ERROR;        }    }    value = cf->args->elts;    for(i=1; i< cf->args->nelts; i++){        ecode = ngx_array_push(clcf->error_codes);        if(ecode == NULL) {            return NGX_CONF_ERROR;        }        *ecode = ngx_atoi(value[i].data, value[i].len);    }    return NGX_CONF_OK;}static char *ngx_http_upstream_error_go_set_file_path(ngx_conf_t *cf, ngx_command_t *cmd, void *conf){    ngx_http_upstream_error_go_conf_t *clcf = conf;    ngx_str_t       *value;    value = cf->args->elts;    clcf->file_path = value[1];    return NGX_CONF_OK;}static void *ngx_http_upstream_error_go_create_conf(ngx_conf_t *cf){    ngx_http_upstream_error_go_conf_t  *clcf;    clcf = ngx_pcalloc(cf->pool, sizeof(ngx_http_upstream_error_go_conf_t));    if (clcf == NULL) {        return NULL;    }    clcf->error_codes = NGX_CONF_UNSET_PTR;    return clcf;}static char *ngx_http_upstream_error_go_merge_conf(ngx_conf_t *cf, void *parent, void *child){    ngx_http_upstream_error_go_conf_t *prev = parent;    ngx_http_upstream_error_go_conf_t *clcf = child;    ngx_conf_merge_str_value(clcf->file_path, prev->file_path, "");    ngx_conf_merge_ptr_value(clcf->error_codes, prev->error_codes, NULL);    return NGX_CONF_OK;}static ngx_int_tngx_http_upstream_error_go_init(ngx_conf_t *cf){    ngx_http_next_header_filter = ngx_http_top_header_filter;    ngx_http_top_header_filter = ngx_http_upstream_error_go_header_filter;    ngx_http_next_body_filter = ngx_http_top_body_filter;    ngx_http_top_body_filter = ngx_http_upstream_error_go_body_filter;    return NGX_OK;}

 配置如下(config):

ngx_addon_name=ngx_http_upstream_error_go_moduleHTTP_AUX_FILTER_MODULES="$HTTP_AUX_FILTER_MODULES ngx_http_upstream_error_go_module"NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_addon_dir/ngx_http_upstream_error_go_module.c"

将源代码和配置文件放到某个目录下,编译nginx(版本1.7.4测试通过)带上此模块即可,测试工具可用Test::Nginx(perl -t t/test.t或prove -r t),测试代码如下

use Test::Nginx::Socket;repeat_each(1);plan tests => 1 * repeat_each() * blocks();our $config = <<"_EOC_";        location /foo {            fastcgi_pass   127.0.0.1;            up_error_code   403 404 502 500 503 504 505;            up_error_go     /index.html;        }_EOC_run_tests();__DATA__=== TEST 1: upstream 403--- http_config eval"    server{        listen  127.0.0.1:80;        location /foo {            return 403;        }    }"--- config eval: $::config--- requestGET /foo--- error_code: 200=== TEST 2: upstream 404--- http_config eval"    server{        listen  127.0.0.1:80;        location /foo {            return 404;        }    }"--- config eval: $::config--- requestGET /foo--- error_code: 200=== TEST 3: upstream 502--- http_config--- config eval: $::config--- requestGET /foo--- error_code: 200

nginx服务器屏蔽上游错误码