将 timeout 设低来防止 DOS 攻击

client_body_timeout 10;
client_header_timeout 10;
keepalive_timeout 5 5;
send_timeout 10;

限制用户连接数来预防 DOS 攻击

limit_zone slimits $binary_remote_addr 5m;
limit_conn slimits 5;