http_referer 白名单

    valid_referers none blocked *.ttlsa.com server_names ~.image. ~.baidu.;
    if ($invalid_referer) {
        return 403;


例如:
server {
        listen 80;
        server_name test.image.xxxxxxx.com;
        location / {
                proxy_pass http://test.image_pools;
                proxy_set_header Host           $host;
                proxy_set_header X-Real-IP      $remote_addr;
                proxy_set_header X-Forwoarded-For       $proxy_add_x_forwarded_for;
                }
    valid_referers none blocked *.ttlsa.com server_names ~.image. ~.baidu.;
    if ($invalid_referer) {
        return 403;
    }
 }
配置 到*.ttlsa.com的referer通过,如果有*.image.*,*.baidu.*的通过
原文地址:https://www.cnblogs.com/bass6/p/7500274.html