如果只是针对nginx下的某一个域名进行访问的白名单限制，那么可以在nginx的配置文件里进行设置，利用$remote_addr参数进行访问的分发限制，如下：

    1. [root@china vhosts]# cat testwww.wangshibo.com.conf
    2. server {
    3.         listen       80;
    4.         server_name  testwww.wangshibo.com;
    5.         root /var/www/vhosts/testwww.wangshibo.com/httpdocs/main;
    8.         access_log  /var/www/vhosts/testwww.wangshibo.com/logs/access.log  main;
    9.         error_log  /var/www/vhosts/testwww.wangshibo.com/logs/error.log;
    12.         ##白名单设置，只允许下面三个来源ip的客户端以及本地能访问该站。主要是下面这三行
    13.         if ($remote_addr !~ ^(100.110.15.16|100.110.15.17|100.110.15.18|127.0.0.1)) {
    14.          rewrite ^.*$ /maintence.php last;
    15.         }
    17.         location / {
    18.             try_files $uri $uri/ @router;
    19.             index  index.php;
    20.         }
    23.         error_page   500 502 503 504  /50x.html;
    25.         location @router {
    26.             rewrite ^.*$ /index.php last;
    27.         }
    30.         location ~ \.php$ {
    31.             fastcgi_pass   127.0.0.1:9001;
    32.             fastcgi_read_timeout 30;
    33.             fastcgi_index  index.php;
    34.             fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    35.             #include        fastcgi_params;
    36.             include        fastcgi.conf;
    37.         }
    39.     }
    42. 错误页面内容设置：
    43. [root@china vhosts]# cat /var/www/vhosts/testwww.wangshibo.com/main/maintence.html
    44. <html>
    45. <head>
    46. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    47. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
    48. </head>
    49. <body>
    50. 网站临时维护中，请稍后访问...
    51. </body>
    52. </html>

    也可以使用$http_x_forwarded_for参数进行访问的分发限制，如下：

    1. server {
    2.         listen       80;
    3.         server_name  testwww.wangshibo.com;
    4.         root /var/www/vhosts/testwww.wangshibo.com/httpdocs/main;
    7.         access_log  /var/www/vhosts/testwww.wangshibo.com/logs/access.log  main;
    8.         error_log  /var/www/vhosts/testwww.wangshibo.com/logs/error.log;
    11.   ##白名单设置，只允许下面三个来源ip的客户端以及本地能访问该站。
    12.        if ($http_x_forwarded_for !~ ^(100.110.15.16|100.110.15.17|100.110.15.18|127.0.0.1)) {
    13.            rewrite ^.*$  /maintence.php last;
    14.         }
    17.         location / {
    18.             try_files $uri $uri/ @router;
    19.             index  index.php;
    20.         }
    23.         error_page   500 502 503 504  /50x.html;
    25.         location @router {
    26.             rewrite ^.*$ /index.php last;
    27.         }
    30.         location ~ \.php$ {
    31.             fastcgi_pass   127.0.0.1:9001;
    32.             fastcgi_read_timeout 30;
    33.             fastcgi_index  index.php;
    34.             fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    35.             #include        fastcgi_params;
    36.             include        fastcgi.conf;
    37.         }
    39.     }

    还可以利用nginx的allow、deny参数进行访问限制

    1. [root@china vhosts]# cat testwww.wangshibo.com.conf
    2. server {
    3.         listen       80;
    4.         server_name  testwww.wangshibo.com;
    5.         root /var/www/vhosts/testwww.wangshibo.com/httpdocs/main;
    8.         access_log  /var/www/vhosts/testwww.wangshibo.com/logs/access.log  main;
    9.         error_log  /var/www/vhosts/testwww.wangshibo.com/logs/error.log;
    11.         ##白名单设置，只允许下面三个来源ip的客户端以及本地能访问该站。
    12.         allow 100.110.15.16;
    13.         allow 100.110.15.17;
    14.         allow 100.110.15.18;
    15.         allow 127.0.0.1;
    16.         deny all;
    18.         location / {
    19.             try_files $uri $uri/ @router;
    20.             index  index.php;
    21.         }
    24.         error_page   500 502 503 504  /50x.html;
    26.         location @router {
    27.             rewrite ^.*$ /index.php last;
    28.         }
    31.         location ~ \.php$ {
    32.             fastcgi_pass   127.0.0.1:9001;
    33.             fastcgi_read_timeout 30;
    34.             fastcgi_index  index.php;
    35.             fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    36.             #include        fastcgi_params;
    37.             include        fastcgi.conf;
    38.         }
    40.     }