💡 需求：
1.国内用户访问英德文站跳转统一跳转zk.cn
2.国外用户访问固定站 en.zk.com/de.zk.com ( 未作调整)

模块 —with-http_geoip_module
官网 https://dev.maxmind.com/

1.编译安装Nginx

参考：https://www.cnblogs.com/clsn/p/7750615.html

2.Nginx配置

  2. #user  nobody;
  3. worker_processes  1;
  5. events {
  6.     worker_connections  1024;
  7. }
  10. http {
  11.     include       mime.types;
  12.     default_type  application/octet-stream;
  14.     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  15.                       '$status $body_bytes_sent "$http_referer" '
  16.                       '"$http_user_agent" "$http_x_forwarded_for"';
  18.     access_log  logs/access.log  main;
  20.     sendfile        on;
  21.     keepalive_timeout  65;
  23.     #gzip  on;
  24.     geoip_country  /server/tools/nginx-1.20.1/geoip/GeoIP.dat;
  25.     geoip_city  /server/tools/nginx-1.20.1/geoip/GeoLiteCity.dat;
  26. ##############################################################测试 #################################################################
  28.     server {
  29.         listen       81;
  30.         server_name  localhost;
  31.         root  /server/tools/nginx-1.20.1/html;
  32.         #charset koi8-r;
  34.         #access_log  logs/host.access.log  main;
  35.         location / {
  36.           if ($geoip_country_code = CN) {
  37.               root /server/tools/nginx-1.20.1/html;
  38.           }
  39.           if  ($geoip_country_code != CN) {
  40.               root /server/tools/nginx-1.20.1/html/test;
  41.           }
  43.      }   
  45. }
  48. ##############################################################英文 官网#################################################################
  49. server {
  50.         listen 443 ssl;
  51.         server_name www.zk.com en.zk.com;
  52.         root /ftpshare;
  53.         index index.php index.html;
  54.         ssl_certificate /server/tools/nginx-1.20.1/ssl/6543710__zk.com.pem;
  55.         ssl_certificate_key /server/tools/nginx-1.20.1/ssl/6543710__zk.com.key;
  56.         ssl_session_timeout  5m;    #缓存有效期
  57.         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    #加密算法
  58.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全链接可选的加密协议
  59.         ssl_prefer_server_ciphers on;   #使用服务器端的首选算法
  61. location / {
  62.          root /ftpshare;
  63.          if (!-e $request_filename){
  64.          rewrite ^(.*)$ /index.php?s=$1 last;
  65.          break;
  66.        }
  68.          if ($geoip_country_code = CN) {
  69.               rewrite ^/(.*) https://www.zk.cn;
  70.           }
  72. }
  75. location ~*  .*\.(jpg|gif|png)$ {
  76.         root /ftpshare;
  77.         gzip on;
  78.         gzip_http_version 1.1;
  79.         gzip_comp_level 2;
  80.         gzip_types text/plain application/json application/x-javascript application/css application/xml application/xml+rss text/javascript application/x-httpd-php image/jpeg image/gif image/png;
  82.         }
  84. location ~ .*\.(jpg||jpeg|gif|png)$ {
  85.     valid_referers none blocked test.zk.com;
  86.     if ($invalid_referer) {
  87.         return 403;
  88.     }
  89. }
  91. location ~ \.php$ {
  92.             root /ftpshare;
  93.             index index.php index.html;
  94.             fastcgi_pass   127.0.0.1:9000;
  95.             fastcgi_index  index.php;
  96.             fastcgi_param  SCRIPT_FILENAME  /ftpshare$fastcgi_script_name;
  97.             include        fastcgi_params;
  99.         }
  100. }
  102. server {
  103.     listen       80;
  104.     server_name  www.zk.com zk.com;
  105.     return 301 https://$server_name$request_uri;
  106. }
  109. ##############################################################德文 官网#################################################################
  112. server {
  113.         listen 443 ssl;
  114.         server_name de.zk.com;
  115.         root /usr/share/nginx/html;
  116.         index index.php index.html;
  117.         ssl_certificate /server/tools/nginx-1.20.1/ssl/6543710__zk.com.pem;
  118.         ssl_certificate_key /server/tools/nginx-1.20.1/ssl/6543710__zk.com.key;
  119.         ssl_session_timeout  5m;    #缓存有效期
  120.         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    #加密算法
  121.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全链接可选的加密协议
  122.         ssl_prefer_server_ciphers on;   #使用服务器端的首选算法
  127. location / {
  128.          root /usr/share/nginx/html;
  129.          if (!-e $request_filename){
  130.          rewrite ^(.*)$ /index.php?s=$1 last;
  131.          break;
  132.            }
  135.          if ($geoip_country_code = CN) {
  136.               rewrite ^/(.*) https://www.zk.cn;
  137.           }
  139.        }
  143. location ~*  .*\.(jpg|gif|png)$ {
  144.         root /usr/share/nginx/html;
  145.         gzip on;
  146.         gzip_http_version 1.1;
  147.         gzip_comp_level 2;
  148.         gzip_types text/plain application/json application/x-javascript application/css application/xml application/xml+rss text/javascript application/x-httpd-php image/jpeg image/gif image/png;
  150.         }
  152. location ~ .*\.(jpg||jpeg|gif|png)$ {
  153.         valid_referers none blocked test.zk.com;
  154.         if ($invalid_referer) {
  155.         return 403;
  156.            }
  157.         }
  159.         location ~ \.php$ {
  160.             root /usr/share/nginx/html;
  161.             index index.php index.html;
  162.             fastcgi_pass   127.0.0.1:9000;
  163.             fastcgi_index  index.php;
  164.             fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  165.             include        fastcgi_params;
  166.         }
  167. }
  169. } #http区块

3.相关工具

GeoIP.datGeoLiteCity.dat