{"id":28380,"date":"2024-02-28T12:58:29","date_gmt":"2024-02-28T10:58:29","guid":{"rendered":"https:\/\/hostkoss.com\/b\/?p=28380"},"modified":"2024-07-13T12:42:45","modified_gmt":"2024-07-13T09:42:45","slug":"http-2-nginx-ubuntu","status":"publish","type":"post","link":"https:\/\/hostkoss.com\/b\/sk\/http-2-nginx-ubuntu\/","title":{"rendered":"Konfigur\u00e1cia podpory HTTP\/2 v Nginxe v Ubuntu 18.04"},"content":{"rendered":"\n

Nginx <\/strong> je webov\u00fd server s otvoren\u00fdm zdrojov\u00fdm k\u00f3dom, ktor\u00fd si z\u00edskal srdcia mnoh\u00fdch spr\u00e1vcov a v\u00fdvoj\u00e1rov v\u010faka svojmu efekt\u00edvnemu v\u00fdkonu, n\u00edzkej spotrebe pam\u00e4te a v\u00fdkonnej podpore r\u00f4znych protokolov. Dnes budeme hovori\u0165 o konfigur\u00e1cii podpory protokolu HTTP\/2 v syst\u00e9me Nginx.<\/p>\n\n\n\n

HTTP\/2<\/strong> je v\u00fdvojom protokolu HTTP, ktor\u00fd zlep\u0161uje prenos \u00fadajov medzi serverom a pou\u017e\u00edvate\u013eom. Nahr\u00e1dza protokol HTTP 1.1, ktor\u00fd mal limit na po\u010det simult\u00e1nnych spojen\u00ed, a preto spoma\u013eoval na\u010d\u00edtanie n\u00e1ro\u010dn\u00fdch str\u00e1nok. Protokol HTTP\/2 tento probl\u00e9m rie\u0161i t\u00fdm, \u017ee umo\u017e\u0148uje paraleln\u00e9 na\u010d\u00edtanie \u00fadajov a kompresiu hlavi\u010diek HTTP.<\/p>\n\n\n\n

Pre\u010do je prechod na HTTP\/2 d\u00f4le\u017eit\u00fd?<\/h2>\n\n\n\n

Prechod na protokol HTTP\/2 nielen\u017ee zr\u00fdch\u013euje<\/strong> na\u010d\u00edtavanie webov\u00fdch str\u00e1nok, ale zvy\u0161uje aj bezpe\u010dnos\u0165 prenosu \u00fadajov. V\u0161etky modern\u00e9 prehliada\u010de vy\u017eaduj\u00fa, aby webov\u00e9 str\u00e1nky pou\u017e\u00edvali protokol HTTPS, ktor\u00fd podporuje protokol HTTP\/2. V\u010faka tomu je prenos \u00fadajov medzi serverom a n\u00e1v\u0161tevn\u00edkmi bezpe\u010dnej\u0161\u00ed.<\/p>\n\n\n\n

Proces prechodu na HTTP\/2<\/h2>\n\n\n\n

Sk\u00f4r ako za\u010dnete nastavova\u0165 HTTP\/2 <\/strong>, mus\u00edte ma\u0165 nain\u0161talovan\u00fd server s Ubuntu 18.04 a Nginx. Na server mus\u00ed by\u0165 nasmerovan\u00fd aj n\u00e1zov va\u0161ej dom\u00e9ny a pre t\u00fato dom\u00e9nu mus\u00ed by\u0165 nain\u0161talovan\u00fd certifik\u00e1t SSL (napr\u00edklad Let’s Encrypt).<\/p>\n\n\n\n

1. Nastavenie servera<\/h2>\n\n\n\n

Otvorte konfigura\u010dn\u00fd s\u00fabor svojej dom\u00e9ny:<\/p>\n\n\n\n

vim \/etc\/nginx\/sites-available\/your_domain<\/code><\/pre>\n\n\n\n
Pridanie podpory protokolu HTTP\/2 pre pripojenia IPv6 a IPv4:<\/p>\n\n\n\n
listen [::]:443 ssl hp2 ipv6only=on;\nlisten 443 ssl http2;<\/code><\/pre>\n\n\n\n
Ulo\u017ete zmeny a skontrolujte syntax:<\/p>\n\n\n\n
nginx -t<\/code><\/pre>\n\n\n\n
2. Zlep\u0161en\u00e1 bezpe\u010dnos\u0165<\/h2>\n\n\n\n
Ak chcete zv\u00fd\u0161i\u0165 bezpe\u010dnos\u0165<\/strong>, vyl\u00fa\u010dte nezabezpe\u010den\u00e9 \u0161ifry. V konfigura\u010dnom s\u00fabore dom\u00e9ny zme\u0148te mo\u017enos\u0165 ssl_ciphers:<\/p>\n\n\n\n
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;<\/code><\/pre>\n\n\n\n
Skontrolujte syntax a re\u0161tartujte server:<\/p>\n\n\n\n
nginx -t\nsystemctl restart nginx.service<\/code><\/pre>\n\n\n\n
3. Pridanie protokolu HTTP Strict Transport Security (HSTS)<\/h2>\n\n\n\n
Ak chcete dosiahnu\u0165 e\u0161te v\u00e4\u010d\u0161ie zabezpe\u010denie<\/strong>, pridajte do konfigura\u010dn\u00e9ho s\u00faboru Nginx hlavi\u010dku HTTP Strict Transport Security. T\u00e1to hlavi\u010dka zabezpe\u010d\u00ed, \u017ee prehliada\u010de bud\u00fa pou\u017e\u00edva\u0165 iba spojenia HTTPS.<\/p>\n\n\n\n
V konfigura\u010dnom s\u00fabore Nginx:<\/p>\n\n\n\n
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" v\u017edy;<\/code><\/pre>\n\n\n\n
Skontrolujte syntax<\/strong> a re\u0161tartujte server.<\/p>\n\n\n\n
4. Kontrola spr\u00e1vneho fungovania protokolu HTTP\/2.<\/h2>\n\n\n\n
Protokol HTTP\/2 m\u00f4\u017eete otestova\u0165 pomocou pr\u00edkazu curl:<\/p>\n\n\n\n
curl -I -L https:\/\/\u0432\u0430\u0448_\u0434\u043e\u043c\u0435\u043d<\/code><\/pre>\n\n\n\n
V odpovedi servera mus\u00ed by\u0165 uveden\u00fd protokol HTTP\/2.<\/strong><\/p>\n\n\n\n
Na kontrolu podpory protokolu HTTP\/2 m\u00f4\u017eete pou\u017ei\u0165 aj prehliada\u010d Google Chrome a n\u00e1stroje pre v\u00fdvoj\u00e1rov.<\/p>\n\n\n\n
Teraz je va\u0161a webov\u00e1 str\u00e1nka pripraven\u00e1 na pr\u00e1cu s HTTP\/2<\/strong> – r\u00fdchlej\u0161ou a bezpe\u010dnej\u0161ou verziou protokolu HTTP \ud83d\ude80.<\/p>\n\n\n\n
\n
Nezabudnite v\u017edy<\/strong> udr\u017eiava\u0165 svoj server aktualizovan\u00fd a zabezpe\u010den\u00fd. Ve\u013ea \u0161\u0165astia!!!!<\/p>\n<\/blockquote>\n\n\n\n
<\/p>\n\n\n\n
Pre\u010d\u00edtajte si tie\u017e:<\/strong><\/p>\n\n\n\n