|
nginx反向代理配置及優(yōu)化 2009-05-26 作者:守住每一天 blog:liuyu.blog.51cto.com bbs:bbs.linuxtone.org msn:liuyubj520#hotmail.com email:liuyu105#gmail.com 前言: 由于服務(wù)器apache抗不住目前的并發(fā).加上前端squid配置后,問題依然無法解決.而頁面程序大部分是動態(tài).無法使用fastcgi來處理.因此想使用nginx做為反向代理apache.整個配置安裝過程很簡單.在考慮高并發(fā)的情況下,在安裝前就做了些優(yōu)化.目前配置能抗住3000以上并發(fā).好像不是特別大哦?呵~~ 但足以~~ 只是還有少量499問題..期待有人跟我討論解決 第1部分:安裝 1 建立用戶及組 /usr/sbin/groupadd www /usr/sbin/useradd -g www www 2 安裝pcre 讓nginx支持rewrite 方便以后所需 wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-7.8.tar.gz tar zxvf pcre-7.8.tar.gz cd pcre-7.8/ ./configure make && make install 3 安裝nginx wget http:///nginx/nginx-0.7.58.tar.gz tar zxvf nginx-0.7.58.tar.gz cd nginx-0.7.58/ ./configure --user=www --group=www --prefix=/usr/local/webserver/nginx --with-http_stub_status_module --with-http_ssl_module --with-cc-opt='-O2' --with-cpu-opt=opteron make && make install #注意上文中的--with-cc-opt='-O2' --with-cpu-opt=opteron 這是編譯器優(yōu)化,目前最常用的是-02 而不是3.后面對應(yīng)CPU的型號,可參照:http://wiki./index.php/HOWTO_CFLAG 第2部分:配置及優(yōu)化配置文件 1 nginx.conf 配置文件: user www www; worker_processes 4; # [ debug | info | notice | warn | error | crit ] error_log /usr/local/webserver/nginx/logs/nginx_error.log crit; pid /usr/local/webserver/nginx/nginx.pid; #Specifies the value for maximum file descriptors that can be opened by this process. worker_rlimit_nofile 51200; events { use epoll; worker_connections 51200; } http { include mime.types; default_type application/octet-stream; source_charset GB2312; server_names_hash_bucket_size 256; client_header_buffer_size 256k; large_client_header_buffers 4 256k; #size limits client_max_body_size 50m; client_body_buffer_size 256k; client_header_timeout 3m; client_body_timeout 3m; send_timeout 3m; #參數(shù)都有所調(diào)整.目的是解決代理過程中出現(xiàn)的一些502 499錯誤 sendfile on; tcp_nopush on; keepalive_timeout 120; #參數(shù)加大,以解決做代理時502錯誤 tcp_nodelay on; include vhosts/upstream.conf; include vhosts/bbs.linuxtone.conf; } 2 upstream.conf 配置文件(這也是做負(fù)載的配置方法) upstream.conf upstream bbs. { server 192.168.1.4:8099; } 3 站點(diǎn)配置文件 bbs.linuxtone.conf server { listen 80; server_name bbs.linuxtone.conf; charset GB2312; index index.html index.htm; root /date/wwwroot/linuxtone/; location ~ ^/NginxStatus/ { stub_status on; access_log off; } location / { root /date/wwwroot/linuxtone/; proxy_redirect off ; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 50m; client_body_buffer_size 256k; proxy_connect_timeout 30; proxy_send_timeout 30; proxy_read_timeout 60; proxy_buffer_size 256k; proxy_buffers 4 256k; proxy_busy_buffers_size 256k; proxy_temp_file_write_size 256k; proxy_next_upstream error timeout invalid_header http_500 http_503 http_404; proxy_max_temp_file_size 128m; proxy_pass http://bbs.; } #參數(shù)都有所調(diào)整.目的是解決代理過程中出現(xiàn)的一些502 499錯誤 #Add expires header for static content location ~* \.(jpg|jpeg|gif|png|swf)$ { if (-f $request_filename) { root /date/wwwroot/linuxtone/; expires 1d; break; } } log_format access '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" $http_x_forwarded_for'; access_log /exp/nginxlogs/bbs.linuxtone_access.log access; } 注:第二種代理方式 nginx 處理下圖片,html等靜態(tài)的東西.其它動態(tài)由apache處理.因此apache也需要做一些參數(shù)調(diào)整. 設(shè)置圖片等過期時間.緩解請求. 如果源與nginx在同一臺機(jī)器建議使用如下方法: location / { proxy_pass http://192.168.1.4:8099/; proxy_redirect default ; } 針對不同的目錄進(jìn)行代理把下面的配置放到根目錄代理的上面 location /linuxtone/ { proxy_pass http://192.168.1.4:8099/linuxtone/; proxy_redirect default ; } 4 源配置 <VirtualHost 192.168.1.4:8099> ServerAdmin liuyu105#gmail.com DocumentRoot /date/wwwroot/linuxtone ServerName bbs. ErrorLog logs/linuxtone_error_log CustomLog "|/usr/local/sbin/cronolog logs/linuxtone_access_log.%Y%m%d" combined </VirtualHost> 第3部分:源的優(yōu)化 1 apache-mpm.conf <IfModule mpm_prefork_module> StartServers 15 MinSpareServers 15 MaxSpareServers 30 ServerLimit 2536 MaxClients 2048 MaxRequestsPerChild 1500 </IfModule> 2 apache-keepalive Timeout 120 #與nginx的保持一至 KeepAlive On MaxKeepAliveRequests 400 KeepAliveTimeout 7 第4部分:PHP的優(yōu)化 優(yōu)化一:將PHP由之前的xcache換成eaccelerator 1 安裝 wget http://bart./source/0.9.5.3/eaccelerator-0.9.5.3.tar.bz2 tar jxvf eaccelerator-0.9.5.3.tar.bz2 cd eaccelerator-0.9.5.3/ /usr/local/webserver/php/bin/phpize ./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php5/bin/php-config make make install 注:PHP路徑以安裝為準(zhǔn)! 2 配置 sed -i 's#extension_dir = "./"#extension_dir = "/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/"\nextension = "memcache.so"\n#' /etc/php.ini sed -i 's#output_buffering = Off#output_buffering = On#' /etc/php.ini sed -i "s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g" /etc/php.ini 配置eAccelerator加速PHP： mkdir -p /usr/local/webserver/eaccelerator_cache vi /etc/php.ini 按shift+g鍵跳到配置文件的最末尾，加上以下配置信息： [eaccelerator] zend_extension="/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so" eaccelerator.shm_size="128" eaccelerator.cache_dir="/usr/local/webserver/eaccelerator_cache" eaccelerator.enable="1" eaccelerator.optimizer="1" eaccelerator.check_mtime="1" eaccelerator.debug="0" eaccelerator.filter="" eaccelerator.shm_max="0" eaccelerator.shm_ttl="300" eaccelerator.shm_prune_period="120" eaccelerator.shm_only="0" eaccelerator.compress="1" eaccelerator.compress_level="9" 優(yōu)化二:聯(lián)系開發(fā)重新編譯php減少php的模塊.以減少php進(jìn)程所占用內(nèi)存數(shù).這塊盡管影響不大,但也有一定的作用.編譯前也可以參照nginx的編譯器優(yōu)化方式安裝. 第5部分:測試并啟動nginx ulimit -SHn 51200 /usr/local/webserver/nginx/sbin/nginx -t /usr/local/webserver/nginx/sbin/nginx 第6部分:nginx日志切割腳本 #!/bin/bash # This script run at 00:00 # The Nginx logs path logs_path="/exp/nginxlogs/" mkdir -p ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/ mv ${logs_path}bbs.linuxtone_access.log ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/bbs.linuxtone_access_$(date -d "yesterday" +"%Y%m%d").log kill -USR1 `cat /usr/local/webserver/nginx/nginx.pid` crontab -e 00 00 * * * /bin/bash /usr/local/webserver/nginx/sbin/cut_nginx_log.sh 本文出自 “seven” 博客，請務(wù)必保留此出處http://liuyu.blog.51cto.com/183345/166381 |
|
|
