Coding-Notebook

Nginx 编译使用 IPv6

检查现有 Nginx 是否支持 IPv6

首先检查现有的 Nginx 是否支持 IPv6，输入命令

$ nginx -V

nginx version: nginx/1.16.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC)
built with OpenSSL 1.0.2k-fips  26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http_stub_status_module --without-http-cache --with-http_ssl_module --with-http_gzip_static_module

可以看到现有的模块并没有 IPv6 模块--with-ipv6，需要重新编译。

下载解压 Nginx

官网下载 http://nginx.org/en/download.html，解压

$ tar xzvf nginx-1.16.1.tar.gz

进入目录

$ cd nginx-1.16.1

编译 IPv6 模块

在原有的模块基础上加上--with-ipv6，

 ./configure --prefix=/usr/local/nginx --with-http_stub_status_module --without-http-cache --with-http_ssl_module --with-http_gzip_static_module --with-ipv6
checking for OS
 + Linux 2.6.32-042stab123.9 x86_64
checking for C compiler ... found
 + using GNU C compiler
 + gcc version: 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC)
checking for gcc -pipe switch ... found
checking for -Wl,-E switch ... found
......
  nginx http uwsgi temporary files: "uwsgi_temp"
  nginx http scgi temporary files: "scgi_temp"

./configure: warning: the "--with-ipv6" option is deprecated

检查，最后报 warning 并没有出错，所以接下来可以编译

$ make
make -f objs/Makefile
make[1]: Entering directory `/home/sjiao/nginx-1.16.1'
cc -c -pipe  -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g  -I src/core -I src/event -I src/event/modules -I src/os/unix -I objs \
        -o objs/src/core/nginx.o \
        src/core/nginx.c
cc -c -pipe  -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g  -I src/core -I src/event -I src/event/modules -I src/os/unix -I objs \
        -o objs/src/core/ngx_log.o \
        src/core/ngx_log.c
......
objs/ngx_modules.o \
-ldl -lpthread -lcrypt -lpcre -lssl -lcrypto -ldl -lpthread -lz \
-Wl,-E
sed -e "s|%%PREFIX%%|/usr/local/nginx|" \
        -e "s|%%PID_PATH%%|/usr/local/nginx/logs/nginx.pid|" \
        -e "s|%%CONF_PATH%%|/usr/local/nginx/conf/nginx.conf|" \
        -e "s|%%ERROR_LOG_PATH%%|/usr/local/nginx/logs/error.log|" \
        < man/nginx.8 > objs/nginx.8
make[1]: Leaving directory `/home/sjiao/nginx-1.16.1'

编译完成，进入objs目录查看目标文件，

$ cd objs

安装替换编译完成的版本

停止 Nginx 服务，对原来 Nginx 备份，用编译好的替换

$ service nginx stop

$ cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak
/bin/systemctl stop  nginx.service
$ cp nginx /usr/local/nginx/sbin/nginx
cp: overwrite ‘/usr/local/nginx/sbin/nginx’? y

执行指令查看已安装的模块，看到--with-ipv6表明安装完成

$ nginx -V
nginx version: nginx/1.16.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC)
built with OpenSSL 1.0.2k-fips  26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-http_stub_status_module --without-http-cache --with-http_ssl_module --with-http_gzip_static_module --with-ipv6

恢复服务，即可使用。

$ service nginx start

Nginx 配置修改

在完成 DNS 解析的 AAAA 配置后，还需要修改服务器配置文件，以同时支持 IPv4 和 IPv6。Nginx 需要在conf配置文件中加入listen [::]:80 ipv6only=on;（其中较新版本的 Nginx 默认开启ipv6only）

server {
    listen 80;
    listen [::]:80 ipv6only=on;
    server_name _;
    root /data/www;
}

server {
    listen 443;
    listen [::]:443 ipv6only=on;
    server_name _;
    ssl on;
    root /data/www;
}

Oneinstack 配置方法

在 Oneinstack 的include/目录下找到nginx.sh，修改第31行，添加--with-ipv6参数，

  ./configure --prefix=${nginx_install_dir} --user=${run_user} --group=${run_group} --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_ssl_module --with-http_gzip_static_module --with-http_realip_module --with-http_flv_module --with-http_mp4_module --with-ipv6 --with-openssl=../openssl-${openssl11_ver} --with-pcre=../pcre-${pcre_ver} --with-pcre-jit --with-ld-opt='-ljemalloc' ${nginx_modules_options}

保存，重新安装即可。

IPv6 可用测试

https://ipv6-test.com/validate.php

参考来源

This site is open source. Improve this page.