详解nginx反向代理配置及优化
前言:
由于服务器apache抗不住目前的并发.加上前端squid配置后,问题依然无法解决.而页面程序大部分是动态.无法使用fastcgi来处理.因此想使用nginx做为反向代理apache.整个配置安装过程很简单.在考虑高并发的情况下,在安装前就做了些优化.目前配置能抗住3000以上并发.好像不是特别大哦?呵~~ 但足以~~ 只是还有少量499问题..期待有人跟我讨论解决
第1部分:安装
1 建立用户及组
/usr/sbin/groupadd www /usr/sbin/useradd -g www www
2 安装pcre 让nginx支持rewrite 方便以后所需
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-7.8.tar.gz tar zxvf pcre-7.8.tar.gz cd pcre-7.8/ ./configure make && make install
3 安装nginx
wget http://sysoev.ru/nginx/nginx-0.7.58.tar.gz tar zxvf nginx-0.7.58.tar.gz cd nginx-0.7.58/ ./configure --user=www --group=www --prefix=/usr/local/webserver/nginx --with-http_stub_status_module --with-http_ssl_module --with-cc-opt='-o2' --with-cpu-opt=opteron make && make install
#注意上文中的--with-cc-opt='-o2' --with-cpu-opt=opteron 这是编译器优化,目前最常用的是-02 而不是3.后面对应cpu的型号,可参照:http://wiki.gentoo.tw/index.php/howto_cflag
第2部分:配置及优化配置文件
1 nginx.conf 配置文件:
user www www; worker_processes 4; # [ debug | info | notice | warn | error | crit ] error_log /usr/local/webserver/nginx/logs/nginx_error.log crit; pid /usr/local/webserver/nginx/nginx.pid; #specifies the value for maximum file descriptors that can be opened by this process. worker_rlimit_nofile 51200; events { use epoll; worker_connections 51200; } http { include mime.types; default_type application/octet-stream; source_charset gb2312; server_names_hash_bucket_size 256; client_header_buffer_size 256k; large_client_header_buffers 4 256k; #size limits client_max_body_size 50m; client_body_buffer_size 256k; client_header_timeout 3m; client_body_timeout 3m; send_timeout 3m; #参数都有所调整.目的是解决代理过程中出现的一些502 499错误 sendfile on; tcp_nopush on; keepalive_timeout 120; #参数加大,以解决做代理时502错误 tcp_nodelay on; include vhosts/upstream.conf; include vhosts/bbs.linuxtone.conf; }
2 upstream.conf 配置文件(这也是做负载的配置方法)
upstream.conf upstream bbs.linuxtone.com { server 192.168.1.4:8099; }
3 站点配置文件
bbs.linuxtone.conf server { listen 80; server_name bbs.linuxtone.conf; charset gb2312; index index.html index.htm; root /date/wwwroot/linuxtone/; location ~ ^/nginxstatus/ { stub_status on; access_log off; } location / { root /date/wwwroot/linuxtone/; proxy_redirect off ; proxy_set_header host $host; proxy_set_header x-real-ip $remote_addr; proxy_set_header remote-host $remote_addr; proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for; client_max_body_size 50m; client_body_buffer_size 256k; proxy_connect_timeout 30; proxy_send_timeout 30; proxy_read_timeout 60; proxy_buffer_size 256k; proxy_buffers 4 256k; proxy_busy_buffers_size 256k; proxy_temp_file_write_size 256k; proxy_next_upstream error timeout invalid_header http_500 http_503 http_404; proxy_max_temp_file_size 128m; proxy_pass http://bbs.linuxtone.com; }
#参数都有所调整.目的是解决代理过程中出现的一些502 499错误
#add expires header for static content location ~* \.(jpg|jpeg|gif|png|swf)$ { if (-f $request_filename) { root /date/wwwroot/linuxtone/; expires 1d; break; } } log_format access '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" $http_x_forwarded_for'; access_log /exp/nginxlogs/bbs.linuxtone_access.log access; }
注:第二种代理方式
nginx 处理下图片,html等静态的东西.其它动态由apache处理.因此apache也需要做一些参数调整.
设置图片等过期时间.缓解请求.
如果源与nginx在同一台机器建议使用如下方法:
location / { proxy_pass http://192.168.1.4:8099/; proxy_redirect default ; }
针对不同的目录进行代理把下面的配置放到根目录代理的上面
location /linuxtone/ { proxy_pass http://192.168.1.4:8099/linuxtone/; proxy_redirect default ; }
4 源配置
<virtualhost 192.168.1.4:8099> serveradmin liuyu105#gmail.com documentroot /date/wwwroot/linuxtone servername bbs.linuxtone.com errorlog logs/linuxtone_error_log customlog "|/usr/local/sbin/cronolog logs/linuxtone_access_log.%y%m%d" combined </virtualhost>
第3部分:源的优化
1 apache-mpm.conf
<ifmodule mpm_prefork_module> startservers 15 minspareservers 15 maxspareservers 30 serverlimit 2536 maxclients 2048 maxrequestsperchild 1500 </ifmodule>
2 apache-keepalive
timeout 120 #与nginx的保持一至 keepalive on maxkeepaliverequests 400 keepalivetimeout 7
第4部分:php的优化
优化一:将php由之前的xcache换成eaccelerator
1 安装
wget http://bart.eaccelerator.net/source/0.9.5.3/eaccelerator-0.9.5.3.tar.bz2 tar jxvf eaccelerator-0.9.5.3.tar.bz2 cd eaccelerator-0.9.5.3/ /usr/local/webserver/php/bin/phpize ./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php5/bin/php-config make make install
注:php路径以安装为准!
2 配置
sed -i 's#extension_dir = "./"#extension_dir = "/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/"\nextension = "memcache.so"\n#' /etc/php.ini sed -i 's#output_buffering = off#output_buffering = on#' /etc/php.ini sed -i "s#; always_populate_raw_post_data = on#always_populate_raw_post_data = on#g" /etc/php.ini
配置eaccelerator加速php:
mkdir -p /usr/local/webserver/eaccelerator_cache vi /etc/php.ini
按shift+g键跳到配置文件的最末尾,加上以下配置信息:
[eaccelerator] zend_extension="/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so" eaccelerator.shm_size="128" eaccelerator.cache_dir="/usr/local/webserver/eaccelerator_cache" eaccelerator.enable="1" eaccelerator.optimizer="1" eaccelerator.check_mtime="1" eaccelerator.debug="0" eaccelerator.filter="" eaccelerator.shm_max="0" eaccelerator.shm_ttl="300" eaccelerator.shm_prune_period="120" eaccelerator.shm_only="0" eaccelerator.compress="1" eaccelerator.compress_level="9"
优化二:联系开发重新编译php减少php的模块.以减少php进程所占用内存数.这块尽管影响不大,但也有一定的作用.编译前也可以参照nginx的编译器优化方式安装.
第5部分:测试并启动nginx
ulimit -shn 51200 /usr/local/webserver/nginx/sbin/nginx -t /usr/local/webserver/nginx/sbin/nginx
第6部分:nginx日志切割脚本
#!/bin/bash # this script run at 00:00 # the nginx logs path logs_path="/exp/nginxlogs/" mkdir -p ${logs_path}$(date -d "yesterday" +"%y")/$(date -d "yesterday" +"%m")/ mv ${logs_path}bbs.linuxtone_access.log ${logs_path}$(date -d "yesterday" +"%y")/$(date -d "yesterday" +"%m")/bbs.linuxtone_access_$(date -d "yesterday" +"%y%m%d").log kill -usr1 `cat /usr/local/webserver/nginx/nginx.pid`
crontab -e
00 00 * * * /bin/bash /usr/local/webserver/nginx/sbin/cut_nginx_log.sh
以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持。