文章作者:張宴 本文版本:v5.4 最后修改:
2009.06.26
前言:本文是我撰寫的關于搭建“Nginx + PHP(FastCGI)”Web服務器的第5篇文章。本系列文章作為國內最早詳細介紹 Nginx
+ PHP 安裝、配置、使用的資料之一,為推動 Nginx 在國內的發(fā)展產生了積極的作用。這是一篇關于Nginx
0.7.x系列版本的文章,安裝、配置方式與第4篇文章相差不大,但增加了MySQL安裝配置的信息、
PHP 5.2.10 的 php-fpm 補丁。Nginx 0.7.x系列版本雖然為開發(fā)版,但在很多大型網站的生產環(huán)境中已經使用。
Nginx
("engine x") 是一個高性能的 HTTP 和反向代理服務器,也是一個 IMAP/POP3/SMTP 代理服務器。 Nginx 是由
Igor Sysoev 為俄羅斯訪問量第二的 Rambler.ru 站點開發(fā)的,它已經在該站點運行超過兩年半了。Igor
將源代碼以類BSD許可證的形式發(fā)布。
Nginx 超越 Apache 的高性能和穩(wěn)定性,使得國內使用 Nginx 作為 Web 服務器的網站也越來越多,其中包括
新浪博客、
新浪播客、
網易新聞等門戶網站頻道,
六間房、
56.com等視頻分享網站,
Discuz!官方論壇、
水木社區(qū)等知名論壇,
豆瓣、
YUPOO相冊、
海內SNS、
迅雷在線等新興Web 2.0網站。
Nginx 的官方中文維基:
http://wiki.nginx.org/NginxChs
在高并發(fā)連接的情況下,Nginx是Apache服務器不錯的替代品。Nginx同時也可以作為7層負載均衡服務器來使用。根據我的測試結果,
Nginx 0.7.61 + PHP 5.2.10 (FastCGI) 可以承受3萬以上的并發(fā)連接數(shù),相當于同等環(huán)境下Apache的10倍。
根據我的經驗,4GB內存的服務器+Apache(prefork模式)一般只能處理3000個并發(fā)連接,因為它們將占用3GB以上的內存,還得為系統(tǒng)
預留1GB的內存。我曾經就有兩臺Apache服務器,因為在配置文件中設置的MaxClients為4000,當Apache并發(fā)連接數(shù)達到3800
時,導致服務器內存和Swap空間用滿而崩潰。
而這臺 Nginx 0.7.61 + PHP 5.2.10 (FastCGI)
服務器在3萬并發(fā)連接下,開啟的10個Nginx進程消耗150M內存(15M*10=150M),開啟的64個php-cgi進程消耗1280M內存
(20M*64=1280M),加上系統(tǒng)自身消耗的內存,總共消耗不到2GB內存。如果服務器內存較小,完全可以只開啟25個php-cgi進程,這樣
php-cgi消耗的總內存數(shù)才500M。
在3萬并發(fā)連接下,訪問Nginx 0.7.61 + PHP 5.2.10
(FastCGI)
服務器的PHP程序,仍然速度飛快。下圖為Nginx的狀態(tài)監(jiān)控頁面,顯示的活動連接數(shù)為28457(關于Nginx的監(jiān)控頁配置,會在本文接下來所給出
的Nginx配置文件中寫明):
我生產環(huán)境下的兩臺Nginx + PHP5(FastCGI)服務器,跑多個一般復雜的純PHP動態(tài)程序,單臺Nginx + PHP5(FastCGI)服務器跑PHP動態(tài)程序的處理能力已經超過“
700次請求/秒”,相當于每天可以承受6000萬(700*60*60*24=60480000)的訪問量(
更多信息見此),而服務器的系統(tǒng)負載也不高:
下面是用100個并發(fā)連接分別去壓生產環(huán)境中同一負載均衡器VIP下、提供相同服務的兩臺服務器,一臺為Nginx,另一臺為Apache,Nginx每秒處理的請求數(shù)是Apache的兩倍多,Nginx服務器的系統(tǒng)負載、CPU使用率遠低于Apache:
你可以將連接數(shù)開到10000~30000,去壓Nginx和Apache上的phpinfo.php,這是用瀏覽器訪問Nginx上的
phpinfo.php一切正常,而訪問Apache服務器的phpinfo.php,則是該頁無法顯示。4G內存的服務器,即使再優(yōu)化,Apache也
很難在“webbench -c 30000 -t 60
http://xxx.xxx.xxx.xxx/phpinfo.php”的壓力情況下正常訪問,而調整參數(shù)優(yōu)化后的Nginx可以。
webbench 下載地址:
http://blog.s135.com/post/288/ 注意:webbench 做壓力測試時,該軟件自身也會消耗CPU和內存資源,為了測試準確,請將 webbench 安裝在別的服務器上。
測試結果:##### Nginx + PHP #####
引用
[root@localhost webbench-1.5]# webbench -c 100 -t 30
http://192.168.1.21/phpinfo.phpWebbench - Simple Web Benchmark 1.5
Copyright (c) Radim Kolar 1997-2004, GPL Open Source Software.
Benchmarking: GET
http://192.168.1.21/phpinfo.php100 clients, running 30 sec.
Speed=102450 pages/min, 16490596 bytes/sec.
Requests: 51225 susceed, 0 failed.
top - 14:06:13 up 27 days, 2:25, 2 users, load average: 14.57, 9.89, 6.51
Tasks: 287 total, 4 running, 283 sleeping, 0 stopped, 0 zombie
Cpu(s): 49.9% us, 6.7% sy, 0.0% ni, 41.4% id, 1.1% wa, 0.1% hi, 0.8% si
Mem: 6230016k total, 2959468k used, 3270548k free, 635992k buffers
Swap: 2031608k total, 3696k used, 2027912k free, 1231444k cached
測試結果:##### Apache + PHP #####
引用
[root@localhost webbench-1.5]# webbench -c 100 -t 30
http://192.168.1.27/phpinfo.phpWebbench - Simple Web Benchmark 1.5
Copyright (c) Radim Kolar 1997-2004, GPL Open Source Software.
Benchmarking: GET
http://192.168.1.27/phpinfo.php100 clients, running 30 sec.
Speed=42184 pages/min, 31512914 bytes/sec.
Requests: 21092 susceed, 0 failed.
top - 14:06:20 up 27 days, 2:13, 2 users, load average: 62.15, 26.36, 13.42
Tasks: 318 total, 7 running, 310 sleeping, 0 stopped, 1 zombie
Cpu(s): 80.4% us, 10.6% sy, 0.0% ni, 7.9% id, 0.1% wa, 0.1% hi, 0.9% si
Mem: 6230016k total, 3075948k used, 3154068k free, 379896k buffers
Swap: 2031608k total, 12592k used, 2019016k free, 1117868k cached
為什么Nginx的性能要比Apache高得多?這得益于Nginx使用了最新的epoll(Linux
2.6內核)和kqueue(freebsd)網絡I/O模型,而Apache則使用的是傳統(tǒng)的select模型。目前Linux下能夠承受高并發(fā)訪問的
Squid、Memcached都采用的是epoll網絡I/O模型。
處理大量的連接的讀寫,Apache所采用的select網絡I/O模型非常低效。下面用一個比喻來解析Apache采用的select模型和Nginx采用的epoll模型進行之間的區(qū)別:
假設你在大學讀書,住的宿舍樓有很多間房間,你的朋友要來找你。select版宿管大媽就會帶著你的朋友挨個房間去找,直到找到你為止。而epoll版
宿管大媽會先記下每位同學的房間號,你的朋友來時,只需告訴你的朋友你住在哪個房間即可,不用親自帶著你的朋友滿大樓找人。如果來了10000個人,都要
找自己住這棟樓的同學時,select版和epoll版宿管大媽,誰的效率更高,不言自明。同理,在高并發(fā)服務器中,輪詢I/O是最耗時間的操作之
一,select和epoll的性能誰的性能更高,同樣十分明了。
安裝步驟:
?。ㄏ到y(tǒng)要求:Linux 2.6+ 內核,本文中的Linux操作系統(tǒng)為CentOS 5.3,另在RedHat AS4上也安裝成功)
sudo -s
LANG=C
yum
-y install gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng
libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib
zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel
ncurses ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5
krb5-devel libidn libidn-devel openssl openssl-devel openldap
openldap-devel nss_ldap openldap-clients openldap-servers
2、【適用RedHat操作系統(tǒng)】RedHat等其他Linux發(fā)行版可從安裝光盤中找到這些程序庫的RPM包(事先可通過類似“rpm -qa |
grep
libjpeg”的命令查看所需的RPM包是否存在,通常是“xxx-devel”不存在,需要安裝)。RedHat可以直接利用CentOS的RPM包
安裝,以下是RPM包下載網址:
?、?、RedHat AS4 & CentOS 4
http://mirrors.163.com/centos/4/os/i386/CentOS/RPMS/ http://mirrors.163.com/centos/4/os/x86_64/CentOS/RPMS/ ②、RedHat AS5 & CentOS 5
http://mirrors.163.com/centos/5/os/i386/CentOS/ http://mirrors.163.com/centos/5/os/x86_64/CentOS/ ?、邸PM包搜索網站
http://rpm.pbone.net/ http://www.rpmfind.net/ ?、堋edHat AS4 系統(tǒng)環(huán)境,通常情況下缺少的支持包安裝:
Ⅰ、i386 系統(tǒng)
Ⅱ、x86_64 系統(tǒng)
3、【適用CentOS、RedHat及其它Linux操作系統(tǒng)】下載程序源碼包:
本文中提到的所有開源軟件為截止到
2009年06月26日的最新穩(wěn)定版。
?、?、從軟件的官方網站下載:
?、?、從
blog.s135.com下載(比較穩(wěn)定,只允許在本站,或者在Linux/Unix下通過Wget、Curl等命令下載以下軟件):
二、安裝PHP 5.2.10(FastCGI模式) 1、編譯安裝PHP 5.2.10所需的支持庫:
tar zxvf libiconv-1.13.tar.gz
cd libiconv-1.13/
./configure --prefix=/usr/local
make
make install
cd ../
tar zxvf libmcrypt-2.5.8.tar.gz
cd libmcrypt-2.5.8/
./configure
make
make install
/sbin/ldconfig
cd libltdl/
./configure --enable-ltdl-install
make
make install
cd ../../
tar zxvf mhash-0.9.9.9.tar.gz
cd mhash-0.9.9.9/
./configure
make
make install
cd ../
ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.la
ln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.so
ln -s /usr/local/lib/libmcrypt.so.4 /usr/lib/libmcrypt.so.4
ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8
ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.a
ln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.la
ln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.so
ln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2
ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1
tar zxvf mcrypt-2.6.8.tar.gz
cd mcrypt-2.6.8/
/sbin/ldconfig
./configure
make
make install
cd ../
2、編譯安裝MySQL 5.1.35
/usr/sbin/groupadd mysql
/usr/sbin/useradd -g mysql mysql
tar zxvf mysql-5.1.35.tar.gz
cd mysql-5.1.35/
./configure
--prefix=/usr/local/webserver/mysql/ --enable-assembler
--with-extra-charsets=complex --enable-thread-safe-client
--with-big-tables --with-readline --with-ssl --with-embedded-server
--enable-local-infile --with-plugins=innobase
make && make install
chmod +w /usr/local/webserver/mysql
chown -R mysql:mysql /usr/local/webserver/mysql
cd ../
附:以下為附加步驟,如果你想在這臺服務器上運行MySQL數(shù)據庫,則執(zhí)行以下兩步。如果你只是希望讓PHP支持MySQL擴展庫,能夠連接其他服務器上的MySQL數(shù)據庫,那么,以下兩步無需執(zhí)行。
①、創(chuàng)建MySQL數(shù)據庫存放目錄
mkdir -p /data0/mysql/3306/data/
chown -R mysql:mysql /data0/mysql/
②、以mysql用戶賬號的身份建立數(shù)據表:
/usr/local/webserver/mysql/bin/mysql_install_db
--basedir=/usr/local/webserver/mysql --datadir=/data0/mysql/3306/data
--user=mysql
?、邸?chuàng)建my.cnf配置文件:
vi /data0/mysql/3306/my.cnf
輸入以下內容:
引用
[client]
default-character-set = utf8
port = 3306
socket = /tmp/mysql.sock
[mysql]
prompt="(\u:blog.s135.com:)[\d]> "
no-auto-rehash
[mysqld]
#default-character-set = utf8
user = mysql
port = 3306
socket = /tmp/mysql.sock
basedir = /usr/local/webserver/mysql
datadir = /data0/mysql/3306/data
open_files_limit = 10240
back_log = 600
max_connections = 3000
max_connect_errors = 6000
table_cache = 614
external-locking = FALSE
max_allowed_packet = 32M
sort_buffer_size = 2M
join_buffer_size = 2M
thread_cache_size = 300
thread_concurrency = 8
query_cache_size = 32M
query_cache_limit = 2M
query_cache_min_res_unit = 2k
default-storage-engine = MyISAM
default_table_type = MyISAM
thread_stack = 192K
transaction_isolation = READ-COMMITTED
tmp_table_size = 246M
max_heap_table_size = 246M
long_query_time = 1
log_long_format
log-bin = /data0/mysql/3306/binlog
binlog_cache_size = 4M
binlog_format = MIXED
max_binlog_cache_size = 8M
max_binlog_size = 512M
expire_logs_days = 7
key_buffer_size = 256M
read_buffer_size = 1M
read_rnd_buffer_size = 16M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 128M
myisam_max_sort_file_size = 10G
myisam_max_extra_sort_file_size = 10G
myisam_repair_threads = 1
myisam_recover
skip-name-resolve
master-connect-retry = 10
slave-skip-errors = 1032,1062,126,1114,1146,1048,1396
server-id = 1
innodb_additional_mem_pool_size = 16M
innodb_buffer_pool_size = 2048M
innodb_data_file_path = ibdata1:1024M:autoextend
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 16M
innodb_log_file_size = 128M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 0
[mysqldump]
quick
max_allowed_packet = 32M
?、堋?chuàng)建管理MySQL數(shù)據庫的shell腳本:
vi /data0/mysql/3306/mysql
輸入以下內容(這里的用戶名admin和密碼12345678接下來的步驟會創(chuàng)建):
- #!/bin/sh
-
- mysql_port=3306
- mysql_username="admin"
- mysql_password="12345678"
-
- function_start_mysql()
- {
- printf "Starting MySQL...\n"
- /bin/sh /usr/local/webserver/mysql/bin/mysqld_safe --defaults-file=/data0/mysql/${mysql_port}/my.cnf 2>&1 > /dev/null &
- }
-
- function_stop_mysql()
- {
- printf "Stoping MySQL...\n"
- /usr/local/webserver/mysql/bin/mysqladmin -u ${mysql_username} -p${mysql_password} -S /tmp/mysql.sock shutdown
- }
-
- function_restart_mysql()
- {
- printf "Restarting MySQL...\n"
- function_stop_mysql
- sleep 5
- function_start_mysql
- }
-
- function_kill_mysql()
- {
- kill -9 $(ps -ef | grep 'bin/mysqld_safe' | grep ${mysql_port} | awk '{printf $2}')
- kill -9 $(ps -ef | grep 'libexec/mysqld' | grep ${mysql_port} | awk '{printf $2}')
- }
-
- if [ "$1" = "start" ]; then
- function_start_mysql
- elif [ "$1" = "stop" ]; then
- function_stop_mysql
- elif [ "$1" = "restart" ]; then
- function_restart_mysql
- elif [ "$1" = "kill" ]; then
- function_kill_mysql
- else
- printf "Usage: /data0/mysql/${mysql_port}/mysql {start|stop|restart|kill}\n"
- fi
?、?、賦予shell腳本可執(zhí)行權限:
chmod +x /data0/mysql/3306/mysql
?、蕖覯ySQL:
/data0/mysql/3306/mysql start
?、?、通過命令行登錄管理MySQL服務器(提示輸入密碼時直接回車):
/usr/local/webserver/mysql/bin/mysql -u root -p -S /tmp/mysql.sock
?、?、輸入以下SQL語句,創(chuàng)建一個具有root權限的用戶(admin)和密碼(12345678):
GRANT ALL PRIVILEGES ON *.* TO 'admin'@'localhost' IDENTIFIED BY '12345678';
GRANT ALL PRIVILEGES ON *.* TO 'admin'@'127.0.0.1' IDENTIFIED BY '12345678';
⑨、(可選)停止MySQL:
/data0/mysql/3306/mysql stop
3、編譯安裝PHP(FastCGI模式)
tar zxvf php-5.2.10.tar.gz
gzip -cd php-5.2.10-fpm-0.5.11.diff.gz | patch -d php-5.2.10 -p1
cd php-5.2.10/
./configure
--prefix=/usr/local/webserver/php
--with-config-file-path=/usr/local/webserver/php/etc
--with-mysql=/usr/local/webserver/mysql
--with-mysqli=/usr/local/webserver/mysql/bin/mysql_config
--with-iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir
--with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml
--disable-rpath --enable-discard-path --enable-safe-mode
--enable-bcmath --enable-shmop --enable-sysvsem
--enable-inline-optimization --with-curl --with-curlwrappers
--enable-mbregex --enable-fastcgi --enable-fpm
--enable-force-cgi-redirect --enable-mbstring --with-mcrypt --with-gd
--enable-gd-native-ttf --with-openssl --with-mhash --enable-pcntl
--enable-sockets --with-ldap --with-ldap-sasl --with-xmlrpc
--enable-zip --enable-soap --without-pear
make ZEND_EXTRA_LIBS='-liconv'
make install
cp php.ini-dist /usr/local/webserver/php/etc/php.ini
cd ../
4、編譯安裝PHP5擴展模塊
tar zxvf memcache-2.2.5.tgz
cd memcache-2.2.5/
/usr/local/webserver/php/bin/phpize
./configure --with-php-config=/usr/local/webserver/php/bin/php-config
make
make install
cd ../
tar jxvf eaccelerator-0.9.5.3.tar.bz2
cd eaccelerator-0.9.5.3/
/usr/local/webserver/php/bin/phpize
./configure --enable-eaccelerator=shared --with-php-config=/usr/local/webserver/php/bin/php-config
make
make install
cd ../
tar zxvf PDO_MYSQL-1.0.2.tgz
cd PDO_MYSQL-1.0.2/
/usr/local/webserver/php/bin/phpize
./configure --with-php-config=/usr/local/webserver/php/bin/php-config --with-pdo-mysql=/usr/local/webserver/mysql
make
make install
cd ../
tar zxvf ImageMagick.tar.gz
cd ImageMagick-6.5.1-2/
./configure
make
make install
cd ../
tar zxvf imagick-2.2.2.tgz
cd imagick-2.2.2/
/usr/local/webserver/php/bin/phpize
./configure --with-php-config=/usr/local/webserver/php/bin/php-config
make
make install
cd ../
5、修改php.ini文件
手工修改:查找/usr/local/webserver/php/etc/php.ini中的extension_dir = "./"
修改為extension_dir = "/usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-20060613/"
并在此行后增加以下幾行,然后保存:
extension = "memcache.so"
extension = "pdo_mysql.so"
extension = "imagick.so"
再查找output_buffering = Off
修改為output_buffering = On
自動修改:若嫌手工修改麻煩,可執(zhí)行以下shell命令,自動完成對php.ini文件的修改:
sed
-i 's#extension_dir = "./"#extension_dir =
"/usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-20060613/"\nextension
= "memcache.so"\nextension = "pdo_mysql.so"\nextension =
"imagick.so"\n#' /usr/local/webserver/php/etc/php.ini
sed -i 's#output_buffering = Off#output_buffering = On#' /usr/local/webserver/php/etc/php.ini
sed -i "s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g" /usr/local/webserver/php/etc/php.ini
6、配置eAccelerator加速PHP:
mkdir -p /usr/local/webserver/eaccelerator_cache
vi /usr/local/webserver/php/etc/php.ini
按shift+g鍵跳到配置文件的最末尾,加上以下配置信息:
引用
[eaccelerator]
zend_extension="/usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so"
eaccelerator.shm_size="64"
eaccelerator.cache_dir="/usr/local/webserver/eaccelerator_cache"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="3600"
eaccelerator.shm_prune_period="3600"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"
7、創(chuàng)建www用戶和組,以及供blog.s135.com和
www.s135.com兩個虛擬主機使用的目錄:
/usr/sbin/groupadd www
/usr/sbin/useradd -g www www
mkdir -p /data0/htdocs/blog
chmod +w /data0/htdocs/blog
chown -R www:www /data0/htdocs/blog
mkdir -p /data0/htdocs/www
chmod +w /data0/htdocs/www
chown -R www:www /data0/htdocs/www
8、創(chuàng)建php-fpm配置文件(php-fpm是為PHP打的一個FastCGI管理補丁,可以平滑變更php.ini配置而無需重啟php-cgi):
在/usr/local/webserver/php/etc/目錄中創(chuàng)建php-fpm.conf文件:
rm -f /usr/local/webserver/php/etc/php-fpm.conf
vi /usr/local/webserver/php/etc/php-fpm.conf
輸入以下內容(如果您安裝 Nginx + PHP 用于程序調試,請將以下的<value
name="display_errors">0</value>改為<value
name="display_errors">1</value>,以便顯示PHP錯誤信息,否則,Nginx
會報狀態(tài)為500的空白錯誤頁):
9、啟動php-cgi進程,監(jiān)聽127.0.0.1的9000端口,進程數(shù)為200(如果服務器內存小于3GB,可以只開啟64個進程),用戶為www:
ulimit -SHn 51200
/usr/local/webserver/php/sbin/php-fpm start
注:/usr/local/webserver/php/sbin/php-fpm還有其他參數(shù),包
括:start|stop|quit|restart|reload|logrotate,修改php.ini后不重啟php-cgi,重新加載配置文件
使用reload。
三、安裝Nginx 0.7.61 1、安裝Nginx所需的pcre庫:
tar zxvf pcre-7.9.tar.gz
cd pcre-7.9/
./configure
make && make install
cd ../
2、安裝Nginx
tar zxvf nginx-0.7.61.tar.gz
cd nginx-0.7.61/
./configure --user=www --group=www --prefix=/usr/local/webserver/nginx --with-http_stub_status_module --with-http_ssl_module
make && make install
cd ../
3、創(chuàng)建Nginx日志目錄
mkdir -p /data1/logs
chmod +w /data1/logs
chown -R www:www /data1/logs
4、創(chuàng)建Nginx配置文件
?、?、在/usr/local/webserver/nginx/conf/目錄中創(chuàng)建nginx.conf文件:
rm -f /usr/local/webserver/nginx/conf/nginx.conf
vi /usr/local/webserver/nginx/conf/nginx.conf
輸入以下內容:
引用
user www www;
worker_processes 8;
error_log /data1/logs/nginx_error.log crit;
pid /usr/local/webserver/nginx/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;
events
{
use epoll;
worker_connections 51200;
}
http
{
include mime.types;
default_type application/octet-stream;
#charset gb2312;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 8m;
sendfile on;
tcp_nopush on;
keepalive_timeout 60;
tcp_nodelay on;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
#limit_zone crawler $binary_remote_addr 10m;
server
{
listen 80;
server_name blog.s135.com;
index index.html index.htm index.php;
root /data0/htdocs/blog;
#limit_conn crawler 20;
location ~ .*\.(php|php5)?$
{
#fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fcgi.conf;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 30d;
}
location ~ .*\.(js|css)?$
{
expires 1h;
}
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
access_log /data1/logs/access.log access;
}
server
{
listen 80;
server_name
www.s135.com; index index.html index.htm index.php;
root /data0/htdocs/www;
location ~ .*\.(php|php5)?$
{
#fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fcgi.conf;
}
log_format wwwlogs '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
access_log /data1/logs/wwwlogs.log wwwlogs;
}
server
{
listen 80;
server_name status.blog.s135.com;
location / {
stub_status on;
access_log off;
}
}
}
②、在/usr/local/webserver/nginx/conf/目錄中創(chuàng)建fcgi.conf文件:
vi /usr/local/webserver/nginx/conf/fcgi.conf
輸入以下內容:
引用
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
5、啟動Nginx
ulimit -SHn 51200
/usr/local/webserver/nginx/sbin/nginx
四、配置開機自動啟動Nginx + PHP
vi /etc/rc.local
在末尾增加以下內容:
引用
ulimit -SHn 51200
/usr/local/webserver/php/sbin/php-fpm start
/usr/local/webserver/nginx/sbin/nginx
五、優(yōu)化Linux內核參數(shù)
vi /etc/sysctl.conf
在末尾增加以下內容:
引用
# Add
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
#net.ipv4.tcp_tw_len = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
#net.ipv4.tcp_fin_timeout = 30
#net.ipv4.tcp_keepalive_time = 120
net.ipv4.ip_local_port_range = 1024 65535
使配置立即生效:
/sbin/sysctl -p
六、在不停止Nginx服務的情況下平滑變更Nginx配置 1、修改/usr/local/webserver/nginx/conf/nginx.conf配置文件后,請執(zhí)行以下命令檢查配置文件是否正確:
/usr/local/webserver/nginx/sbin/nginx -t
如果屏幕顯示以下兩行信息,說明配置文件正確:
the configuration file /usr/local/webserver/nginx/conf/nginx.conf syntax is ok
the configuration file /usr/local/webserver/nginx/conf/nginx.conf was tested successfully 2、這時,輸入以下命令查看Nginx主進程號:
ps -ef | grep "nginx: master process" | grep -v "grep" | awk -F ' ' '{print $2}'
屏幕顯示的即為Nginx主進程號,例如:
6302 這時,執(zhí)行以下命令即可使修改過的Nginx配置文件生效:
kill -HUP 6302
或者無需這么麻煩,找到Nginx的Pid文件:
kill -HUP `cat /usr/local/webserver/nginx/nginx.pid`
七、編寫每天定時切割Nginx日志的腳本 1、創(chuàng)建腳本/usr/local/webserver/nginx/sbin/cut_nginx_log.sh
vi /usr/local/webserver/nginx/sbin/cut_nginx_log.sh
輸入以下內容:
引用
#!/bin/bash
# This script run at 00:00
# The Nginx logs path
logs_path="/usr/local/webserver/nginx/logs/"
mkdir -p ${logs_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")/
mv
${logs_path}access.log ${logs_path}$(date -d "yesterday" +"%Y")/$(date
-d "yesterday" +"%m")/access_$(date -d "yesterday" +"%Y%m%d").log
kill -USR1 `cat /usr/local/webserver/nginx/nginx.pid`
2、設置crontab,每天凌晨00:00切割nginx訪問日志
crontab -e
輸入以下內容:
引用
00 00 * * * /bin/bash /usr/local/webserver/nginx/sbin/cut_nginx_log.sh
本文若有小的修改,會第一時間在以下網址發(fā)布:
http://blog.s135.com/nginx_php_v5/
附:文章修改歷史 ● [2009年05月06日] [Version 5.0] 在4.14版本的基礎上重新撰寫本文,支持PHP 5.2.9,增加MySQL配置過程
● [2009年05月10日] [Version 5.1] 增加壓力測試方法。
● [2009年05月20日] [Version 5.2] Nginx升級到0.7.58版本;PHP編譯選項增加:--with-xmlrpc --enable-zip。
● [2009年06月10日] [Version 5.3] Nginx升級到0.7.59版本;MySQL升級到5.1.35版本。
● [2009年06月26日] [Version 5.4] Nginx升級到0.7.61版本;PHP升級到5.2.10版本;PCRE升級到7.9版本;PHP增加soap擴展;關閉了PHP的PEAR;優(yōu)化sysctl配置。
?。ㄈ耐辏?