CentOS6.5 Nginx优化编译配置
时间:2014-06-10 05:14 来源:linux.it.net.cn 作者:IT网
说到Nginx，它真的算是我在运维工作中的好朋友，它优异的性能和极高的工作效率实在是让人大爱，来自internet的报告称其epoll模型能够支持高达50000个并发连接数。
Epoll[维基百科]:
epoll是Linux下多路复用IO接口select/poll的增强版本，它能显著提高程序在大量并发连接中只有少量活跃的情况下的系统CPU利用率，因为它会复用文件描述符集合来传递结果而不用迫使开发者每次等待事件之前都必须重新准备要被侦听的文件描述符集合，另一点原因就是获取事件的时候，它无须遍历整个被侦听的描述符集，只要遍历那些被内核IO事件异步唤醒而加入Ready队列的描述符集合就行了。epoll除了提供select/poll那种IO事件的电平触发（Level Triggered）外，还提供了边沿触发（Edge Triggered），这就使得用户空间程序有可能缓存IO状态，减少epoll_wait/epoll_pwait的调用，提高应用程序效率。
安装Nginx，这里我略过使用包管理器而使用编译的方式让Nginx运行起来：
1、安装Zlib函数库
####Gcc编译环境是必须条件#####
[root@i-it ~]# yum install gcc-c++ make autoconf aotomake
[root@i-it ~]# tar zxf zlib-1.2.8.tar.gz
[root@i-it ~]# cd zlib-1.2.8
[root@i-it zlib-1.2.8]# ./configure --prefix=/software/zlib
[root@i-it zlib-1.2.8]# make && make install
2、添加对rewrite的支持，编译参数中启用了对utf8字符的支持，以便nginx支持中文的正则表达式
[root@i-it ~]# tar zxf pcre-8.35.tar.gz
[root@i-it ~]# cd pcre-8.35
[root@i-it pcre-8.35]# ./configure --prefix=/software/pcre --enable-utf8 --enable-unicode-properties
[root@i-it pcre-8.35]# make && make install
3、添加对https 的支持
[root@i-it ~]# tar zxf openssl-1.0.1h.tar.gz
[root@i-it ~]# cd openssl-1.0.1h
[root@i-it openssl-1.0.1h]# ./config --prefix=/software/openssl
[root@i-it openssl-1.0.1h]# make && make install
编译TCMalloc，它是由Google公司发开的一款开源工具，goole-perftools中的一成员，TCMalloc在内存的分配效率和速度要比标准的glibc库好得多，它不但可以用来优化高并发下的Mysql，从而降低系统的负载，还可以用于Nginx实现同样的功能，因此，对于高并发的Nginx来说无疑是如虎添翼。
4、安装libunwind库
[root@i-it ~]# tar zxf libunwind-1.1.tar.gz
[root@i-it ~]# cd libunwind-1.1
[root@i-it libunwind-1.1]# CFLAGS=-fPIC ./configure --prefix=/software/google-libunwind
[root@i-it libunwind-1.1]# make CFLAGS=-fPIC && make CFLAGS=-fPIC install
5、安装google-perftools
[root@i-it ~]# tar zxf gperftools-2.2.tar.gz
[root@i-it ~]# cd gperftools-2.2
[root@i-it gperftools-2.2]# LDFLAGS="-L/software/google-libunwind/lib" CPPFLAGS="-I/software/google-libunwind/include" ./configure --prefix=/software/google-perftools
[root@i-it gperftools-2.2]# make && make install
6、添加共享库路径
[root@i-it ~]# echo "/software/google-libunwind/lib/" >> /etc/ld.so.conf
[root@i-it ~]# echo "/software/google-perftools/lib/" >> /etc/ld.so.conf
[root@i-it ~]# echo "/software/zlib/lib/" >> /etc/ld.so.conf
[root@i-it ~]# echo "/software/pcre/lib/" >> /etc/ld.so.conf
[root@i-it ~]# ldconfig -v
7、编译Nginx
[root@i-it ~]# groupadd -g 1500 nginx
[root@i-it ~]# useradd -M -u 1500 -g nginx -s /sbin/nologin nginx
[root@i-it ~]# mkdir /var/tmp/nginx
[root@i-it ~]# chown nginx:nginx /var/tmp/nginx/
[root@i-it ~]# tar zxf nginx-1.7.1.tar.gz
[root@i-it ~]# cd nginx-1.7.1
#############注释该文件的174行取消debug模式##############
[root@i-it nginx-1.7.1]# vi auto/cc/gcc
173 # debug
174 # CFLAGS="$CFLAGS -g"
######因为google-perftools库的安装路径并非默认，所以这里又要修改一次源码####
[root@i-it nginx-1.7.1]# sed -i "s#/usr/local#/software/google-perftools#" auto/lib/google-perftools/conf
[root@i-it nginx-1.7.1]# ./configure --prefix=/software/nginx --user=nginx --group=nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module --with-http_gzip_static_module --with-google_perftools_module --with-debug --http-client-body-temp-path=/var/tmp/nginx/client --http-proxy-temp-path=/var/tmp/nginx/proxy --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --http-scgi-temp-path=/var/tmp/nginx/scgi --with-pcre=/root/pcre-8.35 --with-openssl=/root/openssl-1.0.1h --with-zlib=/root/zlib-1.2.8
[root@i-it nginx-1.7.1]# make && make install
8、先添加一个启动脚本，让Nginx run起来
[root@i-it ~]# vi /etc/init.d/nginx
#!/bin/bash
# nginx Startup script for the Nginx HTTP Server
# it is v.0.0.2 version.
# chkconfig: - 85 15
# description: Nginx is a high-performance web and proxy server.
# It has a lot of features, but it's not for everyone.
# processname: nginx
# pidfile: /software/nginx/logs/nginx.pid
# config: /software/nginx/conf/nginx.conf
nginxd=/software/nginx/sbin/nginx
nginx_config=/software/nginx/conf/nginx.conf
nginx_pid=/software/nginx/logs/nginx.pid
RETVAL=0
prog="nginx"
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x $nginxd ] || exit 0
# Start nginx daemons functions.
start() {
if [ -e $nginx_pid ];then
echo "nginx already running...."
exit 1
fi
echo -n $"Starting $prog: "
daemon $nginxd -c ${nginx_config}
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch /var/lock/subsys/nginx
return $RETVAL
}
# Stop nginx daemons functions.
stop() {
echo -n $"Stopping $prog: "
killproc $nginxd
RETVAL=$?
echo
[ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid
}
reload() {
echo -n $"Reloading $prog: "
#kill -HUP `cat ${nginx_pid}`
killproc $nginxd -HUP
RETVAL=$?
echo
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
stop
start
;;
status)
status $prog
RETVAL=$?
;;
*)
echo $"Usage: $prog {start|stop|restart|reload|status|help}"
exit 1
esac
exit $RETVAL
#########赋权让其run起来#########
[root@i-it ~]# chmod 755 /etc/init.d/nginx && chkconfig nginx on
[root@i-it ~]# service nginx start
Starting nginx: [ OK ]
[root@i-it ~]# netstat -pant | grep 80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 37831/nginx
9、Nginx run起来了，配置前面的google-perftools库
#####创建线程目录#####
[root@i-it ~]# mkdir /tmp/tcmalloc
[root@i-it ~]# chmod 0777 /tmp/tcmalloc/
####修改Nginx配置文件#####
[root@i-it ~]# vi /software/nginx/conf/nginx.conf
pid logs/nginx.pid;
google_perftools_profiles /tmp/tcmalloc;
###查看google-perftools是否加载###
[root@i-it ~]# service nginx restart
Stopping nginx: [ OK ]
Starting nginx: [ OK ]
[root@i-it ~]# lsof -n | grep tcmalloc
nginx 37882 nginx 9w REG 253,0 0 1179654 /tmp/tcmalloc.37882
nginx 37883 nginx 11w REG 253,0 0 1179655 /tmp/tcmalloc.37883
####每一行输出的数据表示Nginx主配置文件中worker_processes的值，其每个线程文件后面的数值为Nginx启动的PID####
[root@i-it ~]# ps aux | grep nginx
root 37880 0.0 0.2 30200 892 ? Ss 00:27 0:00 nginx: master process /software/nginx/sbin/nginx -c /software/nginx/conf/nginx.conf
nginx 37882 0.0 1.1 34804 3844 ? S 00:27 0:00 nginx: worker process
nginx 37883 0.0 1.1 34804 3772 ? S 00:27 0:00 nginx: worker process
####iptables 开80端口####
[root@i-it ~]# iptables -I INPUT -p tcp --dport 80 -j ACCEPT
1、关闭系统中不需要的服务
###minimal 本来就是最小安装，这里我也就不提建议了，跟着自己的环境来###
[root@i-it ~]# chkconfig --list
auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
blk-availability 0:off 1:on 2:on 3:on 4:on 5:on 6:off
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off
ip6tables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
iscsi 0:off 1:off 2:off 3:on 4:on 5:on 6:off
iscsid 0:off 1:off 2:off 3:on 4:on 5:on 6:off
lvm2-monitor 0:off 1:on 2:on 3:on 4:on 5:on 6:off
mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off
multipathd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
netconsole 0:off 1:off 2:off 3:off 4:off 5:off 6:off
netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off
nginx 0:off 1:off 2:on 3:on 4:on 5:on 6:off
postfix 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rdisc 0:off 1:off 2:off 3:off 4:off 5:off 6:off
restorecond 0:off 1:off 2:off 3:off 4:off 5:off 6:off
rsyslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off
saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
udev-post 0:off 1:on 2:on 3:on 4:on 5:on 6:off
2、清除文件描述符
###建议先备份一下###
[root@i-it ~]# ll /software/nginx/sbin/nginx -h
-rwxr-xr-x. 1 root root 2.9M Jun 8 00:02 /software/nginx/sbin/nginx
[root@i-it ~]# strip /software/nginx/sbin/nginx
[root@i-it ~]# ll /software/nginx/sbin/nginx -h
-rwxr-xr-x. 1 root root 2.6M Jun 8 01:54 /software/nginx/sbin/nginx
2、优化写磁盘操作
####重新挂载当前分区，不记录Nginx对文件访问的时间修改####
mount -o defaults,noatime,nodiratime -o remount /dev/sda1
3、优化文件描述符
####修改配置文件####
[root@i-it ~]# egrep -v "^#|^$" /etc/security/limits.conf
* - nofile 65535
* - nproc 65535
[root@i-it ~]# su -
[root@i-it ~]# ulimit -u
65535
[root@i-it ~]# ulimit -n
65535
4、优化内核参数
[root@i-it ~]# cat >/etc/sysctl.conf<
(责任编辑：IT)
安装Nginx，这里我略过使用包管理器而使用编译的方式让Nginx运行起来：1、安装Zlib函数库 ####Gcc编译环境是必须条件##### [root@i-it ~]# yum install gcc-c++ make autoconf aotomake [root@i-it ~]# tar zxf zlib-1.2.8.tar.gz [root@i-it ~]# cd zlib-1.2.8 [root@i-it zlib-1.2.8]# ./configure --prefix=/software/zlib [root@i-it zlib-1.2.8]# make && make install
2、添加对rewrite的支持，编译参数中启用了对utf8字符的支持，以便nginx支持中文的正则表达式 [root@i-it ~]# tar zxf pcre-8.35.tar.gz [root@i-it ~]# cd pcre-8.35 [root@i-it pcre-8.35]# ./configure --prefix=/software/pcre --enable-utf8 --enable-unicode-properties [root@i-it pcre-8.35]# make && make install
3、添加对https 的支持 [root@i-it ~]# tar zxf openssl-1.0.1h.tar.gz [root@i-it ~]# cd openssl-1.0.1h [root@i-it openssl-1.0.1h]# ./config --prefix=/software/openssl [root@i-it openssl-1.0.1h]# make && make install
4、安装libunwind库 [root@i-it ~]# tar zxf libunwind-1.1.tar.gz [root@i-it ~]# cd libunwind-1.1 [root@i-it libunwind-1.1]# CFLAGS=-fPIC ./configure --prefix=/software/google-libunwind [root@i-it libunwind-1.1]# make CFLAGS=-fPIC && make CFLAGS=-fPIC install
5、安装google-perftools [root@i-it ~]# tar zxf gperftools-2.2.tar.gz [root@i-it ~]# cd gperftools-2.2 [root@i-it gperftools-2.2]# LDFLAGS="-L/software/google-libunwind/lib" CPPFLAGS="-I/software/google-libunwind/include" ./configure --prefix=/software/google-perftools [root@i-it gperftools-2.2]# make && make install
6、添加共享库路径 [root@i-it ~]# echo "/software/google-libunwind/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/google-perftools/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/zlib/lib/" >> /etc/ld.so.conf [root@i-it ~]# echo "/software/pcre/lib/" >> /etc/ld.so.conf [root@i-it ~]# ldconfig -v
7、编译Nginx [root@i-it ~]# groupadd -g 1500 nginx [root@i-it ~]# useradd -M -u 1500 -g nginx -s /sbin/nologin nginx [root@i-it ~]# mkdir /var/tmp/nginx [root@i-it ~]# chown nginx:nginx /var/tmp/nginx/ [root@i-it ~]# tar zxf nginx-1.7.1.tar.gz [root@i-it ~]# cd nginx-1.7.1 #############注释该文件的174行取消debug模式############## [root@i-it nginx-1.7.1]# vi auto/cc/gcc 173 # debug 174 # CFLAGS="$CFLAGS -g" ######因为google-perftools库的安装路径并非默认，所以这里又要修改一次源码#### [root@i-it nginx-1.7.1]# sed -i "s#/usr/local#/software/google-perftools#" auto/lib/google-perftools/conf [root@i-it nginx-1.7.1]# ./configure --prefix=/software/nginx --user=nginx --group=nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module --with-http_gzip_static_module --with-google_perftools_module --with-debug --http-client-body-temp-path=/var/tmp/nginx/client --http-proxy-temp-path=/var/tmp/nginx/proxy --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --http-scgi-temp-path=/var/tmp/nginx/scgi --with-pcre=/root/pcre-8.35 --with-openssl=/root/openssl-1.0.1h --with-zlib=/root/zlib-1.2.8 [root@i-it nginx-1.7.1]# make && make install
8、先添加一个启动脚本，让Nginx run起来 [root@i-it ~]# vi /etc/init.d/nginx #!/bin/bash # nginx Startup script for the Nginx HTTP Server # it is v.0.0.2 version. # chkconfig: - 85 15 # description: Nginx is a high-performance web and proxy server. # It has a lot of features, but it's not for everyone. # processname: nginx # pidfile: /software/nginx/logs/nginx.pid # config: /software/nginx/conf/nginx.conf nginxd=/software/nginx/sbin/nginx nginx_config=/software/nginx/conf/nginx.conf nginx_pid=/software/nginx/logs/nginx.pid RETVAL=0 prog="nginx" # Source function library. . /etc/rc.d/init.d/functions # Source networking configuration. . /etc/sysconfig/network # Check that networking is up. [ ${NETWORKING} = "no" ] && exit 0 [ -x $nginxd ] || exit 0 # Start nginx daemons functions. start() { if [ -e $nginx_pid ];then echo "nginx already running...." exit 1 fi echo -n $"Starting $prog: " daemon $nginxd -c ${nginx_config} RETVAL=$? echo [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx return $RETVAL } # Stop nginx daemons functions. stop() { echo -n $"Stopping $prog: " killproc $nginxd RETVAL=$? echo [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /usr/local/nginx/logs/nginx.pid } reload() { echo -n $"Reloading $prog: " #kill -HUP `cat ${nginx_pid}` killproc $nginxd -HUP RETVAL=$? echo } # See how we were called. case "$1" in start) start ;; stop) stop ;; reload) reload ;; restart) stop start ;; status) status $prog RETVAL=$? ;; *) echo $"Usage: $prog {start|stop|restart|reload|status|help}" exit 1 esac exit $RETVAL #########赋权让其run起来######### [root@i-it ~]# chmod 755 /etc/init.d/nginx && chkconfig nginx on [root@i-it ~]# service nginx start Starting nginx: [ OK ] [root@i-it ~]# netstat -pant | grep 80 tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 37831/nginx
9、Nginx run起来了，配置前面的google-perftools库 #####创建线程目录##### [root@i-it ~]# mkdir /tmp/tcmalloc [root@i-it ~]# chmod 0777 /tmp/tcmalloc/ ####修改Nginx配置文件##### [root@i-it ~]# vi /software/nginx/conf/nginx.conf pid logs/nginx.pid; google_perftools_profiles /tmp/tcmalloc; ###查看google-perftools是否加载### [root@i-it ~]# service nginx restart Stopping nginx: [ OK ] Starting nginx: [ OK ] [root@i-it ~]# lsof -n | grep tcmalloc nginx 37882 nginx 9w REG 253,0 0 1179654 /tmp/tcmalloc.37882 nginx 37883 nginx 11w REG 253,0 0 1179655 /tmp/tcmalloc.37883 ####每一行输出的数据表示Nginx主配置文件中worker_processes的值，其每个线程文件后面的数值为Nginx启动的PID#### [root@i-it ~]# ps aux | grep nginx root 37880 0.0 0.2 30200 892 ? Ss 00:27 0:00 nginx: master process /software/nginx/sbin/nginx -c /software/nginx/conf/nginx.conf nginx 37882 0.0 1.1 34804 3844 ? S 00:27 0:00 nginx: worker process nginx 37883 0.0 1.1 34804 3772 ? S 00:27 0:00 nginx: worker process ####iptables 开80端口#### [root@i-it ~]# iptables -I INPUT -p tcp --dport 80 -j ACCEPT 1、关闭系统中不需要的服务 ###minimal 本来就是最小安装，这里我也就不提建议了，跟着自己的环境来### [root@i-it ~]# chkconfig --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off blk-availability 0:off 1:on 2:on 3:on 4:on 5:on 6:off crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off ip6tables 0:off 1:off 2:on 3:on 4:on 5:on 6:off iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off iscsi 0:off 1:off 2:off 3:on 4:on 5:on 6:off iscsid 0:off 1:off 2:off 3:on 4:on 5:on 6:off lvm2-monitor 0:off 1:on 2:on 3:on 4:on 5:on 6:off mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off multipathd 0:off 1:off 2:off 3:off 4:off 5:off 6:off netconsole 0:off 1:off 2:off 3:off 4:off 5:off 6:off netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off network 0:off 1:off 2:on 3:on 4:on 5:on 6:off nginx 0:off 1:off 2:on 3:on 4:on 5:on 6:off postfix 0:off 1:off 2:on 3:on 4:on 5:on 6:off rdisc 0:off 1:off 2:off 3:off 4:off 5:off 6:off restorecond 0:off 1:off 2:off 3:off 4:off 5:off 6:off rsyslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off udev-post 0:off 1:on 2:on 3:on 4:on 5:on 6:off
###建议先备份一下### [root@i-it ~]# ll /software/nginx/sbin/nginx -h -rwxr-xr-x. 1 root root 2.9M Jun 8 00:02 /software/nginx/sbin/nginx [root@i-it ~]# strip /software/nginx/sbin/nginx [root@i-it ~]# ll /software/nginx/sbin/nginx -h -rwxr-xr-x. 1 root root 2.6M Jun 8 01:54 /software/nginx/sbin/nginx
####重新挂载当前分区，不记录Nginx对文件访问的时间修改#### mount -o defaults,noatime,nodiratime -o remount /dev/sda1
####修改配置文件#### [root@i-it ~]# egrep -v "^#|^$" /etc/security/limits.conf * - nofile 65535 * - nproc 65535 [root@i-it ~]# su - [root@i-it ~]# ulimit -u 65535 [root@i-it ~]# ulimit -n 65535
[root@i-it ~]# cat >/etc/sysctl.conf< |