NGINX listens to domain names, not to listen to ports

In order for NGINX to listen to domain names without listening to ports, it is necessary to configure it in the configuration file: 1. Configure the virtual host and specify the domain name to listen to; 2. Delete the default listening port; 3. Configure DNS resolution; 4. Restart NGINX. This way, NGINX will only listen to the domain name, improve security and enable SNI.

NGINX listens to domain names, not ports

To have NGINX listen to domain names without ports, the following configuration needs to be performed in the configuration file:

1. Configure the virtual host

 <code>server { server_name www.example.com; }</code>

2. Delete the default listening ports (80 and 443)

 <code>listen 80; listen 443 ssl http2;</code>

3. Configure DNS resolution

Configure the DNS record for the domain name and resolve it to the server's IP address.

4. Restart NGINX

After the change takes effect, you need to restart NGINX:

 <code>sudo systemctl restart nginx</code>

How it works

With the above configuration, NGINX will only listen to the domain name, not the port. When a client accesses the server through a domain name, NGINX processes the request according to the virtual host configuration without using the port. This means that the server cannot be accessed directly through the port.

advantage

• Improve security: Listening to domain names only prevents attackers from finding servers through port scanning.
• Enable SNI: When used with HTTPS, this configuration allows Nginx to host multiple SSL certificates on a single IP address.

The above is the detailed content of NGINX listens to domain names, not to listen to ports. For more information, please follow other related articles on the PHP Chinese website!