基于Nginx实现IP域名过滤白名单

map $http_origin $corsHost {
default "";
"~http://www.diuut.com" http://www.diuut.com;
"~http://diuut.com" http://diuut.com;
"~https://www.diuut.com" https://www.diuut.com;
"~https://diuut.com" https://diuut.com;
}
#此处配置的是放行白名单，也可以替换成IP

server
{
    listen 80;
	listen 443 ssl http2;
    server_name diuut.com www.diuut.com;
    index index.php index.html index.htm default.php default.htm default.html;
    #.....略过其他配置.......
     location /restfull/ {
            #上下文可替换为其他接口调用上下文
            proxy_pass http://localhost:11000/;
            set $flag 0; 
            if ( $http_origin != "" ) { 
              set $flag "${flag}1";
              #http_origin不为空
            }
            if ($corsHost = "" ) { 
              set $flag "${flag}2";
              #并且不在白名单中
            }
            if ($flag = "012") { 
              return 403;
            }
    }
    access_log  /www/wwwlogs/diuutcom.log main;
    error_log  /www/wwwlogs/diuut.com.error.log;
}