nginx的安装及基本配置
在CentOS7（mini）上安装：
[root@~ localhost]#lftp 172.16.0.1
lftp 172.16.0.1:/pub/Sources/7.x86_64/nginx> pwd
ftp://172.16.0.1/pub/Sources/7.x86_64/nginx
#偶数版本号为稳定版
lftp 172.16.0.1:/pub/Sources/7.x86_64/nginx> get nginx-1.10.2-1.el7.ngx.x86_64.rpm nginx-module-geoip-1.10.2-1.el7.ngx.x86_64.rpm
670448 bytes transferred
Total 2 files transferred
[root@~ localhost]#ls
anaconda-ks.cfg nginx-1.10.2-1.el7.ngx.x86_64.rpm nginx-module-geoip-1.10.2-1.el7.ngx.x86_64.rpm
[root@~ localhost]#yum install ./nginx-1.10.2-1.el7.ngx.x86_64.rpm
#80端口没启动，即可启动Nginx
[root@~ localhost]#ss -ntl
[root@~ localhost]#systemctl start nginx.service
[root@etc localhost]#cd /etc/nginx/
[root@nginx localhost]#vim nginx.conf
[root@nginx localhost]#cd conf.d/
[root@conf.d localhost]#ls
default.conf
[root@conf.d localhost]#vim test.conf
server {
listen 8080;
server_name www.magedu.com;
location / {
index index.html index.htm;
root /data/www;
} } [root@conf.d localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
#重载
[root@conf.d localhost]#nginx -s reload
[root@conf.d localhost]#mkdir -pv /data/www
mkdir: created directory ‘/data’
mkdir: created directory ‘/data/www’
[root@conf.d localhost]#vim /data/www/index.html <h1>test page</h1>
[root@conf.d localhost]#ss -ntl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:8080 *:*
动态装载动态模块：
load_module files；
#动态装载Geoip模块
[root@~ localhost]#yum -y install ./nginx-module-geoip-1.10.2-1.el7.ngx.x86_64.rpm
#查看安装完成生成的文件
[root@~ localhost]#rpm -ql nginx-module-geoip
/usr/lib64/nginx/modules/ngx_http_geoip_module-debug.so
/usr/lib64/nginx/modules/ngx_http_geoip_module.so #此文件是需要加载的模块
/usr/share/doc/nginx-module-geoip
/usr/share/doc/nginx-module-geoip/COPYRIGHT
#编辑主配置文件，将需要加载的文件放到全局配置中（main配置）
[root@~ localhost]#vim /etc/nginx/nginx.conf
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid; load_module /usr/lib64/nginx/modules/ngx_http_geoip_module.so; #装载模块 #配置文件语法检查
[root@~ localhost]#nginx -t
#重载
[root@~ localhost]#nginx -s reload
性能优化的相关配置：
#进程数量和进程绑定CPU
[root@~ localhost]#vim /etc/nginx/nginx.conf
user nginx;
worker_processes 4; #按CPU的颗数-lscpu
#将worker进程绑定在指定的CPU上
worker_cpu_affinity 0001 0010 0100 1000;
[root@~ localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful #将进程没有绑定在CPU和绑定进行压测
#没有绑定CPU
[root@nginx localhost]#vim nginx.conf
worker_processes 4;
#worker_cpu_affinity 0001 0010 0100 1000;
[root@nginx localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx localhost]#nginx -s reload
#检测
#-n:每0.5秒检测一次
#psr:运行进程的CPU
[root@nginx localhost]#watch -n 0.5 'ps axo pid,comm,psr|grep "nginx"' Every 0.5s: ps axo pid,comm,psr|grep "nginx" Mon Jun 5 13:59:29 2017 20628 nginx 0
20766 nginx 3
20767 nginx 1
20768 nginx 0
20769 nginx 0 #另一台服务器测试：
[root@~ localhost]#yum -y install httpd-tools
#-n:发起的请求数
#-c:并发数
[root@~ localhost]#ab -n 100000 -c 20 http://172.16.250.89/index.html Benchmarking 172.16.250.89 (be patient)
Completed 10000 requests
Completed 20000 requests
Completed 30000 requests
Completed 40000 requests
Completed 50000 requests
Completed 60000 requests
Completed 70000 requests
Completed 80000 requests
Completed 90000 requests
Completed 100000 requests
Finished 100000 requests Document Path: /index.html
Document Length: 612 bytes Concurrency Level: 20
Time taken for tests: 189.948 seconds
Complete requests: 100000
Failed requests: 0
Write errors: 0
Total transferred: 84500000 bytes
HTML transferred: 61200000 bytes
Requests per second: 526.46 [#/sec] (mean)
Time per request: 37.990 [ms] (mean)
Time per request: 1.899 [ms] (mean, across all concurrent requests)
Transfer rate: 434.43 [Kbytes/sec] received Connection Times (ms)
min mean[+/-sd] median max
Connect: 1 16 6.9 16 423
Processing: 2 21 9.4 20 552
Waiting: 0 15 8.9 15 407
Total: 6 37 13.7 36 652 Percentage of the requests served within a certain time (ms)
50% 36
66% 37
75% 39
80% 40
90% 43
95% 46
98% 53
99% 77
100% 652 (longest request) #进程绑定CPU：
[root@nginx localhost]#vim nginx.conf
user nginx;
worker_processes 4;
worker_cpu_affinity 0001 0010 0100 1000; [root@nginx localhost]#watch -n 0.5 'ps axo pid,comm,psr|grep "nginx"'
[root@nginx localhost]#vim nginx.conf
[root@nginx localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx localhost]#nginx -s reload
[root@nginx localhost]#watch -n 0.5 'ps axo pid,comm,psr|grep "nginx"' Every 0.5s: ps axo pid,comm,psr|grep "nginx" Mon Jun 5 14:03:10 2017 20628 nginx 0
23847 nginx 0
23848 nginx 1
23849 nginx 2
23850 nginx 3 #压测：
[root@~ localhost]#ab -n 100000 -c 20 http://172.16.250.89/index.html Benchmarking 172.16.250.89 (be patient)
Completed 10000 requests
Completed 20000 requests
Completed 30000 requests
Completed 40000 requests
Completed 50000 requests
Completed 60000 requests
Completed 70000 requests
Completed 80000 requests
Completed 90000 requests
Completed 100000 requests
Finished 100000 requests Document Path: /index.html
Document Length: 612 bytes Concurrency Level: 20
Time taken for tests: 186.953 seconds
Complete requests: 100000
Failed requests: 0
Write errors: 0
Total transferred: 84500000 bytes
HTML transferred: 61200000 bytes
Requests per second: 534.89 [#/sec] (mean)
Time per request: 37.391 [ms] (mean)
Time per request: 1.870 [ms] (mean, across all concurrent requests)
Transfer rate: 441.39 [Kbytes/sec] received Connection Times (ms)
min mean[+/-sd] median max
Connect: 1 17 4.9 16 194
Processing: 3 20 6.6 19 308
Waiting: 0 14 5.7 14 204
Total: 12 37 9.9 35 457 Percentage of the requests served within a certain time (ms)
50% 35
66% 37
75% 38
80% 39
90% 43
95% 48
98% 55
99% 66
100% 457 (longest request)
配置文件中映射目录测试：
[root@images localhost]#vim /etc/nginx/conf.d/test.conf
server {
listen 8080;
server_name www.magedu.com;
location / {
index index.html index.htm;
root /data/www;
}
location /images/ { #此处的路径实际上是/data/pictures/images;
root /data/pictures/;
} } [root@images localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@images localhost]#nginx -s reload
[root@images localhost]#mkdir /data/pictures
[root@images localhost]#cd /data/pictures
[root@pictures localhost]#ls
[root@pictures localhost]#mkdir images
[root@pictures localhost]#ls
images
[root@pictures localhost]#cd images/
[root@images localhost]#ls
tulips.jpg
[root@images localhost]#pwd
/data/pictures/images
[root@images localhost]#ls
tulips.jpg
#将root换成alias时
[root@pictures localhost]#vim /etc/nginx/conf.d/test.conf
[root@images localhost]#cd /data/pictures/
[root@pictures localhost]#ls
images lighthouse.jpg
[root@pictures localhost]#vim /etc/nginx/conf.d/test.conf
server {
listen 8080;
server_name www.magedu.com;
location / {
index index.html index.htm;
root /data/www;
}
location /images/ {
alias /data/pictures/; #别名，实际上相当于/images/与/data/pictures同级
} }
[root@pictures localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@pictures localhost]#nginx -s reload
没有location的测试：
[root@conf.d localhost]#pwd
/etc/nginx/conf.d
[root@conf.d localhost]#vi test2.conf
server {
listen 8088; #开启8088端口
root /data/www2;
server_name www2.magedu.com;
} [root@conf.d localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@conf.d localhost]#nginx -s reload
[root@conf.d localhost]#mkdir /data/www2
[root@conf.d localhost]#vim /data/www2/index.html
<h1>www2</h1>
错误页面的重定向：
[root@conf.d localhost]#cat test2.conf
server {
listen 8088;
server_name www2.magedu.com;
#错误页面定位到如下路径；即在/data/www2/下得有这个图片文件
error_page 404 http://172.16.250.89:8088/error.jpg;
location / {
root /data/www2; }
}
[root@www localhost]#cd /data/www2/
[root@www2 localhost]#ls
error.jpg images index.html
输入http://172.16.250.89:8088/index2.html:
用Telnet测试keepalive：
[root@conf.d localhost]#cat test2.conf
server {
listen 8088;
server_name www2.magedu.com;
error_page 404 =200 http://172.16.250.89:8088/error.jpg;
keepalive_timeout 60; #60s后断开长连接
keepalive_requests ; #在单个长连接上最多响应10个资源
location / {
root /data/www2; }
} [root@~ localhost]#telnet 172.16.250.89 8088 #指明ip和端口
Trying 172.16.250.89...
Connected to 172.16.250.89.
Escape character is '^]'.
GET /index.html HTTP/1.1 #Telnet测试语法
Host: 172.16.250.89
Connection closed by foreign host. #超过60s自动断开长连接
basic认证：
[root@nginx localhost]#vim /etc/nginx/conf.d/test.conf
server {
listen 8080;
server_name www.magedu.com;
location / {
index index.html index.htm;
root /data/www;
}
location /images/ {
alias /data/pictures/;
}
location /bbs/ {
root /data/; #需要认证的文件
auth_basic "BBS internal"; #认证说明
auth_basic_user_file /etc/nginx/.ngxpasswd; #认证文件
}
}
#安装httpd-tools使用htpasswd生成认证文件和用户
[root@nginx localhost]#yum -y install httpd-tools
[root@nginx localhost]#htpasswd -c -m /etc/nginx/.ngxpasswd tom
#-c:创建认证文件
#-m:md5的算法加密
[root@nginx localhost]#htpasswd -m /etc/nginx/.ngxpasswd jerry
[root@nginx localhost]#nginx -t
[root@nginx localhost]#nginx -s reload
[root@nginx localhost]#mkdir /data/bbs
[root@nginx localhost]#vim /data/bbs/index.html
<h1>FBI area</h1>
输入tom 和密码：
输出stub_status:
[root@nginx localhost]#vim /etc/nginx/conf.d/test.conf
location /ngxstatus {
stub_status;
}
[root@nginx localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx localhost]#nginx -s reload
启用压缩功能：
[root@nginx localhost]#vim nginx.conf
gzip on; #启用压缩
[root@nginx localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@nginx localhost]#nginx -s reload
[root@www localhost]#curl -I --compressed http://172.16.250.89:8080/access_log.html
HTTP/1.1 200 OK
Server: nginx/1.10.2
Date: Wed, 14 Jun 2017 13:13:19 GMT
Content-Type: text/html
Last-Modified: Wed, 14 Jun 2017 12:43:59 GMT
Connection: keep-alive
ETag: W/"59412f8f-14ea216"
Content-Encoding: gzip #已压缩 [root@nginx localhost]#vim nginx.conf
gzip on;
gzip_types text/css text/plain application/javascript;
gzip_comp_level 5; #压缩比
gzip_min_length 64; #启用压缩的最小长度
[root@nginx localhost]#nginx -t
[root@nginx localhost]#nginx -s reload
ngx_http_rewrite_module:
[root@conf.d localhost]#vim test.conf
error_page 404 =200 /images/error.jpg;
location / {
index index.html index.htm;
root /data/www;
if ($http_user_agent ~* curl) {
rewrite ^(.*)$ /curl/$1; #curl测试重定向
}
}
location /curl/ {
alias /data/textagent; #curl重定向后的文件路径，需要手动创建
}
#对error_page做重定向，到百度首页，临时的重定向（redirect：302）
location = /images/error.jpg {
rewrite ^(.*)$ http://www.baidu.com/ redirect;
}
#新疆curl重定向的页面
[root@conf.d localhost]#cd /data/
[root@data localhost]#cat textagent/index.html
<h1>hello,this is rewrite page</h1> [root@conf.d localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@conf.d localhost]#nginx -s reload
测试效果：
输入：
ngx_http_referer_module:防盗链机制；
[root@conf.d localhost]#cat test.conf
#在浏览器非手动键入网址访问或者referer值为空时，跳转
valid_referers none blocked server_name *.magedu.com;
if ($invalid_referer) {
return 302 http://www.magedu.com/;
}
[root@~ localhost]#curl -I -e http://www.baidu.com http://172.16.250.89:8080/
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.10.2
Date: Wed, 14 Jun 2017 16:03:04 GMT
Content-Type: text/html
Content-Length: 161
Connection: keep-alive
Location: http://www.magedu.com/ #跳转到定义的网址
#-I:只显示请求头信息
#-e:模拟referer，从那个网址直接跳转到本网址
ngx_http_proxy_module:
[root@conf.d localhost]#cat default.conf
server {
listen 80;
server_name localhost; #charset koi8-r;
#access_log /var/log/nginx/log/host.access.log main; location / {
root /usr/share/nginx/html;
index index.html index.htm;
proxy_pass http://192.168.2.129:80/bbs; #此ip是被代理的主机ip
}
输入:
#proxy_set_header:为了让被代理的的主机能保存真正访问的信息，如访问客户端的ip信息
[root@conf.d localhost]#vim default.conf
location ~* \.(jpg|jpeg|gif|png)$ {
proxy_pass http://192.168.2.129;
proxy_set_header X-Real-IP $remote_addr;
}
[root@~ localhost]#nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@~ localhost]#nginx -s reload
#在被代理主机上设置：
[root@html localhost]#vim /etc/httpd/conf/httpd.conf
LogFormat "%{X-Real-IP}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
[root@html localhost]#httpd -t
[root@html localhost]#systemctl restart httpd
[root@html localhost]#tail /var/log/httpd/access_log
172.16.250.55 - - [06/Jun/2017:13:09:12 +0800] "GET /1.jpg HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
172.16.250.55 - - [06/Jun/2017:13:09:14 +0800] "GET /1.jpg HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
#172.16.250.55 是访问代理主机的客户端信息
代理缓存的设置：
[root@~ localhost]#cd /etc/nginx/
[root@nginx localhost]#vim nginx.conf
http {
#定义proxy的缓存路径必须在http下
#level是定义目录的格式，一级目录两个十六进制的值，二级是一个，三级是一个；keys_zone的名称是可以自由定义的，大小最大的1G
proxy_cache_path /data/cache/ngnix levels=2:1:1 keys_zone=mycache:10m max_size=1g;
}
[root@nginx localhost]#mkdir /data/cache/ngnix -pv
mkdir: created directory ‘/data’
mkdir: created directory ‘/data/cache’
mkdir: created directory ‘/data/cache/ngnix’
[root@nginx localhost]#vim /etc/nginx/conf.d/default.conf
location ~* \.(jpg|jpeg|gif|png)$ {
proxy_pass http://192.168.2.129;
proxy_set_header X-Real-IP $remote_addr;
proxy_cache mycache; #引用定义的缓存
proxy_cache_key $request_uri; #缓存key的内容
proxy_cache_valid 200 301 302 10m; #对于特定响应码的缓存时长 m分钟 h 小时
proxy_cache_valid any 1m; } [root@nginx localhost]#nginx -t
[root@nginx localhost]#nginx -s reload
测试：
[root@conf.d localhost]#ll /data/cache/ngnix/ -h
total 16K
drwx------ 3 nginx nginx 4.0K Jun 6 00:22 60
drwx------ 3 nginx nginx 4.0K Jun 6 00:17 a4
drwx------ 3 nginx nginx 4.0K Jun 6 00:22 b3
drwx------ 3 nginx nginx 4.0K Jun 6 00:22 dd
[root@conf.d localhost]#ll /data/cache/ngnix/60/4/c/635450b5c68b27bfaa2e0065cb86c460 -h
[root@nginx localhost]#vim /etc/nginx/conf.d/default.conf
location ~* \.(jpg|jpeg|gif|png)$ {
proxy_pass http://192.168.2.129;
proxy_set_header X-Real-IP $remote_addr;
proxy_cache mycache;
proxy_cache_key $request_uri;
proxy_cache_valid 200 301 302 10m;
proxy_cache_valid any 1m;
proxy_hide_header Server; #隐藏的是后端服务器的首部信息，而不是Nginx代理服务器的首部信息
add_header X-Proxy $server_addr; #添加首部的展示信息
}
输入：
nginx的安装及基本配置的更多相关文章
- Nginx的安装及相关配置
Nginx的安装及相关配置 Nginx 是 C语言 开发,建议在 Linux 上运行,当然,也可以安装 Windows 版本,本篇则使用 CentOS 7 作为安装环境. 一. gcc 安装 安装 n ...
- Nginx的安装及简单配置
Nginx安装 1.下载相关组件 yum install -y gcc gcc-c++ #安装C/C++编译器 yum -y ins ...
- nginx 编译安装以及简单配置
前言 Nginx的大名如雷贯耳,资料太多了,网上一搜一大把,所以这里就不阐述nginx的工作原理了,只是简单的编译安装nginx,然后呢,简单配置一下下. 下载Nginx.安装 下载地址:http:/ ...
- Ubuntu16 Nginx的安装与基本配置
关于Nginx 它是一个轻量级.高性能.稳定性高.并发性好的HTTP和反向代理服务器,当我们搭建自己的应用时,通常用它作为反向代理服务器,图片服务器和负载均衡. 1.Ubuntu 16安装 Nginx ...
- java架构之路-（nginx使用详解）nginx的安装和基本配置
Linux是一套免费使用和自由传播的类Unix操作系统,是一个基于POSIX和Unix的多用户.多任务.支持多线程和多CPU的操作系统.它能运行主要的Unix工具软件.应用程序和网络协议.它支持32位 ...
- Nginx 2.安装与部署配置
转 https://www.cnblogs.com/wcwnina/p/8728430.html > 下载 官方网站:https://nginx.org/en/download.html Win ...
- Linux下nginx的安装以及环境配置
参考链接 https://blog.csdn.net/qq_42815754/article/details/82980326 环境: centos7 .nginx-1.9.14 1.下载 并解压 ...
- Nginx服务安装配置
1.Nginx介绍 Nginx是一个高性能的HTTP和反向代理服务器,由俄罗斯人开发的,第一个版本发布于2004年10月4日.Nginx由于出色的性能,在世界范围内受到了越来越多人的关注,其特点是占有 ...
- Django Nginx+uwsgi 安装配置
使用 python manage.py runserver 来运行服务器.这只适用测试环境中使用. 正式发布的服务,我们需要一个可以稳定而持续的服务器,比如apache, Nginx, lighttp ...
随机推荐
- 在函数中如何获取 线程对象、线程唯一ID
threading.current_thread() threading.current_thread().ident
- SAP HR 复制PA30的人员
[转自http://www.512test.com/home/space.php?uid=19&do=blog&id=2381] 很多顾问测试HR的程序时都为录入人员头痛,下面的程序提 ...
- Spring之AOP由浅入深（转发：https://www.cnblogs.com/zhaozihan/p/5953063.html）
1.AOP的作用 在OOP中,正是这种分散在各处且与对象核心功能无关的代码(横切代码)的存在,使得模块复用难度增加.AOP则将封装好的对象剖开,找出其中对多个对象产生影响的公共行为,并将其封装为一个可 ...
- border --- 透明边框
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8&quo ...
- Data Structure Trie: suffix problem
http://www.geeksforgeeks.org/suffix-array-set-1-introduction/ http://www.geeksforgeeks.org/pattern-s ...
- 【leetcode刷题笔记】Reverse Integer
Reverse digits of an integer. Example1: x = 123, return 321Example2: x = -123, return -321 解题:设定一个变量 ...
- 【并查集】关押罪犯（BSOJ2809）
Description S城现有两座监狱,一共关押着N名罪犯,编号分别为1~N.他们之间的关系自然也极不和谐.很多罪犯之间甚至积怨已久,如果客观条件具备则随时可能爆发冲突.我们用“怨 气值”(一个正整 ...
- 常量池、perm(持久代)、方法区、栈
常量池.perm(持久代).方法区.栈 常量池指的是在编译期被确定,并被保存在已编译的.class文件中的一些数据. 除了包含代码中所定义的各种基本类型(如:int.long等等)和对象型(如St ...
- poj 1032 Parliament 【思维题】
题目地址:http://poj.org/problem?id=1032 Parliament Time Limit: 1000MS Memory Limit: 10000K Total Submi ...
- 7zip压缩程序的使用
1.压缩: zip格式: 7zip.exe a -tzip C:\压缩解压测试\TEST.zip C:\压缩解压测试\TEST\* 7z格式: 7zip.exe a -t7z C:\压缩解压测试\TE ...