Nginx的編譯安裝以及簡單配置

編譯環境

作業系統 rhel6.5 ;
核心版本 2.6.32-431.el6.x86_64 ;
使用軟體包為 nginx-1.10.1.tar.gz ;
主機為 172.25.23.6 ;
hostname:server6.com ;
虛拟機類型: kvm ;

編譯選項:

–prefix=/usr/local/lnmp/nginx

–with-http_ssl_module

–with-http_stub_status_module

可能出現的錯誤

Linux 2.6.32-431.el6.x86_64 x86_64

checking for C compiler … not found

./configure: error: C compiler cc is not found

解決的辦法:

可能出現的錯誤2

./configure: error: the HTTP rewrite module requires the PCRE library.

You can either disable the module by using –without-http_rewrite_module

option, or install the PCRE library into the system, or build the PCRE library

statically from the source with nginx by using –with-pcre= option.
解決的辦法

可能出現的錯誤3

./configure: error: SSL modules require the OpenSSL library.

You can either do not enable the modules, or install the OpenSSL library

into the system, or build the OpenSSL library statically from the source

with nginx by using –with-openssl= option.
解決的辦法

執行編譯指令:

[[email protected] nginx-1.10.1]#  ./configure \
--prefix=/usr/local/lnmp/nginx  \ 
--with-http_ssl_module \
 --with-http_stub_status_module

認真檢查 MakeFile 檔案生成的過程沒有錯誤,并且出現:

configuration summary
  + using system PCRE library   
  + using system OpenSSL library
  + md5: using OpenSSL library
  + sha1: using OpenSSL library
  + using system zlib library

  nginx path prefix: "/usr/local/lnmp/nginx"
  nginx binary file: "/usr/local/lnmp/nginx/sbin/nginx"
  nginx modules path: "/usr/local/lnmp/nginx/modules"
  nginx configuration prefix: "/usr/local/lnmp/nginx/conf"
  nginx configuration file: "/usr/local/lnmp/nginx/conf/nginx.conf"
  nginx pid file: "/usr/local/lnmp/nginx/logs/nginx.pid"
  nginx error log file: "/usr/local/lnmp/nginx/logs/error.log"
  nginx http access log file: "/usr/local/lnmp/nginx/logs/access.log"
  nginx http client request body temporary files: "client_body_temp"
  nginx http proxy temporary files: "proxy_temp"
  nginx http fastcgi temporary files: "fastcgi_temp"
  nginx http uwsgi temporary files: "uwsgi_temp"
  nginx http scgi temporary files: "scgi_temp"

執行 make 指令

執行 make install 指令

配置軟連結,友善進行通路

[[email protected] sbin]# ln -sv /usr/local/lnmp/nginx/sbin/nginx /usr/local/sbin/
`/usr/local/sbin/nginx' -> `/usr/local/lnmp/nginx/sbin/nginx'

關閉可能會影響nginx正常通路的服務,這裡是測試環境,生産環境中不建議進行關閉:

root@server6 sbin]# setenforce 0
[root@server6 sbin]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]
[root@server6 sbin]# chkconfig iptables off

通過浏覽器檢視 Nginx 的歡迎頁面

Nginx的編譯安裝以及簡單配置
由于 Nginx 工作的使用者是 nobody ,需要添加 nginx 使用者

Nginx的編譯安裝以及簡單配置

[[email protected] conf]# useradd -u 1000 -d /usr/local/lnmp/nginx/ nginx
useradd: warning: the home directory already exists.
Not copying any file from skel directory into it.
[[email protected] conf]# id nginx
uid=(nginx) gid=(nginx) groups=(nginx)

修改CPU的上限為兩個,啟動多線程,首先需要修改虛拟機的配置,這裡是用的虛拟機是 KVM

Nginx的編譯安裝以及簡單配置
修改 CPU 通過指令

[[email protected] ~]# lscpu 
Architecture:          x86_64
CPU op-mode(s):        -bit, -bit
Byte Order:            Little Endian
CPU(s):                
On-line CPU(s) list:   ,
Thread(s) per core:    
Core(s) per socket:

Nginx的編譯安裝以及簡單配置

修改 Nginx 的配置檔案

[root@server6 conf]# vim nginx.conf
user  nginx;
worker_processes  ;
worker_cpu_affinity  ;

檢視修改之後的結果

Nginx的編譯安裝以及簡單配置
修改對于資源的限制

[root@server6 conf]# su - nginx
-bash-$ ulimit -a
core file size          (blocks, -c) 
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 
file size               (blocks, -f) unlimited
pending signals                 (-i) 
max locked memory       (kbytes, -l) 
max memory size         (kbytes, -m) unlimited
open files                      (-n) 
pipe size            ( bytes, -p) 
POSIX message queues     (bytes, -q) 
real-time priority              (-r) 
stack size              (kbytes, -s) 
cpu time               (seconds, -t) unlimited
max user processes              (-u) 
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

編輯系統對于資源的限制檔案;

[root@server6 conf]# vim /etc/security/limits.conf 
添加:
# End of file
#
nginx           -       nofile          
nginx           -       nproc

再次檢視修改後的資源限制情況

[root@server6 conf]# su - nginx
-bash-$ ulimit -a
core file size          (blocks, -c) 
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 
file size               (blocks, -f) unlimited
pending signals                 (-i) 
max locked memory       (kbytes, -l) 
max memory size         (kbytes, -m) unlimited
open files                      (-n) 
pipe size            ( bytes, -p) 
POSIX message queues     (bytes, -q) 
real-time priority              (-r) 
stack size              (kbytes, -s) 
cpu time               (seconds, -t) unlimited
max user processes              (-u) 
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

Nginx的編譯安裝以及簡單配置

使用 ab 指令對 nginx 進行一次測試

[[email protected] Desktop]# ab -n 5000 -c 100 http://172.25.23.6/index.html
This is ApacheBench, Version  <$Revision:  $>
Copyright  Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking  (be patient)
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Completed  requests
Finished  requests


Server Software:        nginx/
Server Hostname:        
Server Port:            

Document Path:          /index.html
Document Length:         bytes

Concurrency Level:      
Time taken for tests:    seconds
Complete requests:      
Failed requests:        
Write errors:           
Total transferred:       bytes
HTML transferred:        bytes
Requests per second:     [#/sec] (mean)
Time per request:        [ms] (mean)
Time per request:        [ms] (mean, across all concurrent requests)
Transfer rate:           [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:                            
Processing:                        
Waiting:                           
Total:                             

Percentage of the requests served within a certain time (ms)
  %      
  %     
  %     
  %     
  %     
  %     
  %     
  %     
 %      (longest request)

通過浏覽器檢視 Nginx 的工作狀态資訊

[[email protected] nginx]# vim conf/nginx.conf
location /status {
    stub_status on;
    access_log off;

}
[[email protected] nginx]# nginx -t
nginx: the configuration file /usr/local/lnmp/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/lnmp/nginx/conf/nginx.conf test is successful

Nginx的編譯安裝以及簡單配置

配置 Nginx 支援 HTTPS 的通路方式

[[email protected] nginx]# vim conf/nginx.conf
HTTPS server

    server {
       listen        ssl;
       server_name  server6.com;

       ssl_certificate      cert.pem;
       ssl_certificate_key  cert.pem;

       ssl_session_cache    shared:SSL:m;
       ssl_session_timeout  m; 

       ssl_ciphers  HIGH:!aNULL:!MD5;
       ssl_prefer_server_ciphers  on; 

       location / { 
           root   html;
           index  index.html index.htm;
       } 
      }

需要生成密鑰檔案

[[email protected] nginx]# cd /etc/pki/tls/certs/
[[email protected] certs]# ls
ca-bundle.crt  ca-bundle.trust.crt  make-dummy-cert  Makefile  renew-dummy-cert
[[email protected] certs]# make cert.pem
umask  ; \
    PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
    PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
    /usr/bin/openssl req -utf8 -newkey rsa: -keyout $PEM1 -nodes -x509 -days  -out $PEM2 -set_serial  ; \
    cat $PEM1 >  cert.pem ; \
    echo ""    >> cert.pem ; \
    cat $PEM2 >> cert.pem ; \
    rm -f $PEM1 $PEM2
Generating a  bit RSA private key
.....................+++
....................................+++
writing new private key to '/tmp/openssl.HhyS3f'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name ( letter code) [XX]:CN
State or Province Name (full name) []:Shaanxi
Locality Name (eg, city) [Default City]:Xi'an
Organization Name (eg, company) [Default Company Ltd]:westos
Organizational Unit Name (eg, section) []:linux
Common Name (eg, your name or your server's hostname) []:server6.com
Email Address []:[email protected]
[[email protected] certs]# mv cert.pem /usr/local/lnmp/nginx/conf/
[[email protected] nginx]# nginx -t
nginx: the configuration file /usr/local/lnmp/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/lnmp/nginx/conf/nginx.conf test is successful

[[email protected] nginx]# nginx -s reload

通過浏覽器通過 HTTPS 的方式進行通路

Nginx的編譯安裝以及簡單配置

配置域名主機

[root@server6 nginx]# vim conf/nginx.conf
 server {
        listen ;
        server_name server6.westos.org;
        location / {
                root /web1;
                index index.html;
        }
    }
    server {
        listen ;
        server_name server6.westos.org;
        location / {
                root /web2;
                index index.html;
        }
    }

[root@server3 ~]# mkdir /web1
[root@server3 ~]# echo server6.westos.com > /web1/index.html
[root@server3 ~]# chown nginx.nginx /web1/ -R
[root@server3 ~]# mkdir /web2
[root@server3 ~]# echo server6.linux.com > /web2/index.html
[root@server3 ~]# chown nginx.nginx /web2/ -R
[root@server3 ~]# nginx -s reload

需要在真機上面配置域名解析,這裡通過 /etc/hosts 進行配置

[[email protected] Desktop]# vim /etc/hosts
添加
 server6.com server6 server6.linux.org server6.westos.org

驗證上述的結果

Nginx的編譯安裝以及簡單配置

Nginx的編譯安裝以及簡單配置

接下來需要兩台主機實作 Nginx 對 httpd 服務的排程

實驗主機: server3.com 172.25.23.3

實驗主機: server4.com 172.25.23.4

* 首先需要在
server3 以及 server4
上面配置好httpd服務

* server3主機配置

[root@server3 ~]# cat  /var/www/html/index.html 
<h2>Server  Linux Virtual server</h2>
[root@server3 ~]# /etc/init.d/iptables stop
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]
[root@server3 ~]# chkconfig iptables off
[root@server3 ~]# setenforce 0
[root@server3 ~]# /etc/init.d/httpd start
Starting httpd:                                            [  OK  ]

server4主機配置

[root@server4 ~]# echo server4.com >> /var/www/html/index.html
[root@server4 ~]# setenforce 0
[root@server4 ~]# /etc/init.d/httpd start
Starting httpd:                                            [  OK  ]

server6 Nginx主機上面的服務配置

[[email protected] ~]# vim /usr/local/lnmp/nginx/conf/nginx.conf
http {
        upstream westos {
                server :;
                server :;
        }

    server {
        listen ;
        server_name server6.westos.org;
        location / {
        #       root /web1;
        #       index index.html;
        proxy_pass http://westos;
        }
    }

可以檢視 Nginx 對于兩台主機的排程情況

Nginx的編譯安裝以及簡單配置

按 F5 重新整理頁面之後,看到的是這個頁面

Nginx的編譯安裝以及簡單配置

在停止某一個節點的服務後,檢視nginx是否會将服務排程到關閉服務的節點上面:

[root@server3 ~]# /etc/init.d/httpd stop
Stopping httpd:                                            [  OK  ]

Nginx的編譯安裝以及簡單配置

再次重新整理之後,看到的仍然是這個頁面;
驗證 weight 對于排程過程的影響:
驗證之前(需要說明一下,為了對比明顯,分别将server3 server4上面的index.html進行修改)

[[email protected] Desktop]# for i in $(seq 10);do curl server6.westos.org ;done 
server4.com
server3.com
server4.com
server3.com
server4.com
server3.com
server4.com
server3.com
server4.com
server3.com

修改配置檔案,增權重值 weight

[root@server6 ~]# vim /usr/local/lnmp/nginx/conf/nginx.conf
http {
        upstream westos {
                server .: weight=;
                server .:;
        }

}

[root@my Desktop]# ssh 172.25.23.6 'nginx -s reload'

同樣使用上述的指令進行檢視

[[email protected] Desktop]# for i in $(seq 10);do curl server6.westos.org ;done  
server3.com
server4.com
server3.com
server3.com
server4.com
server3.com
server3.com
server4.com
server3.com
server3.com

驗證 ip_hash 算法的過程
修改配置檔案,增加 ip_hash 選項

[root@server6 ~]# vim /usr/local/lnmp/nginx/conf/nginx.conf
http {
        upstream westos {
                ip_hash;
                server .: weight=;
                server .:;
        }

[root@server6 ~]# nginx -s reload

使用指令通路,檢視結果

[[email protected] Desktop]# for i in $(seq 10);do curl server6.westos.org ;done  
server3.com
server3.com
server3.com
server3.com
server3.com
server3.com
server3.com
server3.com
server3.com
server3.com

關閉 server3 上面的 httpd 服務 ,排程的 hash 算法将失效

[[email protected] Desktop]# ssh 172.25.23.3 '/etc/init.d/httpd stop'
X11 forwarding request failed on channel 
Stopping httpd: [  OK  ]
[[email protected] Desktop]# for i in $(seq 10);do curl server6.westos.org ;done  
server4.com
server4.com
server4.com
server4.com
server4.com
server4.com
server4.com
server4.com
server4.com
server4.com

驗證 backup 算法,并且将 Nginx 所在的主機作為 server3 和 server4 主機當機後的備用提示節點

[root@server6 ~]# yum install httpd -y 
nginx已經占用端口,修改httpd為
[root@server6 ~]# vim /etc/httpd/conf/httpd.conf 
#Listen 12.34.56.78:80
Listen 
[root@server6 ~]# /etc/init.d/httpd start
[root@server6 ~]# echo "the server is testing please try again later" > /var/www/html/index.html

修改 Nginx 的配置檔案,将本機作為備用節點

http {
        upstream westos {
                server :;
                server :;
                server : backup;

        }
 }

停止兩台主機上面的服務,并且檢視備用節點是否正常工作

[[email protected]my Desktop]# ssh 172.25.23.4 '/etc/init.d/httpd stop'
X11 forwarding request failed on channel 
Stopping httpd: [  OK  ]
[[email protected]my Desktop]# ssh 172.25.23.3 '/etc/init.d/httpd stop'
X11 forwarding request failed on channel 
Stopping httpd: [  OK  ]

[[email protected]my Desktop]# for i in $(seq 10);do curl server6.westos.org ;done  
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later
the server is testing please try again later

Nginx的編譯安裝以及簡單配置

編譯環境

繼續閱讀

nginx虛拟主機配置及負載均衡示例

歡迎使用CSDN-markdown編輯器Nginx配置檔案nginx.conf中文詳解（總結）

雲伺服器部署項目：vue-cli 部署服務配置

win7 localhost 配置 nginx ssl自簽名證書步驟報錯相關連結

（Nginx）03_Nginx原理與優化一、Nginx原理二、master-workers機制三、面試題：

（Nginx）02_Nginx配置執行個體一、Nginx的應用：反向代理實作一：二、反向代理執行個體二：三、Nginx的配置執行個體三–負載均衡：四、Nginx的配置執行個體四–動靜分離：Nginx在實際開發中的應用：

nginx配置示例

niginx的location的location詳細規則和優先級關系以及測試案例2.1比對文法2.2優先級判斷2.3練習3.1處理邏輯如何執行3.2功能測試3.3流程解析

Puppet自動化Nginx+Mongrel負載均衡配置

Ubuntu修改nginx将多個域名分别配置到伺服器不同端口

修改or隐藏nginx版本号

Nginx安全改動：隐藏Nginx版本号背景解決serve_tokens指令參考

版本号隐藏

Nginx服務優化（版本隐藏、版本号僞裝、逾時管理、程序管理、日志分割）Nginx服務優化未完待續

nginx location中斜線的位置的重要性