initial push

Author: sdutta9

labs/lab5/docker-compose.yml

@@ -0,0 +1,45 @@
+# NGINX Plus Proxy with tools build
+# NGINX webservers with ingress-demo pages
+# NGINX Basics, Nov 2024
+# Chris Akker, Shouvik Dutta, Adam Currier
+#
+services:
+  nginx-plus:                  # NGINX Plus Web / Load Balancer
+    hostname: nginx-plus
+    container_name: nginx-plus
+    image: nginx-plus:workshop  # From Lab1
+    volumes:                    # Sync these folders to container
+        - ./nginx-plus/etc/nginx/nginx.conf:/etc/nginx/nginx.conf
+        - ./nginx-plus/etc/nginx/conf.d:/etc/nginx/conf.d
+        - ./nginx-plus/etc/nginx/includes:/etc/nginx/includes
+        - ./nginx-plus/usr/share/nginx/html:/usr/share/nginx/html
+    links:
+        - web1:web1
+        - web2:web2
+        - web3:web3
+    ports:
+        - 80:80       # Open for HTTP
+        - 443:443     # Open for HTTPS
+        - 9000:9000   # Open for API / dashboard page
+    restart: always     
+  web1:
+      hostname: web1
+      container_name: web1
+      image: nginxinc/ingress-demo            # Image from Docker Hub
+      ports:
+        - "80"                                # Open for HTTP
+        - "443"                               # Open for HTTPS
+  web2:
+      hostname: web2
+      container_name: web2
+      image: nginxinc/ingress-demo
+      ports:
+        - "80"
+        - "433"
+  web3:
+      hostname: web3
+      container_name: web3
+      image: nginxinc/ingress-demo
+      ports:
+        - "80"
+        - "443"     

labs/lab5/final/cafe.example.com.conf

@@ -0,0 +1,32 @@
+# cafe.example.com HTTP
+# NGINX Basics Workshop
+# Feb 2024, Chris Akker, Shouvik Dutta
+#
+server {
+    
+    listen 80;      # Listening on port 80 on all IP addresses on this machine
+
+    server_name cafe.example.com;   # Set hostname to match in request
+
+    # Uncomment the zone directive below to add metrics to the Dashboard
+    status_zone cafe-VirtualServer;
+        
+    # access_log  /var/log/nginx/cafe.example.com.log main;
+    access_log  /var/log/nginx/cafe.example.com.log main_ext;   Extended Logging
+    error_log   /var/log/nginx/cafe.example.com_error.log info;
+
+    location / {
+        
+        # Uncomment the status_zone directive below to add metrics to the Dashboard
+        status_zone /;
+            
+        # Uncomment to enable proxy headers and HTTP keep-alives
+        include includes/proxy_headers.conf;
+        include includes/keepalive.conf;
+        
+        # proxy_pass http://web1;            # Proxy to another server
+        # proxy_pass http://nginx.org;       # Proxy to another website
+        proxy_pass http://nginx_cafe;        # Proxy AND load balance to a list of servers
+    }
+
+} 

labs/lab5/final/nginx.conf

@@ -0,0 +1,33 @@
+
+user  nginx;
+worker_processes  4;   # Change to use 4 workers/cores
+
+error_log  /var/log/nginx/error.log info;
+pid        /var/run/nginx.pid;
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    include /etc/nginx/includes/log_formats/*.conf; # Custom Access logs formats found here
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    #gzip  on;
+
+    include /etc/nginx/conf.d/*.conf;
+}

labs/lab5/final/upstreams.conf

@@ -0,0 +1,27 @@
+# NGINX Basics, OSS Proxy to three upstream NGINX web servers
+# Chris Akker, Shouvik Dutta - Feb 2024
+#
+# nginx-cafe servers 
+upstream nginx_cafe {
+
+    # Load Balancing Algorithms supported by NGINX
+    # - Round Robin (Default if nothing specified)
+    # - Least Connections
+    # - IP Hash
+    # - Hash (Any generic Hash)     
+
+    # Uncomment for Least Connections algorithm      
+    least_conn;
+
+    # From Docker-Compose:
+    server web1:80;
+    server web2:80;
+    server web3:80;
+
+    # Uncomment for IP Hash persistence
+    # ip_hash;
+
+    # Uncomment for keepalive TCP connections to upstreams
+    keepalive 16;
+
+}

labs/lab5/media/chrome-icon.png

@@ -0,0 +1,2 @@
+FROM nginx:mainline-alpine
+RUN apk add --no-cache curl ca-certificates bash bash-completion jq wget vim

labs/lab5/media/curl-icon.png

@@ -0,0 +1,31 @@
+    # cafe.example.com HTTP
+    # NGINX Basics Workshop
+    # Nov 2024, Chris Akker, Shouvik Dutta, Adam Currier
+    #
+    server {
+        
+        listen 80;      # Listening on port 80 on all IP addresses on this machine
+
+        server_name cafe.example.com;   # Set hostname to match in request
+        
+        # Uncomment the zone directive below to add metrics to the Dashboard
+        # status_zone cafe-VirtualServer;
+
+        access_log  /var/log/nginx/cafe.example.com.log main; 
+        error_log   /var/log/nginx/cafe.example.com_error.log info;
+
+        location / {
+            # Uncomment the status_zone directive below to add metrics to the Dashboard
+            # status_zone /;
+            
+            # Uncomment to enable HTTP keepalives and Request Headers
+            # include includes/keepalive.conf;     # Use HTTP/1.1 keepalives
+
+            # include includes/proxy_headers.conf; # Add Request Headers
+            
+            # New NGINX Directive, "proxy_pass", tells NGINX to proxy traffic to another server.
+            
+            proxy_pass http://web1;        # Send requests to upstreams
+        }
+
+    } 

labs/lab5/media/dashboard-http-upstreams.png

@@ -0,0 +1,24 @@
+# NGINX Plus Basics, Nov 2024
+# Chris Akker, Shouvik Dutta, Adam Currier
+# dashboard.conf
+#
+server {
+    # Conventional port for the NGINX Plus API is 8080
+    listen 9000;
+    access_log off;    # reduce noise in access logs
+
+    location /api/ {
+    # Enable in read-write mode
+    api write=on;
+    }
+    # Conventional location of the NGINX Plus dashboard
+    location = /dashboard.html {
+        root /usr/share/nginx/html;
+    }
+
+    # Redirect requests for "/" to "/dashboard.html"
+    location / {
+        return 301 /dashboard.html;
+    }
+}
+    

labs/lab5/media/dashboard-http-zones.png

@@ -0,0 +1,45 @@
+server {
+    listen       80;
+    server_name  localhost;
+
+    #charset koi8-r;
+    #access_log  /var/log/nginx/host.access.log  main;
+
+    location / {
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+    }
+
+    #error_page  404              /404.html;
+
+    # redirect server error pages to the static page /50x.html
+    #
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/share/nginx/html;
+    }
+
+    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
+    #
+    #location ~ \.php$ {
+    #    proxy_pass   http://127.0.0.1;
+    #}
+
+    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
+    #
+    #location ~ \.php$ {
+    #    root           html;
+    #    fastcgi_pass   127.0.0.1:9000;
+    #    fastcgi_index  index.php;
+    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
+    #    include        fastcgi_params;
+    #}
+
+    # deny access to .htaccess files, if Apache's document root
+    # concurs with nginx's one
+    #
+    #location ~ /\.ht {
+    #    deny  all;
+    #}
+}
+

labs/lab5/media/docker-icon.png

@@ -0,0 +1,35 @@
+    # NGINX Basics, Plus Proxy to three upstream NGINX containers
+    # Nov 2024 - Chris Akker, Shouvik Dutta, Adam Currier
+    #
+    # nginx_cafe servers
+
+    upstream nginx_cafe {         # Upstream block, the name is "nginx_cafe"
+    
+       # Uncomment the zone directive below to add metrics to the Dashboard
+       # zone nginx_cafe 256k;
+
+        # Load Balancing Algorithms supported by NGINX
+        # - Round Robin (Default if nothing specified)
+        # - Least Connections
+        # - IP Hash
+        # - Hash (Any generic Hash)
+
+        # Load Balancing Algorithms supported by NGINX Plus
+        # - Least Time Last Byte / Header
+        # - Random Two     
+
+        # Uncomment for Least Time Last Byte algorithm      
+        # least_time last_byte;
+
+        # From Docker-Compose:
+        server web1:80;
+        server web2:80;
+        server web3:80;
+
+        #U ncomment for Cookie persistence
+        # sticky cookie srv_id expires=1m domain=.example.com path=/;
+
+        # Uncomment for keepalive TCP connections to upstreams
+        # keepalive 16;
+
+    }

labs/lab5/media/lab4_cafe-perf-keepalive.png

@@ -0,0 +1,11 @@
+#Nginx Basics - Nov 2024
+#Chris Akker, Shouvik Dutta, Adam Currier
+#
+# Default is HTTP/1.0 to upstreams, keepalives is only enabled for HTTP/1.1
+proxy_http_version 1.1;
+
+# Set the Connection header to empty 
+proxy_set_header Connection "";
+
+# Host request header field, or the server name matching a request
+proxy_set_header Host $host;

labs/lab5/media/lab4_cafe-perf-weighted.png

@@ -0,0 +1,20 @@
+# Extended Log Format
+# Nginx Basics
+log_format  main_ext    'remote_addr="$remote_addr", '
+                        '[time_local=$time_local], '
+                        'request="$request", '
+                        'status="$status", '
+                        'http_referer="$http_referer", '
+                        'body_bytes_sent="$body_bytes_sent", '
+                        'Host="$host", '
+                        'sn="$server_name", '
+                        'request_time=$request_time, '
+                        'http_user_agent="$http_user_agent", '
+                        'http_x_forwarded_for="$http_x_forwarded_for", '
+                        'request_length="$request_length", '
+                        'upstream_address="$upstream_addr", '
+                        'upstream_status="$upstream_status", '
+                        'upstream_connect_time="$upstream_connect_time", '
+                        'upstream_header_time="$upstream_header_time", '
+                        'upstream_response_time="$upstream_response_time", '
+                        'upstream_response_length="$upstream_response_length", ';

labs/lab5/media/lab4_chrome-keepalive.png

@@ -0,0 +1,15 @@
+# Extended SSL Log Format
+# Nginx Basics
+log_format main_ssl 'remote_addr="$remote_addr", '
+                        '[time_local=$time_local], '
+                        'request="$request", '
+                        'status="$status", '
+                        'http_referer="$http_referer", '
+                        'body_bytes_sent="$body_bytes_sent", '
+                        'Host="$host", '
+                        'sn="$server_name", '
+                        'request_time=$request_time, '
+                        'http_user_agent="$http_user_agent", '
+                        'http_x_forwarded_for="$http_x_forwarded_for", '
+                        'request_length="$request_length", ' 'ssl_ver="$ssl_protocol", ' 'ssl_cipher="$ssl_cipher", ' 'ssl_sname="$ssl_server_name", ' 'ssl_sess_id="$ssl_session_id", '  ;
+

labs/lab5/media/lab4_dashboard.png

@@ -0,0 +1,14 @@
+#Nginx Basics - Nov 2024
+#Chris Akker, Shouvik Dutta, Adam Currier
+#
+## Set Headers to the proxied servers ##
+
+# client address in binary, value’s length is always 4 bytes for IPv4 addresses or 16 bytes for IPv6 addresses
+proxy_set_header X-Real-IP $remote_addr;
+
+# X-Forwarded-For client request header field with the $remote_addr variable appended to it
+
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+# request scheme, “http” or “https”
+proxy_set_header X-Forwarded-Proto $scheme;

labs/lab5/media/lab4_docker-perf-4core.png

@@ -0,0 +1,32 @@
+user  nginx;
+worker_processes  1;
+
+error_log  /var/log/nginx/error.log info;
+pid        /var/run/nginx.pid;
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    include /etc/nginx/includes/log_formats/*.conf; # Custom Access logs formats found here
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    #gzip  on;
+
+    include /etc/nginx/conf.d/*.conf;
+}