Hotlink Prevention In Nginx

Frank — Mon, 03 Jan 2011 05:52:59 +0000

Hotlinking, inline linking, leeching, piggy-backing, direct linking or offsite image grabs. No matter what you call it 99% of the time it’s wrong. Bandwidth costs money. I spent sometime over the holidays examining my logs and noticed that there were a ton of sites hotlinking back to images we had posted. Worst of all, most of them were profiting off the images.

Here at tech.nocr.at we run nginx as a front-end proxy to WordPress. Stopping hotlinking in nginx is as simple as adding a small snippet of code in your sites-enabled file. Add the following code inside your server statement.

location ~* ^.+\.(jpg|jpeg|gif|png)$ {
  root   /path/to/webroot;
  valid_referers none blocked server_names ~(yourdomain.com|google.|yahoo.|bing.);
  if ($invalid_referer)  {
  return 403;
  }
}

The above will allow images to be displayed if they come from your domain, google, yahoo and bing. If you have other sites you might want your images to be linked from just add them in the valid_referers statement. If someone tries to hotlink to one of your images they will receive a 403 error. If you wish to have a different image displayed instead of the 403 error, letting them know they are hotlinking, then you must replace the return 403; line with this:

rewrite  ^  http://yourdomain.com/hotlink.jpe;

Notice how the image file ends in .jpe? If it were you end in .jpg it would end up in a loop and never be displayed. Simply create the image you want to use and change it’s extension to .jpe before you upload it to your web host.

Hotlink Prevention In Nginx originally appeared on tech.nocr.at on 2011/01/03. Reproduction of content not allowed without consent.

Top 10 Of 2010

Frank — Wed, 29 Dec 2010 05:51:37 +0000

Another year is almost behind us and thanks to our dedicated and loyal readers our 3rd successful year bringing you the latest in gadgets, gaming, technology and the bizarre.

We have brought the monkeys in (by monkeys we mean a crafty worded perl script) and have compiled the the most viewed posts here on tech.nocr.at. This list doesn’t just contain posts from 2010, it contains the top ten most viewed posts this year regardless of when they were created.

Without further ado, tech.nocr.at’s top 10 posts of 2010:

Let us know in the comments what were your favorite posts of 2010.

Top 10 Of 2010 originally appeared on tech.nocr.at on 2010/12/29. Reproduction of content not allowed without consent.

© tech.nocr.at 2010 | Permalink | Comments | Read more in Tech News | Explore more in: 2010, ac, cable, cat, comments, distro, diy, door, ds, ea, game, Gaming, id, ipod, key, keys, knock, led, leech, linux, loa, lock, mobile, nginx, open, os, pen, press, ring, rip, secret, sega, shuffle, speed, tech.nocr.at, technology, vga, wifi, wordpress, wp super cache | Add to del.icio.us | Stumble it | Reddit

How To Speed Up WordPress With Nginx And WP Super Cache

Frank — Tue, 12 Aug 2008 03:43:16 +0000

Edit: Fixes suggested in the comments have been applied to this howto

We recently moved tech.nocr.at over to a bunch of VPSs in order to achieve some decent load balancing and speed. Even though SliceHost isn’t a sponsor, I’d like to give them a quick plug. SliceHost is easily the greatest VPS provider bar none. You pick the Distro you want, you tweak it, you set it up, all ports are available, you do as you wish. If you setup multiple VPS with them you can even have private IP’s between them in order to load balance or cluster. Prices start as low as $20/month. If you use them, click this link so that I can get some referral love. Now on to the article..

WordPress can be a blessing and a pain at the same time. It’s great for displaying dynamic content yet it’s displaying that exact dynamic content that can put a massive stress load on your system. WordPress’s query routines aren’t exactly the best. Let’s not even go into how much of a hog Apache can be, but for running dynamic content and prettying up your url’s, mod_rewrite can’t be beat. By using WP Super Cache to help reduce the load on your SQL queries and by placing Nginx in front of Apache as a reverse proxy, you’d be amazed and how quickly your site will load and respond, even enough to withstand a digg of slashdot effect.

Here’s what you are going to need.

This how-to system assumes that you have your Webserver running under a debian style distro like Ubuntu, but It can easily be modified for other distros like Fedora or CentOS.

Assuming that you already have WordPress running under Apache the first thing we are going to do is install the Wp-Super-Cache plugin and active it under your plugin folder of your WordPress installation. Pay close attention to the installation steps in the included readme.txt file, you have to follow each step properly in order to ensure proper caching.

Wp-Super-Cache creates static html files of your pages lessening the load on your SQL queries. Once you have it running and working let’s move on to our next step, reconfiguring Apache.

Apache can be a resource hog, especially when it has to span multiple child processes in order to serve up content. We are going to have to do some tweaking to apache’s conf file so that it will work behind Nginx.

Open up your /etc/apache2/ports.conf file

sudo nano /etc/apache2/ports.conf

We need to change Apache from port 80 to 8080 as Nginx will be server content to the real world via port 80.

Listen 8080

Next we are going to turn KeepAlives off on Apache since Nginx will be dealing with all of the actual browser connections. This will ensure that all of the child processes in Apache die quickly and don’t hang around chewing up memory

Find the KeepAlive entry in your /etc/apache2/apache2.conf file and set it to off

KeepAlive Off

Now that we have made the needed changes in apache we need to restart it so that they take effect.

sudo /etc/init.d/apache2 restart

Next we are going to install Nginx which is a powerful and extremely lightweight http server that is perfect for reverse proxying or load balancing to backend servers like Apache.

sudo apt-get update | sudo apt-get install nginx

Once nginx is installed we are going to need to modify it’s config file located at /etc/nginx/nginx.conf

sudo nano /etc/nginx/nginx.conf

Your conf file should look like this.

user www-data;
worker_processes  2;
 
error_log  /var/log/nginx/error.log;
pid        /var/run/nginx.pid;
 
events {
	worker_connections  1024;
}
 
http {
	include       /etc/nginx/mime.types;
	default_type  application/octet-stream;
	access_log  /var/log/nginx/access.log;
	sendfile        on;
	tcp_nopush     on;
	keepalive_timeout  3;
	tcp_nodelay        on;
	gzip  on;
	include /etc/nginx/sites-enabled/*;
}

Now we need to move on to the actual site config file for our Nginx setup

sudo nano /etc/nginx/sites-available/default

Your file should look something like this (replace domain.com of course)

server {
        listen   80;
        server_name  domain.com www.domain.com;
        error_log   /var/log/nginx/domain.com.error.log;
        access_log  /var/log/nginx/domain.com.access.log;
 
# Main location (path to you blog, relative to your domain root)
        location / {
            proxy_pass         http://127.0.0.1:8080/;
            proxy_redirect     off;
 
            proxy_set_header   Host             $http_host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
 
            client_max_body_size       10m;
            client_body_buffer_size    128k;
 
            proxy_connect_timeout      90;
            proxy_send_timeout         90;
            proxy_read_timeout         90;
 
            proxy_buffer_size          4k;
            proxy_buffers              4 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;
        }
 
    # Static files location
        location ~* ^.+\.(htm|html|jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js)$ {
            root   /;
        }
	# if the requested file exists, return it immediately
	if (-f $request_filename) {
	break;
	}
 
	set $supercache_file '';
	set $supercache_uri $request_uri;
 
	if ($request_method = POST) {
	set $supercache_uri '';
	}
 
	# Using pretty permalinks, so bypass the cache for any query string
	if ($query_string) {
	set $supercache_uri '';
	}
 
	if ($http_cookie ~* "comment_author_|wordpress|wp-postpass_" ) {
	set $supercache_uri '';
	}
 
	# if we haven't bypassed the cache, specify our supercache file
	if ($supercache_uri ~ ^(.+)$) {
	set $supercache_file /wp-content/cache/supercache/$http_host/$1index.html;
	}
 
	# only rewrite to the supercache file if it actually exists
	if (-f $document_root$supercache_file) {
	rewrite ^(.*)$ $supercache_file break;
	}
}

The above (especially the if statements) help Ngnix pass the static html files that are created by WP Super Cache directly to the users thus freeing up Apache to do nothing more than handle the dynamic requests.

Now it’s time to restart Ngnix and get the whole ball of wax working

/etc/init.d/nginx restart

What we have essentially done is taken the load of serving static files like images, css, and js files off of apache and passed it on to Ngnix which runs a lot faster and leaner than apache for serving static content. All requests for any dynamic content like php still gets passed on to apache. Clean and simple.

In closing let me mention that this is just what works for me, i’m sure that there might be a better way to use WP Super Cache and Ngnix to speed up WordPress, but what you see above has really helped with the load on both of the tech.nocr.at front-end web servers.

How To Speed Up WordPress With Nginx And WP Super Cache originally appeared on tech.nocr.at on 2008/08/11. Reproduction of content not allowed without consent.

© tech.nocr.at 2008 | Permalink | 33 Comments | Read more in Tech News | Explore more in: 4k, ac, ball, blog, boost, bus, cat, comments, debian, digg, display, distro, ea, eff, error, fast, fix, follow, hd, howto, hp, id, images, ir, led, light, links, live, loa, mid, mod, nano, nes, nginx, open, os, pda, pdf, pen, power, press, proc, processes, rc, remote, reverse, ring, root, server, speed, stream, string, tech.nocr.at, time, ubuntu, ui, Untitled, update, wordpress, wp super cache, zip | Add to del.icio.us | Stumble it | Reddit

tech.nocr.at » nginx

Hotlink Prevention In Nginx

Top 10 Of 2010

How To Speed Up WordPress With Nginx And WP Super Cache