老闆出國訪問不了公司的系統，想起當時設定了nginx，只允許中國的IP地址訪問。註釋掉規則後，老闆可以訪問公司系統。這裡寫篇部落格，記錄一下GeoIP模組的使用。我在aws上啟用了一個免費的主機，用的centos的映象。

[[email protected] ~]# vi /etc/yum.repos.d/nginx.repo 
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/6/$basearch/
gpgcheck=0
enabled=1
[[email protected] ~]# yum install nginx -y
[
 
[email protected] ~]# service nginx start
Starting nginx:Starting nginx:                                            [  OK  ]

[[email protected] ~]# yum install nginx-module-geoip -y
Loaded plugins: fastestmirror, refresh-packagekit, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: mirrors.aliyun.com
 * extras: mirrors.aliyun.com
 * updates: mirrors.aliyun.com
Resolving Dependencies
--> Running transaction check
---> Package nginx-module-geoip.x86_64 0:1.14.0-1.el6.ngx will be installed
--> Processing Dependency: GeoIP for package: nginx-module-geoip-1.14.0-1.el6.ngx.x86_64
--> Processing Dependency: libGeoIP.so.1()(64bit) for package: nginx-module-geoip-1.14.0-1.el6.ngx.x86_64
--> Finished Dependency Resolution
Error: Package: nginx-module-geoip-1.14.0-1.el6.ngx.x86_64 (nginx)
           Requires: GeoIP
Error: Package: nginx-module-geoip-1.14.0-1.el6.ngx.x86_64 (nginx)
           Requires: libGeoIP.so.1()(64bit)
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest
 

報錯，通過yum search geoip查詢，發現倉庫裡沒有安裝包。

安裝epel倉庫，yum install epel-release -y，再次查詢，倉庫裡有GeoIP安裝包

wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz

解壓後，我就放在了nginx目錄下。

4.修改配置檔案，使用IP篩選

為方便所有站點使用，我直接在/etc/nginx/nginx.conf中寫入載入

load_module /usr/lib64/nginx/modules/ngx_http_geoip_module.so;
load_module /usr/lib64/nginx/modules/ngx_stream_geoip_module.so;
...
geoip_country /etc/nginx/GeoIP.dat;
 

配置單個站點使用規則，開啟/etc/nginx/conf.d/default.conf

set $deny 0;
    if ($geoip_country_code != "CN"){
        set $deny 1;
        return 302 $scheme://$host/405.html;
    }
    if ($deny = 1){
        return 302 $scheme://$host/405.html;
    }

這裡設定的，非中國IP不能訪問。

走代理測試成功。