Повышенная нагрузка из за редиректов

66.102.9.59 — - [03/Mar/2018:17:25:48 +0300] "GET /upload/media/thumbs/item72-hqdefault.jpg HTTP/1.1" 200 13605 "dnrru.ru/news/3705-sportsmeny-iz-dnr-na-otkrytom-pervenstve-respubliki-krym-po-plavaniyu-zavoevali-94-medali.html" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Web Preview) Chrome/41.0.2272.118 Safari/537.36"
51.255.127.189 — - [03/Mar/2018:17:25:49 +0300] "GET /redirect?url=http://www.svdp-sacramento.org/events-details/15-02-14/Ninth_Annual_Benefit_for_the_Poor_Dinner.aspx?Returnurl=http://is.gd/y9KJTj HTTP/1.0" 444 0 "koi.com.my/cgi-bin/koiforum/gforum.cgi?url=http://dnrru.ru/redirect?url=http://www.svdp-sacramento.org/events-details/15-02-14/Ninth_Annual_Benefit_for_the_Poor_Dinner.aspx?Returnurl=http://is.gd/y9KJTj" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0"
212.129.18.213 — - [03/Mar/2018:17:25:51 +0300] "GET /redirect?url=http://vanrain.com/home.php?mod=space&uid=178037&do=profile HTTP/1.1" 444 0 "daidai.gamedb.info/wiki/?cmd=jumpto&r=http%3A%2F%2Fdnrru.ru%2Fredirect%3Furl%3Dhttp%3A%2F%2Fvanrain.com%2Fhome.php%3Fmod%3Dspace%26uid%3D178037%26do%3Dprofile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0"
88.99.105.227 — - [03/Mar/2018:17:26:08 +0300] "GET /redirect?url=http://cashf5z3u.getblogs.net/3850103/tips-on-how-to-buy-durable-travel-bags-in-a-cost-effective-way HTTP/1.1" 444 0 "rgn39.ru/engine/redirect.php?url=http://dnrru.ru/redirect?url=http://cashf5z3u.getblogs.net/3850103/tips-on-how-to-buy-durable-travel-bags-in-a-cost-effective-way" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0"
62.210.70.186 — - [03/Mar/2018:17:26:09 +0300] "GET /redirect?url=http://sosyal.karbonayakizim.tk//index.php?a=profile&u=valliethigp HTTP/1.1" 444 0 "m.mafc.com?url=http%3A%2F%2Fdnrru.ru%2Fredirect%3Furl%3Dhttp%3A%2F%2Fsosyal.karbonayakizim.tk%2F%2Findex.php%3Fa%3Dprofile%26u%3Dvalliethigp&dm_redirected=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0"
46.172.213.166 — - [03/Mar/2018:17:26:36 +0300] "GET /upload/000/u1/531/ee027339.jpg HTTP/1.1" 200 84077 "-" "Mozilla/5.0 (iPad; CPU OS 8_1_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/19.0.133715217 Mobile/12B440 Safari/600.1.4"

user nginx;
worker_processes 3;

pcre_jit on;

error_log /var/log/nginx/error.log;
#error_log /var/log/nginx/error.log notice;
#error_log /var/log/nginx/error.log info;
pid /var/run/nginx.pid;

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr — $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"'
'cs=$upstream_cache_status';
charset utf-8;
access_log /var/log/nginx/access.log main;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
reset_timedout_connection on;
keepalive_timeout 30;
server_tokens off;
server_names_hash_max_size 128;
server_names_hash_bucket_size 256;

#gzip on;

#proxy_temp_path /var/lib/nginx/proxy 1 2;
#proxy_cache_valid 20s;
#proxy_cache_key $scheme$proxy_host$request_uri$cookie_user;
#proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=one:400m inactive=120m max_size=500M;
#proxy_cache_min_uses 2;


proxy_cache_valid 10s;
proxy_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=one:100m max_size=300M;
proxy_cache_path /var/lib/nginx/cache1 levels=1:2 keys_zone=two:100m max_size=300M;

proxy_temp_path /var/lib/nginx/proxy 1 2;
proxy_ignore_headers Expires Cache-Control;
proxy_cache_use_stale error timeout invalid_header http_502;
proxy_cache_bypass $cookie_session;
proxy_no_cache $cookie_session;
proxy_cache_min_uses 2;

limit_conn_zone $binary_remote_addr zone=lone:10m;
limit_req_zone $binary_remote_addr zone=ltwo:10m rate=5r/s;
limit_req_zone $binary_remote_addr zone=lstrict:10m rate=1r/s;
limit_req_zone $binary_remote_addr zone=highspeed:10m rate=10r/s;

fastcgi_cache_path /var/lib/nginx/fpm levels=1:2 keys_zone=fcgi:32m max_size=100m;
fastcgi_cache_path /var/lib/nginx/fpm2 levels=1:2 keys_zone=fcgi2:32m max_size=100m;
#fastcgi_cache_key "$scheme$request_method$host$request_uri$cookie_user";
fastcgi_temp_path /var/lib/nginx/fastcgi 1 2;
fastcgi_ignore_headers Expires Cache-Control;
fastcgi_cache_use_stale error timeout invalid_header;

limit_conn_zone $binary_remote_addr zone=lfcgi:10m;
limit_req_zone $binary_remote_addr zone=lfsci2:10m rate=5r/s;

resolver 8.8.8.8 8.8.4.4 valid=300s ipv6=off;
resolver_timeout 5s;

map $http_accept $webp_suffix {
"~*webp" ".webp";
}



# Load modular configuration files from the /etc/nginx/conf.d directory.
# See nginx.org/en/docs/ngx_core_module.html#include
# for more information.
ModSecurityEnabled off;
ModSecurityConfig modsecurity.conf;
include /etc/nginx/conf.d/*.conf;

index index.php index.html index.htm;

server {
root /var/www/html;
access_log /etc/nginx/vhost_logs/default_access;
error_log /etc/nginx/vhost_logs/default_error;
location / {
root /var/www/html;
index index.php index.html index.htm;
}
}


include /etc/nginx/sites-available/*.conf;

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;
# root html;

# location / {
# }
#}


# HTTPS server
#
#server {
# listen 443;
# server_name localhost;
# root html;

# ssl on;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;

# ssl_session_timeout 5m;

# ssl_protocols SSLv2 SSLv3 TLSv1;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;

# location / {
# }
#}

}

server {
listen 185.180.231.78:80 ;
server_name dsdnr.ru www.dsdnr.ru;
root /home/detsad/sites/dsdnr.ru;
access_log /etc/nginx/vhost_logs/dsdnr.ru_access;
error_log /etc/nginx/vhost_logs/dsdnr.ru_error;

location /redirect {
return 444;
}

location ~* \.(jpg|jpeg|gif|png|ico|css|bmp|swf|js|txt|woff[2]?)$ {
root /home/detsad/sites/dsdnr.ru;
}

location ~ /.well-known {
allow all;
}
location ~* robots.txt { root /etc/nginx; }

location ~ /\.ht {
deny all;
}

location / {
proxy_pass 185.180.231.78:8080;
proxy_redirect off;
proxy_force_ranges on;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_cache one;
proxy_cache_key "$request_method|$http_if_modified_since|$http_if_none_match|$host|$request_uri";
#access_log /etc/nginx/vhost_logs//home/detsad/sites/dsdnr.ru;

proxy_cache_valid 10s;
proxy_cache_min_uses 2;
#proxy_cache_lock on;
# proxy_cache_use_stale error timeout;
#proxy_cache_use_stale updating http_502 http_504;

limit_conn lone 5;
# limit_req zone=ltwo burst=10;

client_max_body_size 24m;
client_body_buffer_size 128k;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 8 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 10m;


}
location ~* \.(ttf|jpg|jpeg|gif|png|ico|css|bmp|swf|js|txt|tar|zip|pdf|tar.gz|woff[2]?)$ {
root /home/detsad/sites/dsdnr.ru;
access_log off;
}




error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}