詳解nginx反向代理配置及優(yōu)化

更新時(shí)間：2016年12月29日 14:10:29 作者：守住每一天

本篇文章主要介紹了詳解nginx反向代理配置及優(yōu)化，小編覺(jué)得挺不錯(cuò)的，現(xiàn)在分享給大家，也給大家做個(gè)參考。一起跟隨小編過(guò)來(lái)看看吧

前言:

由于服務(wù)器apache抗不住目前的并發(fā).加上前端squid配置后,問(wèn)題依然無(wú)法解決.而頁(yè)面程序大部分是動(dòng)態(tài).無(wú)法使用fastcgi來(lái)處理.因此想使用nginx做為反向代理apache.整個(gè)配置安裝過(guò)程很簡(jiǎn)單.在考慮高并發(fā)的情況下,在安裝前就做了些優(yōu)化.目前配置能抗住3000以上并發(fā).好像不是特別大哦?呵~~ 但足以~~ 只是還有少量499問(wèn)題..期待有人跟我討論解決

第1部分:安裝

1 建立用戶及組

/usr/sbin/groupadd www
/usr/sbin/useradd -g www www

2 安裝pcre 讓nginx支持rewrite 方便以后所需

wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-7.8.tar.gz
tar zxvf pcre-7.8.tar.gz
cd pcre-7.8/
./configure
make && make install

3 安裝nginx

wget http://sysoev.ru/nginx/nginx-0.7.58.tar.gz
tar zxvf nginx-0.7.58.tar.gz
cd nginx-0.7.58/
./configure --user=www --group=www --prefix=/usr/local/webserver/nginx --with-http_stub_status_module --with-http_ssl_module --with-cc-opt='-O2' --with-cpu-opt=opteron
make && make install

#注意上文中的--with-cc-opt='-O2' --with-cpu-opt=opteron 這是編譯器優(yōu)化,目前最常用的是-02 而不是3.后面對(duì)應(yīng)CPU的型號(hào),可參照:http://wiki.gentoo.tw/index.php/HOWTO_CFLAG

第2部分:配置及優(yōu)化配置文件

1 nginx.conf 配置文件:

user  www www;
worker_processes 4;

# [ debug | info | notice | warn | error | crit ]
error_log  /usr/local/webserver/nginx/logs/nginx_error.log  crit;
pid        /usr/local/webserver/nginx/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;
events
{
     use epoll;
     worker_connections 51200;
}

http
{
     include       mime.types;
     default_type  application/octet-stream;
     source_charset GB2312;
     server_names_hash_bucket_size 256;
     client_header_buffer_size 256k;
     large_client_header_buffers 4 256k;

     #size limits
     client_max_body_size       50m;
     client_body_buffer_size    256k;
     client_header_timeout   3m;
     client_body_timeout 3m;
     send_timeout       3m;
#參數(shù)都有所調(diào)整.目的是解決代理過(guò)程中出現(xiàn)的一些502 499錯(cuò)誤   
     sendfile on;
     tcp_nopush     on;
     keepalive_timeout 120; #參數(shù)加大,以解決做代理時(shí)502錯(cuò)誤
     tcp_nodelay on;
    
     include          vhosts/upstream.conf;
     include          vhosts/bbs.linuxtone.conf; 

}

2 upstream.conf 配置文件(這也是做負(fù)載的配置方法)

upstream.conf
      upstream bbs.linuxtone.com {
         server 192.168.1.4:8099;
       }

3 站點(diǎn)配置文件

bbs.linuxtone.conf
server
   {
      listen       80;
      server_name  bbs.linuxtone.conf;
      charset GB2312;
      index index.html index.htm;
      root  /date/wwwroot/linuxtone/;

        location ~ ^/NginxStatus/ {
            stub_status on;
            access_log off;
         }

     location / {
       root  /date/wwwroot/linuxtone/;
       proxy_redirect off ;
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header REMOTE-HOST $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       client_max_body_size 50m;
       client_body_buffer_size 256k;
       proxy_connect_timeout 30;
       proxy_send_timeout 30;
       proxy_read_timeout 60;
       proxy_buffer_size 256k;
       proxy_buffers 4 256k;
       proxy_busy_buffers_size 256k;
       proxy_temp_file_write_size 256k;
       proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
       proxy_max_temp_file_size 128m;
       proxy_pass  http://bbs.linuxtone.com;
      }

#參數(shù)都有所調(diào)整.目的是解決代理過(guò)程中出現(xiàn)的一些502 499錯(cuò)誤

#Add expires header for static content
   location ~* \.(jpg|jpeg|gif|png|swf)$ {
     if (-f $request_filename) {
       root /date/wwwroot/linuxtone/;
       expires      1d;
       break;
      }
   }

     log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '
                         '$status $body_bytes_sent "$http_referer" '
                         '"$http_user_agent" $http_x_forwarded_for';
    access_log  /exp/nginxlogs/bbs.linuxtone_access.log  access;
  
}

注:第二種代理方式

nginx 處理下圖片,html等靜態(tài)的東西.其它動(dòng)態(tài)由apache處理.因此apache也需要做一些參數(shù)調(diào)整.

設(shè)置圖片等過(guò)期時(shí)間.緩解請(qǐng)求.

如果源與nginx在同一臺(tái)機(jī)器建議使用如下方法:

location / {
      proxy_pass  http://192.168.1.4:8099/;
      proxy_redirect default ;
      }

針對(duì)不同的目錄進(jìn)行代理把下面的配置放到根目錄代理的上面

        location /linuxtone/ {
              proxy_pass  http://192.168.1.4:8099/linuxtone/;
              proxy_redirect default ;
         }

4 源配置

<VirtualHost 192.168.1.4:8099>
    ServerAdmin liuyu105#gmail.com
    DocumentRoot /date/wwwroot/linuxtone
    ServerName bbs.linuxtone.com
    ErrorLog logs/linuxtone_error_log
   CustomLog "|/usr/local/sbin/cronolog logs/linuxtone_access_log.%Y%m%d" combined
</VirtualHost>

第3部分:源的優(yōu)化

1 apache-mpm.conf

<IfModule mpm_prefork_module>
    StartServers          15
    MinSpareServers       15
    MaxSpareServers      30
    ServerLimit         2536
    MaxClients          2048
    MaxRequestsPerChild   1500
</IfModule>

2 apache-keepalive

Timeout 120  #與nginx的保持一至
KeepAlive On
MaxKeepAliveRequests 400
KeepAliveTimeout 7

第4部分:PHP的優(yōu)化

優(yōu)化一:將PHP由之前的xcache換成eaccelerator

1 安裝

wget http://bart.eaccelerator.net/source/0.9.5.3/eaccelerator-0.9.5.3.tar.bz2
tar jxvf eaccelerator-0.9.5.3.tar.bz2
cd eaccelerator-0.9.5.3/
/usr/local/webserver/php/bin/phpize
./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php5/bin/php-config
make
make install

注:PHP路徑以安裝為準(zhǔn)!

2 配置

sed -i 's#extension_dir = "./"#extension_dir = "/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/"\nextension = "memcache.so"\n#' /etc/php.ini
sed -i 's#output_buffering = Off#output_buffering = On#' /etc/php.ini
sed -i "s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g" /etc/php.ini

配置eAccelerator加速PHP：

mkdir -p /usr/local/webserver/eaccelerator_cache
vi /etc/php.ini

按shift+g鍵跳到配置文件的最末尾，加上以下配置信息：

[eaccelerator]
zend_extension="/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so"
eaccelerator.shm_size="128"
eaccelerator.cache_dir="/usr/local/webserver/eaccelerator_cache"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="300"
eaccelerator.shm_prune_period="120"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"

優(yōu)化二:聯(lián)系開(kāi)發(fā)重新編譯php減少php的模塊.以減少php進(jìn)程所占用內(nèi)存數(shù).這塊盡管影響不大,但也有一定的作用.編譯前也可以參照nginx的編譯器優(yōu)化方式安裝.

第5部分:測(cè)試并啟動(dòng)nginx

ulimit -SHn 51200
/usr/local/webserver/nginx/sbin/nginx -t 
/usr/local/webserver/nginx/sbin/nginx

第6部分:nginx日志切割腳本

#!/bin/bash
# This script run at 00:00

# The Nginx logs path
logs_path="/exp/nginxlogs/"

mkdir -p ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/
mv ${logs_path}bbs.linuxtone_access.log ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/bbs.linuxtone_access_$(date -d "yesterday" +"%Y%m%d").log
kill -USR1 `cat /usr/local/webserver/nginx/nginx.pid`

crontab -e

00 00 * * * /bin/bash /usr/local/webserver/nginx/sbin/cut_nginx_log.sh

以上就是本文的全部?jī)?nèi)容，希望對(duì)大家的學(xué)習(xí)有所幫助，也希望大家多多支持腳本之家。

您可能感興趣的文章: