happyxhw101

azure ，微服务设计
https://learn.microsoft.com/zh-cn/dotnet/architecture/microservices/architect-microservice-container-applications/direct-client-to-microservice-communication-versus-the-api-gateway-pattern

DDIA -》数据密集型应用系统设计 ？

tcp 也是可以的，用 nginx 的 stream, 比如代理 ssh
```
map $allowed $ssh_server {
yes ssh;
}

upstream ssh {
server 192.168.5.1:12345;
}

server {
listen 2345;
listen [::]:2345;
proxy_pass $ssh_server;
proxy_connect_timeout 30s;
proxy_timeout 60s;

ssl_preread on;
}
```

@happyxhw101 写错了
map $geoip_country_code $allowed_country {
default no;
CN yes;
}

如果用的是 nginx 代理，可以这么干

1. nginx 配置 geo-ip
```
load_module "modules/ngx_http_geoip_module.so";
load_module "modules/ngx_stream_geoip_module.so";
```

2. 映射国家 code
```
map $geoip_country_code $allowed_country {
default yes;
CN yes;
}

map $remote_addr $allowed {
default $allowed_country;
127.0.0.1 yes;
~^192\.168\.\\d+\.\\d+$ yes;
~^192\.167\.0\.\\d+$ yes;
~^192\.166\.1\.\\d+$ yes;
}
```

3. 判断 allowed
```
server {
listen 443 ssl;
if ($allowed != yes) {
return 404;
}
}
```