我们探索了 NGINX Unit 中文件系统隔离的两个用例。第一个用例将受感染的应用限制在其沙盒目录中,阻止攻击者获取敏感信息。第二个用例我们通过分别在不同的文件系统中定义全局依赖项,以在它们之间进行切换。
隆重推出 NGINX Unit 1.18.0——新增文件系统隔离和其他增强功能
NGINX Unit 1.18.0 introduces filesystem isolation, the 'target' option to reduce redundancy in PHP app configuration, and URL encoding. It also includes features introduced in NGINX Unit 1.17.0: redirects, and fractional server weights for traffic distribution in upstream groups.