详解nginx反向代理配置及优化

2024-03-06 05:46:02 47

前言:

由于服务器apache抗不住目前的并发.加上前端squid配置后,问题依然无法解决.而页面程序大部分是动态.无法使用fastcgi来处理.因此想使用nginx做为反向代理apache.整个配置安装过程很简单.在考虑高并发的情况下,在安装前就做了些优化.目前配置能抗住3000以上并发.好像不是特别大哦?呵~~但足以~~只是还有少量499问题..期待有人跟我讨论解决

第1部分:安装

1建立用户及组

/usr/sbin/groupaddwww
/usr/sbin/useradd-gwwwwww

2安装pcre让nginx支持rewrite方便以后所需

wgetftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-7.8.tar.gz
tarzxvfpcre-7.8.tar.gz
cdpcre-7.8/
./configure
make&&makeinstall

3安装nginx

wgethttp://sysoev.ru/nginx/nginx-0.7.58.tar.gz
tarzxvfnginx-0.7.58.tar.gz
cdnginx-0.7.58/
./configure--user=www--group=www--prefix=/usr/local/webserver/nginx--with-http_stub_status_module--with-http_ssl_module--with-cc-opt='-O2'--with-cpu-opt=opteron
make&&makeinstall

#注意上文中的--with-cc-opt='-O2'--with-cpu-opt=opteron这是编译器优化,目前最常用的是-02而不是3.后面对应CPU的型号,可参照:http://wiki.gentoo.tw/index.php/HOWTO_CFLAG

第2部分:配置及优化配置文件

1nginx.conf配置文件:

userwwwwww;
worker_processes4;

#[debug|info|notice|warn|error|crit]
error_log/usr/local/webserver/nginx/logs/nginx_error.logcrit;
pid/usr/local/webserver/nginx/nginx.pid;
#Specifiesthevalueformaximumfiledescriptorsthatcanbeopenedbythisprocess.
worker_rlimit_nofile51200;
events
{
useepoll;
worker_connections51200;
}

http
{
includemime.types;
default_typeapplication/octet-stream;
source_charsetGB2312;
server_names_hash_bucket_size256;
client_header_buffer_size256k;
large_client_header_buffers4256k;

#sizelimits
client_max_body_size50m;
client_body_buffer_size256k;
client_header_timeout3m;
client_body_timeout3m;
send_timeout3m;
#参数都有所调整.目的是解决代理过程中出现的一些502499错误
sendfileon;
tcp_nopushon;
keepalive_timeout120;#参数加大,以解决做代理时502错误
tcp_nodelayon;

includevhosts/upstream.conf;
includevhosts/bbs.linuxtone.conf;

}

2upstream.conf配置文件(这也是做负载的配置方法)

upstream.conf
upstreambbs.linuxtone.com{
server192.168.1.4:8099;
}

3站点配置文件

bbs.linuxtone.conf
server
{
listen80;
server_namebbs.linuxtone.conf;
charsetGB2312;
indexindex.htmlindex.htm;
root/date/wwwroot/linuxtone/;

location~^/NginxStatus/{
stub_statuson;
access_logoff;
}

location/{
root/date/wwwroot/linuxtone/;
proxy_redirectoff;
proxy_set_headerHost$host;
proxy_set_headerX-Real-IP$remote_addr;
proxy_set_headerREMOTE-HOST$remote_addr;
proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;
client_max_body_size50m;
client_body_buffer_size256k;
proxy_connect_timeout30;
proxy_send_timeout30;
proxy_read_timeout60;
proxy_buffer_size256k;
proxy_buffers4256k;
proxy_busy_buffers_size256k;
proxy_temp_file_write_size256k;
proxy_next_upstreamerrortimeoutinvalid_headerhttp_500http_503http_404;
proxy_max_temp_file_size128m;
proxy_passhttp://bbs.linuxtone.com;
}

#参数都有所调整.目的是解决代理过程中出现的一些502499错误

#Addexpiresheaderforstaticcontent
location~*\.(jpg|jpeg|gif|png|swf)${
if(-f$request_filename){
root/date/wwwroot/linuxtone/;
expires1d;
break;
}
}

log_formataccess'$remote_addr-$remote_user[$time_local]"$request"'
'$status$body_bytes_sent"$http_referer"'
'"$http_user_agent"$http_x_forwarded_for';
access_log/exp/nginxlogs/bbs.linuxtone_access.logaccess;

}

注:第二种代理方式

nginx处理下图片,html等静态的东西.其它动态由apache处理.因此apache也需要做一些参数调整.

设置图片等过期时间.缓解请求.

如果源与nginx在同一台机器建议使用如下方法:

location/{
proxy_passhttp://192.168.1.4:8099/;
proxy_redirectdefault;
}

针对不同的目录进行代理把下面的配置放到根目录代理的上面

location/linuxtone/{
proxy_passhttp://192.168.1.4:8099/linuxtone/;
proxy_redirectdefault;
}

4源配置

<VirtualHost192.168.1.4:8099>
ServerAdminliuyu105#gmail.com
DocumentRoot/date/wwwroot/linuxtone
ServerNamebbs.linuxtone.com
ErrorLoglogs/linuxtone_error_log
CustomLog"|/usr/local/sbin/cronologlogs/linuxtone_access_log.%Y%m%d"combined
</VirtualHost>

第3部分:源的优化

1apache-mpm.conf

<IfModulempm_prefork_module>
StartServers15
MinSpareServers15
MaxSpareServers30
ServerLimit2536
MaxClients2048
MaxRequestsPerChild1500
</IfModule>

2apache-keepalive

Timeout120#与nginx的保持一至
KeepAliveOn
MaxKeepAliveRequests400
KeepAliveTimeout7

第4部分:PHP的优化

优化一:将PHP由之前的xcache换成eaccelerator

1安装

wgethttp://bart.eaccelerator.net/source/0.9.5.3/eaccelerator-0.9.5.3.tar.bz2
tarjxvfeaccelerator-0.9.5.3.tar.bz2
cdeaccelerator-0.9.5.3/
/usr/local/webserver/php/bin/phpize
./configure--enable-eaccelerator=shared--with-php-config=/usr/local/php5/bin/php-config
make
makeinstall

注:PHP路径以安装为准!

2配置

sed-i's#extension_dir="./"#extension_dir="/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/"\nextension="memcache.so"\n#'/etc/php.ini
sed-i's#output_buffering=Off#output_buffering=On#'/etc/php.ini
sed-i"s#;always_populate_raw_post_data=On#always_populate_raw_post_data=On#g"/etc/php.ini

配置eAccelerator加速PHP：

mkdir-p/usr/local/webserver/eaccelerator_cache
vi/etc/php.ini

按shift+g键跳到配置文件的最末尾，加上以下配置信息：

[eaccelerator]
zend_extension="/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so"
eaccelerator.shm_size="128"
eaccelerator.cache_dir="/usr/local/webserver/eaccelerator_cache"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="300"
eaccelerator.shm_prune_period="120"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"

优化二:联系开发重新编译php减少php的模块.以减少php进程所占用内存数.这块尽管影响不大,但也有一定的作用.编译前也可以参照nginx的编译器优化方式安装.

第5部分:测试并启动nginx

ulimit-SHn51200
/usr/local/webserver/nginx/sbin/nginx-t
/usr/local/webserver/nginx/sbin/nginx

第6部分:nginx日志切割脚本

#!/bin/bash
#Thisscriptrunat00:00

#TheNginxlogspath
logs_path="/exp/nginxlogs/"

mkdir-p${logs_path}$(date-d"yesterday"+"%Y")/$(date-d"yesterday"+"%m")/
mv${logs_path}bbs.linuxtone_access.log${logs_path}$(date-d"yesterday"+"%Y")/$(date-d"yesterday"+"%m")/bbs.linuxtone_access_$(date-d"yesterday"+"%Y%m%d").log
kill-USR1`cat/usr/local/webserver/nginx/nginx.pid`

crontab-e

0000***/bin/bash /usr/local/webserver/nginx/sbin/cut_nginx_log.sh

以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持毛票票。

详解nginx反向代理配置及优化

热门推荐

随机推荐