Nginx

qizhideyu2026-02-26 10:01

源码编译

下载

root@nginx \~\]# wget https://nginx.org/download/nginx-1.28.1.tar.gz #### 解压 \[root@nginx \~\]# tar zxf nginx-1.28.1.tar.gz \[root@nginx \~\]# cd nginx-1.28.1/ #### 安装依赖 \[root@nginx nginx-1.28.1\]# dnf install gcc openssl-devel.x86_64 pcre2-devel.x86_64 zlib-devel -y #### 编译 \[root@nginx nginx-1.28.1\]# make \[root@nginx nginx-1.28.1\]# make install #### nginx启动 \[root@nginx \~\]# vim \~/.bash_profile 2 export PATH=$PATH:/usr/local/nginx/sbin \[root@nginx \~\]# source \~/.bash_profile \[root@nginx \~\]# useradd -s /sbin/nologin -M nginx \[root@nginx \~\]# nginx #启动 \[root@nginx \~\]# ps aux \| grep nginx root 1828 0.0 0.6 30768 23680 pts/0 T 20:23 0:00 wget https://nginx.org/download/nginx-1.28.1.tar.gz root 8453 0.0 0.0 14688 2360 ? Ss 20:36 0:00 nginx: master process nginx nginx 8454 0.0 0.1 14888 3896 ? S 20:36 0:00 nginx: worker process root 8459 0.0 0.0 6636 2176 pts/0 S+ 20:37 0:00 grep --color=auto nginx 测试 \[root@nginx \~\]# echo 172.25.254.10 \> /usr/local/nginx/html/index.html \[root@nginx \~\]# curl 172.25.254.10 172.25.254.10 #### 编写启动文件 \[root@nginx \~\]# vim /lib/systemd/system/nginx.service \[Unit

Description=The NGINX HTTP and reverse proxy server

After=syslog.target network-online.target remote-fs.target nss-lookup.target

Wants=network-online.target

Service

Type=forking

ExecStartPre=/usr/local/nginx/sbin/nginx -t

ExecStart=/usr/local/nginx/sbin/nginx

ExecReload=/usr/local/nginx/sbin/nginx -s reload

ExecStop=/bin/kill -s QUIT $MAINPID

PrivateTmp=true

Install

WantedBy=multi-user.target

root@nginx \~\]# systemctl daemon-reload #### 验证 ![](https://i-blog.csdnimg.cn/direct/ad17d6fe101e404f890c030ad8a4a602.png) \[root@nginx \~\]# systemctl enable --now nginx #开机启动 ![](https://i-blog.csdnimg.cn/direct/e3e30b6fd1c54cc584303cceaa2868d9.png) \[root@nginx \~\]# reboot ![](https://i-blog.csdnimg.cn/direct/b10cee64a8294f21b3d66003e862a6b5.png) ### Nginx的平滑升级及回滚 #### 下载高版本压缩包 \[root@nginx \~\]# wget https://nginx.org/download/nginx-1.29.4.tar.gz #### 解压 \[root@nginx \~\]# tar zxf nginx-1.29.4.tar.gz #### 隐藏版本 \[root@nginx \~\]# vim nginx-1.29.4/src/core/nginx.h 13 #define NGINX_VERSION "" #### 编译 \[root@nginx nginx-1.29.4\]# ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http__v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --wtith-stream_ssl_module --with-stream_realip_module \[root@nginx nginx-1.29.4\]# make \[root@nginx nginx-1.29.4\]# cd objs/ 查看是否有nginx ![](https://i-blog.csdnimg.cn/direct/ad0dd70df37b41dd9d0e32a652ed06c3.png) \[root@nginx sbin\]# cp nginx nginx.old \[root@nginx sbin\]# \\cp -f /root/nginx-1.29.4/objs/nginx /usr/local/nginx/sbin/nginx \[root@nginx sbin\]# ps aux \| grep nginx root 899 0.0 0.0 14688 2220 ? Ss 20:48 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 901 0.0 0.1 14888 3884 ? S 20:48 0:00 nginx: worker process root 4763 0.0 0.0 6636 2176 pts/0 S+ 21:00 0:00 grep --color=auto nginx \[root@nginx sbin\]# kill -USR2 899 #结束nginx master进程 #### 回收旧版本子进程 \[root@nginx sbin\]# ps aux \| grep nginx root 899 0.0 0.0 14688 2604 ? Ss 20:48 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 901 0.0 0.1 14888 3884 ? S 20:48 0:00 nginx: worker process root 4783 0.0 0.2 14716 8064 ? S 21:01 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 4784 0.0 0.1 14916 4144 ? S 21:01 0:00 nginx: worker process root 4796 0.0 0.0 6636 2176 pts/0 S+ 21:03 0:00 grep --color=auto nginx \[root@nginx sbin\]# kill -WINCH 899 \[root@nginx sbin\]# ps aux \| grep nginx root 899 0.0 0.0 14688 2604 ? Ss 20:48 0:00 nginx: master process /usr/local/nginx/sbin/nginx root 4783 0.0 0.2 14716 8064 ? S 21:01 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 4784 0.0 0.1 14916 4144 ? S 21:01 0:00 nginx: worker process root 4798 0.0 0.0 6636 2176 pts/0 S+ 21:04 0:00 grep --color=auto nginx 版本回退 \[root@nginx sbin\]# cd /usr/local/nginx/sbin/ \[root@nginx sbin\]# cp nginx nginx.new -p 将旧版本的nginx.old改回nginx \[root@nginx sbin\]# \\cp nginx .old nginx -pf \[root@nginx sbin\]# ps aux \| grep nginx root 899 0.0 0.0 14688 2604 ? Ss 20:48 0:00 nginx: master process /usr/local/nginx/sbin/nginx root 4783 0.0 0.2 14716 8064 ? S 21:01 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 4784 0.0 0.1 14916 4144 ? S 21:01 0:00 nginx: worker process root 4847 0.0 0.0 6636 2176 pts/0 S+ 21:06 0:00 grep --color=auto nginx \[root@nginx sbin\]# kill -HUP 899 \[root@nginx sbin\]# ps aux \| grep nginx root 899 0.0 0.0 14688 2604 ? Ss 20:48 0:00 nginx: master process /usr/local/nginx/sbin/nginx root 4783 0.0 0.2 14716 8064 ? S 21:01 0:00 nginx: master process /usr/local/nginx/sbin/nginx nginx 4784 0.0 0.1 14916 4144 ? S 21:01 0:00 nginx: worker process nginx 4849 0.0 0.1 14888 3884 ? S 21:08 0:00 nginx: worker process root 4851 0.0 0.0 6636 2176 pts/0 S+ 21:09 0:00 grep --color=auto nginx \[root@nginx sbin\]# nginx -V nginx version: nginx/1.28.1 #旧版本 built by gcc 11.5.0 20240719 (Red Hat 11.5.0-5) (GCC) built with OpenSSL 3.2.2 4 Jun 2024 TLS SNI support enabled configure arguments: --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module #### 回收新版本进程 \[root@nginx sbin\]# kill -WINCH 4783 ![](https://i-blog.csdnimg.cn/direct/1188af95073d4b73af02ba8a6a94a217.png) ### Nginx配置文件的管理及优化参数 \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 2 user nginx; \[root@nginx \~\]# nginx -t #查看是否有配置语法错误 nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful \[root@nginx \~\]# nginx -s reload #重启nginx ![](https://i-blog.csdnimg.cn/direct/b62dc3da9abc4cd3b09cac07a5996c70.png) 将处理器数量设置为1内核数量设置为4,设置好后重启系统 ![](https://i-blog.csdnimg.cn/direct/4c3b0478e3ba4c95925280a4b92066d1.png) \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 3 worker_processes 2; \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/08c3f09f3b9a4f8eabc998cb0859ac53.png) \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 3 worker_processes auto; 4 worker_cpu_affinity 0001 0010 0100 1000; \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/110a81f196f34c4188ec70d71f39bb09.png) ![](https://i-blog.csdnimg.cn/direct/7315d6450c3344a1a94d3098a5b2c129.png) \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 12 events { 13 worker_connections 10000; #nginx最大连接数 14 use epoll; 15 accept_mutex on; 16 multi_accept on; 17 } \[root@nginx \~\]# nginx -s reload \[root@nginx \~\]# dnf install httpd-tools-2.4.62-4.el9.x86_64 -y \[root@nginx \~\]# ab -n 10000 -c5000 http://172.25.254.10/index.html This is ApacheBench, Version 2.3 \<$Revision: 1913912 $\> Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/ Licensed to The Apache Software Foundation, http://www.apache.org/ Benchmarking 172.25.254.10 (be patient) socket: Too many open files (24) #访问过多请求失败 处理本地文件系统的并发文件数量 \[root@nginx \~\]# vim /etc/security/limits.conf 60 \* - nofile 10000 61 \* - nofile 10000 62 root - nofile 10000 \[root@nginx \~\]# sudo -u nginx ulimit -n 10000 \[root@nginx \~\]# ulimit -n 10000 测试 ![](https://i-blog.csdnimg.cn/direct/01311ab88d364e279dfddeaf1bfd40e8.png) ### KeepAlived长链接优化 #### 设置连接时长 \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 34 keepalive_timeout 5; \[root@nginx \~\]# vim /etc/hosts 172.25.254.10 nginx www.qqq.com \[root@nginx \~\]# telnet www.qqq.com 80 再输入下面两行后按回车两次 ![](https://i-blog.csdnimg.cn/direct/e9185f16b91d46b9822616370709b6e6.png) 设置最大连接次数 \[root@nginx \~\]# vim /usr/local/nginx/conf/nginx.conf 35 keepalive_requests 3; \[root@nginx \~\]# telnet www.qqq.com 80 Trying 172.25.254.10... Connected to www.qqq.com. Escape character is '\^\]'. GET / HTTP/1.1 #第一次连接 Host: www.qqq.com HTTP/1.1 200 OK Server: nginx/1.28.1 Date: Mon, 23 Feb 2026 14:03:07 GMT Content-Type: text/html Content-Length: 14 Last-Modified: Mon, 23 Feb 2026 12:38:30 GMT Connection: keep-alive Keep-Alive: timeout=100 ETag: "699c4a46-e" Accept-Ranges: bytes 172.25.254.10 GET / HTTP/1.1 #第二次连接 Host: www.qqq.com HTTP/1.1 200 OK Server: nginx/1.28.1 Date: Mon, 23 Feb 2026 14:03:17 GMT Content-Type: text/html Content-Length: 14 Last-Modified: Mon, 23 Feb 2026 12:38:30 GMT Connection: keep-alive Keep-Alive: timeout=100 ETag: "699c4a46-e" Accept-Ranges: bytes 172.25.254.10 GET / HTTP/1.1 #第三次连接 Host: www.qqq.com HTTP/1.1 200 OK Server: nginx/1.28.1 Date: Mon, 23 Feb 2026 14:03:27 GMT Content-Type: text/html Content-Length: 14 Last-Modified: Mon, 23 Feb 2026 12:38:30 GMT Connection: close ETag: "699c4a46-e" Accept-Ranges: bytes 172.25.254.10 Connection closed by foreign host. #连接关闭 ### Location 字符匹配详解 #### Location后什么都不带直接指定目录 \[root@nginx conf\]# mkdir /usr/local/nginx/conf/conf.d \[root@nginx conf\]# vim /usr/local/nginx/conf/nginx.conf 84 include "/usr/local/nginx/conf/conf.d/\*.conf"; ![](https://i-blog.csdnimg.cn/direct/8b5096998d424a8c842a1ef46ccd17cd.png) null改为大写访问不了 ![](https://i-blog.csdnimg.cn/direct/e8137f6f71114cf994a14f6fa25c79b6.png) #### = 用于标准uri前，需要请求字串与uri精确匹配，大小敏感,如果匹配成功就停止向下匹配并立即处理请求 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /null { return 200 "/null-1"; } location = /null { return 200 "="; } location \~ /null { return 200 "\~"; } } 精确匹配 ![](https://i-blog.csdnimg.cn/direct/850a403b33fd475ca686ea0d5fd80c77.png) #### \^\~ #用于标准uri前，表示包含正则表达式,并且匹配以指定的正则表达式开头 #对uri的最左边部分做匹配检查，不区分字符大小写 \[root@nginx conf.d\]# vim vhosts.conf 1 server { 2 listen 80; 3 server_name www.qqq.com; 4 location /null { 5 return 200 "/null-1"; 6 } 7 location \^\~ /aaa { 8 return 200 "\~"; 9 } 10 } \[root@nginx conf.d\]# nginx -s reload 凡是aaa开头的都能匹配到 ![](https://i-blog.csdnimg.cn/direct/0213884424bb4afa8e7a39797dfc2f4e.png) #### \~ 用于标准uri前，表示包含正则表达式,并且区分大小写 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /null { return 200 "/null-1"; } location \^\~ /aaa { return 200 "\~"; } location \~ /lll { return 200 "lll" } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/ec54caf932774730a5d4a5413d0ea493.png) #### \~\* 用于标准uri前，表示包含正则表达式,并且不区分大写 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /null { return 200 "/null-1"; } location \^\~ /aaa { return 200 "\~"; } location \~ /lll { return 200 "lll"; } location \~\* /abc { return 200 "nihao"; } } \[root@nginx conf.d\]# nginx -s reload \[root@nginx conf.d\]# curl www.qqq.com/abc nihao\[root@nginx conf.d\]# curl www.qqq.com/ABC nihao\[root@nginx conf.d\]# curl www.qqq.com/Abc nihao\[root@nginx conf.d\]# #### / 用于标准uri前，表示包含正则表达式并且转义字符。可以将 . \* ?等转义为普通符号 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /null { return 200 "/null-1"; } location \^\~ /aaa { return 200 "\~"; } location \~ /lll { return 200 "lll"; } location \~\* /abc { return 200 "nihao"; } location \~\* \\.(com\|org)${ #以.com或.org结尾 return 200 "\\\\\\"; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/aec30f6e65bc45a5964cd5b81a8881fc.png) #### #匹配优先级从高到低： =, \^\~, \~/\~\*, 不带符号 ### 服务访问的用户认证 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /admin { root /usr/loacl/nginx/html; auth_basic "login passwd"; auth_basic_user_file "/usr/local/nginx/conf/.htpasswd"; } } \[root@nginx conf.d\]# systemctl restart nginx.service ![](https://i-blog.csdnimg.cn/direct/bb870671cbab4f3cb2b91ebc8931304c.png) ### 自定义错误界面 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; error_page 404 405 503 502 /error; location /admin { root /usr/local/nginx/html; } location /error { alias /usr/local/nginx/errorpage/errormessage; } } ![](https://i-blog.csdnimg.cn/direct/7f754c2a2fd8418b85d8889b2edd8bc7.png) ### 自定义错误日志 \[root@nginx conf.d\]# vim vhosts.conf \[root@nginx conf.d\]# mkdir -p /usr/local/nginx/logs/aaa.org/ \[root@nginx conf.d\]# vim vhosts.conf \[root@nginx conf.d\]# systemctl restart nginx.service \[root@nginx conf.d\]# cd /usr/local/nginx/logs/aaa.org/ \[root@nginx aaa.org\]# ll 总用量 0 -rw-r--r--. 1 root root 0 2月 23 23:38 aaa.error \[root@nginx aaa.org\]# curl www.qqq.com/admin no file \[root@nginx aaa.org\]# cat aaa.error 2026/02/23 23:38:54 \[error\] 3598#0: \*1 open() "/usr/local/nginx/html/admin" failed (2: No such file or directory), client: 172.25.254.10, server: www.qqq.com, request: "GET /admin HTTP/1.1", host: "www.qqq.com" ### Nginx中建立下载服务器 #### 下载服务器配置 \[root@nginx \~\]# mkdir -p /usr/local/nginx/download \[root@nginx \~\]# cp /etc/passwd /usr/local/nginx/download/ \[root@nginx \~\]# dd if=/dev/zero of=/usr/local/nginx/download/bigfile bs=1M count=100 记录了100+0 的读入 记录了100+0 的写出 104857600字节（105 MB，100 MiB）已复制，0.0428074 s，2.4 GB/s \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 12 location /download { 13 root /usr/local/nginx; 14 } \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/f985130ac5b94a2199fc5bed21be343a.png) #### 启用列表功能 \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 14 autoindex on; \[root@nginx \~\]# nginx -s reload 访问成功 ![](https://i-blog.csdnimg.cn/direct/bbd1d59bd3d1418da2bc58bb69db2118.png) #### 下载控速 控速前 ![](https://i-blog.csdnimg.cn/direct/a0107d53862c4f5da53fa477f1b7a645.png) \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 15 limit_rate 1024k; \[root@nginx \~\]# nginx -s reload 控速后 ![](https://i-blog.csdnimg.cn/direct/3e8adb95b6874f628139667bb1afbe52.png) #### 显示文件大小 \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 16 autoindex_exact_size off; \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/73aa060e73974ba492fb2539662fb905.png) #### 显示时间调整 \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 17 autoindex_localtime on; \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/e1839a5bd7f741ea894e2c7bcaf83122.png) #### 设定页面风格 \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 18 autoindex_format html; \[root@nginx \~\]# nginx -s reload 18 autoindex_format xml; html ![](https://i-blog.csdnimg.cn/direct/5b831ce5dd41486db29c580ed24996be.png) xml ![](https://i-blog.csdnimg.cn/direct/2cd5a1055cde4688b714a115fe8665b2.png) json 18 autoindex_format json; ![](https://i-blog.csdnimg.cn/direct/a9b53ff9d90841dca74fd9575d6d111f.png) ### Nginx的文件检测 \[root@nginx \~\]# echo default \> /usr/local/nginx/errorpage/default.html \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 7 try_files $uri $uri.html $uri/index.html /default.html; \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/553235afc0af47f3a5d7c38ab7541362.png) ### nginx状态页 \[root@nginx \~\]# htpasswd -cmb /usr/local/nginx/conf/conf.d/.htpasswd admin 1 Adding password for user admin \[root@nginx \~\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf 1 server { 2 listen 80; 3 server_name www.qqq.com; 4 location /status { 5 stub_status; 6 auth_basic "auth login"; 7 auth_basic_user_file /usr/local/nginx/conf/conf.d/.htpasswd; 8 allow 172.25.254.0/24; 9 deny all; 10 } 11 } \[root@nginx \~\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/99b309628398487bb779e71d67b51301.png) ### Nginx的压缩功能 \[root@nginx \~\]# mkdir -p /usr/local/nginx/www.qqq.com/qqq/html \[root@nginx conf.d\]# vim /usr/local/nginx/conf/nginx.conf 36 gzip on; 37 gzip_comp_level 4; 38 gzip_disable "MSIE \[1-6\]\\."; 39 gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript applicati on/x-httpd-php image/gif image/png; 40 gzip_vary on; 41 gzip_static on; \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /usr/local/nginx/www.qqq.com/qqq/html; location /status { stub_status; auth_basic "auth login"; auth_basic_user_file /usr/local/nginx/conf/conf.d/.htpasswd; allow 172.25.254.0/24; deny all; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/06c14f23cdc848f8b2c1554580bdf828.png) ![](https://i-blog.csdnimg.cn/direct/14ac7e5673a544dbad9e198622260efd.png) ### nginx变量 #### 升级Nginx支持echo \[root@nginx conf.d\]# systemctl stop nginx.service #停止nginx服务 下载 \[root@nginx nginx-1.28.1\]# tar zxf echo-nginx-module-0.64.tar.gz \[root@nginx nginx-1.28.1\]# cd nginx-1.28.1/ \[root@nginx nginx-1.28.1\]# make clean \[root@nginx nginx-1.28.1\]# ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module --add-module=/root/echo-nginx-module-0.64 \[root@nginx nginx-1.28.1\]# rm -rf /usr/local/nginx/sbin/nginx \[root@nginx nginx-1.28.1\]# cp objs/nginx /usr/local/nginx/sbin/ -P \[root@nginx nginx-1.28.1\]# vim /usr/local/nginx/conf/conf.d/vhosts.conf server { listen 80; server_name www.qqq.com; root /usr/local/nginx/www.qqq.com/qqq/html; location /vars { default_type text/html; echo $remote_addr; } } \[root@nginx nginx-1.28.1\]# nginx -s reload \[root@nginx nginx-1.28.1\]# systemctl restart nginx.service #### 理解内建变量 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /usr/local/nginx/www.qqq.com/qqq/html; location /vars { default_type text/html; echo $args; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/0bcf359b50b74f8096a86e42ef7f1fa6.png) #### $host; #存放了请求的host名称 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /usr/local/nginx/www.qqq.com/qqq/html; location /vars { default_type text/html; echo $host; } } ![](https://i-blog.csdnimg.cn/direct/b2be4110feab4ddcb0c4720f5e451588.png) #### $scheme; #请求的协议，例如:http，https,ftp等 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /usr/local/nginx/www.qqq.com/qqq/html; location /vars { default_type text/html; echo $scheme; } } ![](https://i-blog.csdnimg.cn/direct/edca9e5c902d4a658a310445d9029c9a.png) \[root@nginx conf.d\]# vim vhosts.conf 1 server { 2 listen 80; 3 server_name www.qqq.com; 4 root /usr/local/nginx/www.qqq.com/qqq/html; 5 location /vars { 6 default_type text/html; 7 echo $remote_addr; 8 echo $args; 9 echo $is_args; 10 echo $document_root; 11 echo $document_uri; 12 echo $host; 13 echo $remote_port; 14 echo $remote_user; 15 echo $request_method; 16 echo $request_filename; 17 echo $request_uri; 18 echo $scheme; 19 echo $server_protocol; 20 echo $server_addr; 21 echo $server_name; 22 echo $server_port; 23 echo $http_user_agent; 24 echo $cookie_key2; 25 echo $http_user_agent; 26 echo $sent_http_content_type; 27 set $test lee; 28 echo $test; 29 set $web_port $server_port; 30 echo $web_port; ![](https://i-blog.csdnimg.cn/direct/d547a450b0e142bb827d823bfaa77215.png) ### 网页从写 #### 网页重写中的指令 \[root@nginx conf.d\]# vim vhosts.conf 1 server { 2 listen 80; 3 server_name www.qqq.com; 4 root /webdir/www.qqq.com/qqq/html; 5 location /vars { 6 echo $remote_user; 7 echo $request_method; 8 echo $request_filename; 9 echo $request_uri; 10 echo $scheme; 11 } 12 location / { 13 if ( $http_user_agent \~\* firfox ){ 14 return 200 "test if messages"; 15 } 16 } 17 } \[root@nginx conf.d\]# nginx -s reload \[root@nginx conf.d\]# mkdir /webdir/www.qqq.com/qqq/html -p \[root@nginx conf.d\]# vim /webdir/www.qqq.com/qqq/html/index.html nihao 未指定浏览器 ![](https://i-blog.csdnimg.cn/direct/7d1419c55e34454b87f531c0429a11a8.png) 指定firefox浏览器 ![](https://i-blog.csdnimg.cn/direct/96d25e43f1714d2b84fa336bfca0970f.png) #### set \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location /vars { echo $remote_user; echo $request_method; echo $request_filename; echo $request_uri; echo $scheme; } location / { set $testname qqq; echo $testname; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/b5688438dc3d44e290904e060697a76d.png) #### return \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location /vars { echo $remote_user; echo $request_method; echo $request_filename; echo $request_uri; echo $scheme; } location / { return 200 "nihao"; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/c4a3571350074e17bf201c944ee145df.png) #### break \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location /vars { echo $remote_user; echo $request_method; echo $request_filename; echo $request_uri; echo $scheme; } location / { set $test1 aaa; echo $test1; set $test2 bbb; echo $test2; if ($http_user_agent = firefox) { break; } set $test3 ccc; echo $test3; } } 测试 \[root@nginx conf.d\]# nginx -s reload \[root@nginx conf.d\]# curl www.qqq.com aaa bbb ccc \[root@nginx conf.d\]# curl -A "firefox" www.qqq.com aaa bbb \[root@nginx conf.d\]# #### redirect \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location /vars { echo $remote_user; echo $request_method; echo $request_filename; echo $request_uri; echo $scheme; } location / { rewrite / http://www.baidu.com redirect; } } \[root@nginx conf.d\]# nginx -s reload 测试 ![](https://i-blog.csdnimg.cn/direct/1bfc7717fa0748b2833cf4d271711705.png) #### permanent #重写完成后以永久重定向方式直接返回重写后生成的新URL给客户端 #由客户端重新发起请求，状态码：301 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location /vars { echo $remote_user; echo $request_method; echo $request_filename; echo $request_uri; echo $scheme; } location / { rewrite / http://www.baidu.com permanent; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/20be7cacb19243a392758c70a5b3df0a.png) #### break\&last \[root@nginx conf.d\]# mkdir /webdir/www.qqq.com/qqq/html/{break,last,test1,test2} \[root@nginx conf.d\]# echo break \> /webdir/www.qqq.com/qqq/html/break/index.html \[root@nginx conf.d\]# echo last \> /webdir/www.qqq.com/qqq/html/last/index.html \[root@nginx conf.d\]# echo test1 \> /webdir/www.qqq.com/qqq/html/test1/index.html \[root@nginx conf.d\]# echo test2 \> /webdir/www.qqq.com/qqq/html/test2/index.html \[root@nginx conf.d\]# vim vhosts.conf 1 server { 2 listen 80; 3 server_name www.qqq.com; 4 root /webdir/www.qqq.com/qqq/html; 5 location /vars { 6 echo $remote_user; 7 echo $request_method; 8 echo $request_filename; 9 echo $request_uri; 10 echo $scheme; 11 } 12 location /break { 13 rewrite /break/(.\*) /test/$1 break; 14 rewrite /test1 /test2; 15 16 } 17 location /test1 { 18 return 200 "test1"; 19 } 20 location /test2 { 21 return 200 "test2"; 22 } 23 } \[root@nginx conf.d\]# nginx -s reload \[root@nginx conf.d\]# curl -L http://www.qqq.com/break/index.html test1 #### last \[root@nginx conf.d\]# curl -L http://www.qqq.com/break/index.html test2 ### 防盗链 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; root /webdir/www.qqq.com/qqq/html; location / { valid_referers none blocked server_names \*.qqq.com \~/.baidu/.; if ( $invalid_referer ){ return 404; } } location /img{ valid_referers none blocked server_names \*.qqq.com \~/.baidu/.; if ( $invalid_referer ){ rewrite \^/ http://www.qqq.com/daolian/daolian.png; } } } \[root@nginx conf.d\]# nginx -s reload \[root@client \~\]# vim /var/www/html/index.html \[root@client \~\]# systemctl restart httpd.service ### nginx反向代理 #### rs1和rs2主机配置 \[root@rs1 \~\]# dnf install httpd -y \[root@rs2 \~\]# dnf install httpd -y \[root@rs1 \~\]# echo 172.25.254.20 \> /var/www/html/index.html \[root@rs2 \~\]# echo 172.25.254.30 \> /var/www/html/index.html \[root@rs1 \~\]# systemctl restart httpd \[root@rs2 \~\]# systemctl restart httpd 测试 \[root@rs1 \~\]# curl 172.25.254.20 172.25.254.20 \[root@rs1 \~\]# curl 172.25.254.30 172.25.254.30 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.20:80; } location /web { proxy_pass http://172.25.254.30:80; } } ![](https://i-blog.csdnimg.cn/direct/015b45b487c54d9b896dc2207b86bc60.png) #### proxy_hide_header filed 可以看到etag ![](https://i-blog.csdnimg.cn/direct/fe52a45e569b4cedb2887c8f2b09c083.png) \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.20:80; proxy_hide_header ETag; } } \[root@nginx conf.d\]# nginx -s reload etag被隐藏了 ![](https://i-blog.csdnimg.cn/direct/e71f7a441e434369aefa0a677bf0a8cc.png) #### proxy_pass_header ![](https://i-blog.csdnimg.cn/direct/313bcfcf5ceb45b2a61572d391659818.png) \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.20:80; proxy_pass_header Server; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/770711614ea84510aef28e11a038d171.png) #### 透传信息 \[root@rs1 \~\]# vim /etc/httpd/conf/httpd.conf 201 LogFormat "%h %l %u %t \\"%r\\" %\>s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\" \\"%{X-Forwarded-For}i\\"" combined \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.20:80; proxy_set_header X-Forwarded $remote_addr; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/c046284ac7314a9dba48c744a37228f7.png) ### 利用反向代理实现动静分离 #### 环境 \[root@rs1 \~\]# dnf install httpd -y \[root@rs1 \~\]# systemctl restart httpd.service \172.25.254.10\"; phpinfo(); ?\> \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.20:80; } location \~\* \\.(php\|js)$ { proxy_pass http://172.25.254.20:80; } } 静态 ![](https://i-blog.csdnimg.cn/direct/5ec406f3dcf348fd89c43b2eede5d8b4.png) 动态 ![](https://i-blog.csdnimg.cn/direct/13af5de35b79418e881e85b1f1a9b2ee.png) ### 缓存加速 ![](https://i-blog.csdnimg.cn/direct/93dfaffde07f4541b2703eb5a7d1ed6b.png) \[root@nginx conf.d\]# vim /usr/local/nginx/conf/nginx.conf 41 proxy_cache_path /usr/local/nginx/proxy_cache levels=1:2:2 keys_zone=proxycache:20m inactive=120s max_size=1g; \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { proxy_pass http://172.25.254.30:80; } location \~\* \\.(php\|js)$ { proxy_pass http://172.25.254.20:80; proxy_cache proxycache; proxy_cache_key $request_uri; proxy_cache_valid 200 302 301 10m; proxy_cache_valid any 1m; } } \[root@nginx conf.d\]# systemctl restart nginx \[root@nginx conf.d\]# tree /usr/local/nginx/proxy_cache/ /usr/local/nginx/proxy_cache/ 0 directories, 0 files 对比上次失败请求少很多了 ![](https://i-blog.csdnimg.cn/direct/d0e197d82a814b26875da0f3b7d95bcf.png) \[root@nginx conf.d\]# tree /usr/local/nginx/proxy_cache/ /usr/local/nginx/proxy_cache/ └── 1 └── af └── 15 └── e251273eb74a8ee3f661a7af00915af1 3 directories, 1 file ### 反向负载代理 \[root@nginx conf.d\]# vim /usr/local/nginx/conf/nginx.conf 22 include "/usr/local/nginx/conf/upstream/\*.conf"; \[root@nginx conf.d\]# vim /usr/local/nginx/conf/upstream/loadbalance.conf upstream webserver { server 172.25.254.20:80 weight=1 fail_timeout=15s max_fails=3; server 172.25.254.30:80 weight=1 fail_timeout=15s max_fails=3; server 172.25.254.10:8888 backup; } server { listen 80; server_name www.qqq.com; location \~ / { proxy_pass http://webserver; } } ![](https://i-blog.csdnimg.cn/direct/582aa90e48b845488e8ea0934e347221.png) \[root@nginx conf.d\]# mkdir /webdir/www.qqq.com/qqq/error/html/ -p \[root@nginx conf.d\]# echo error \> /webdir/www.qqq.com/qqq/error/html/index.html \[root@nginx conf.d\]# vim vhosts.conf server { listen 8888; root /webdir/www.qqq.com/qqq/error/html; } \[root@nginx conf.d\]# nginx -s reload 停止主机rs1和rs2的httpd服务 \[root@rs1 \~\]# systemctl stop httpd.service \[root@rs2 \~\]# systemctl stop httpd.service ![](https://i-blog.csdnimg.cn/direct/87700e9284bf44fc90a7853fbf545bc0.png) ### Nginx负载均衡算法 \[root@nginx conf.d\]# vim /usr/local/nginx/conf/upstream/loadbalance.conf upstream webserver { hash $cookie_lee; server 172.25.254.20:80 weight=1 fail_timeout=15s max_fails=3; server 172.25.254.30:80 weight=1 fail_timeout=15s max_fails=3; } server { listen 80; server_name www.qqq.com; location \~ / { proxy_pass http://webserver; } } ![](https://i-blog.csdnimg.cn/direct/7c671e02164e47c4b0e3275539e94dde.png) ### nginx整合php \[root@nginx conf.d\]# mkdir /webdir/www.qqq.com/php/html -p \[root@nginx conf.d\]# echo 172.25.254.10php \> /webdir/www.qqq.com/php/html/index.html \[root@nginx conf.d\]# vim php.conf server { listen 80; server_name www.qqq.php; root /webdir/www.qqq.com/php/html; location \~ \\.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi.conf; } } 测试 ![](https://i-blog.csdnimg.cn/direct/9808d84e181149d7b1f1fc009e0cb36f.png) ### PHP的源码编译 \[root@nginx \~\]# wget https://www.php.net/distributions/php-8.3.30.tar.gz 下载依赖 \[root@nginx \~\]# wget https://mirrors.aliyun.com/rockylinux/9.7/devel/x86_64/os/Packages/o/oniguruma-devel-6.9.6-1.el9.6.x86_64.rpm \[root@nginx php-8.3.30\]# tar zxf php-8.3.30.tar.gz \[root@nginx php-8.3.30\]# dnf install gcc systemd-devel-252-51.el9.x86_64 libxml2-devel.x86_64 sqlite-devel.x86_64 libcurl-devel.x86_64 libpng-devel.x86_64 oniguruma-devel-6.9.6-1.el9.6.x86_64.rpm -y 编译 \[root@nginx php-8.3.30\]# cd php-8.3.30/ \[root@nginx php-8.3.30\]# ./configure --prefix=/usr/local/php --with-config-file-path=/usr/local/php/etc --enable-fpm --with-fpm-user=nginx --with-fpm-group=nginx --with-curl --with-iconv --with-mhash --with-zlib --with-openssl --enable-mysqlnd --with-mysqli --with-pdo-mysql --disable-debug --enable-sockets --enable-soap --enable-xml --enable-ftp --enable-gd --enable-exif --enable-mbstring --enable-bcmath --with-fpm-systemd \[root@nginx php-8.3.30\]# make \[root@nginx php-8.3.30\]# make install \[root@nginx php-8.3.30\]# cd /usr/local/php/etc/ \[root@nginx etc\]# cp -p php-fpm.conf.default php-fpm.conf \[root@nginx etc\]# vim php-fpm.conf 17 pid = run/php-fpm.pid \[root@nginx etc\]# cd php-fpm.d/ \[root@nginx php-fpm.d\]# cp www.conf.default www.conf \[root@nginx php-fpm.d\]# vim www.conf 41 listen = 0.0.0.0:9000 \[root@nginx \~\]# cd /usr/local/php/etc/ \[root@nginx etc\]# cd php-fpm.d/ \[root@nginx php-fpm.d\]# cp www.conf.default www.conf \[root@nginx nginx-1.28.1\]# mv php-8.3.30 ../php-8.3.30 \[root@nginx \~\]# cp php-8.3.30/php.ini-production /usr/local/php/etc/php.ini \[root@nginx \~\]# vim /usr/local/php/etc/php.ini 989 date.timezone = Asia/Shangha \[root@nginx php-fpm.d\]# cp /root/php-8.3.30/sapi/fpm/php-fpm.service /lib/systemd/system/ \[root@nginx php-fpm.d\]# vim /lib/systemd/system/php-fpm.service \[root@nginx php-fpm.d\]# vim /lib/systemd/system/php-fpm.service 18 #PrivateTmp=true \[root@nginx php-fpm.d\]# systemctl daemon-reload \[root@nginx php-fpm.d\]# systemctl enable --now php-fpm.service 查看是否开启 \[root@nginx php-fpm.d\]# netstat -anltupe \| grep php tcp 0 0 0.0.0.0:9000 0.0.0.0:\* LISTEN 0 172393 144771/php-fpm: mas 设定环境变量 \[root@nginx php-fpm.d\]# vim \~/.bash_profile # .bash_profile export PATH=$PATH:/usr/local/nginx/sbin export PATH=$PATH:/usr/local/nginx/sbin:/usr/local/php/sbin:/usr/local/php/bin # Get the aliases and functions if \[ -f \~/.bashrc \]; then . \~/.bashrc fi # User specific environment and startup programs ### 利用memcache实现php的缓存加速 #### 安装 \[root@nginx php-fpm.d\]# dnf install memcached.x86_64 -y #### 配置 \[root@nginx php-fpm.d\]# vim /etc/sysconfig/memcached PORT="11211" USER="memcached" MAXCONN="1024" CACHESIZE="64" OPTIONS="-l 0.0.0.0,::1" 重启 \[root@nginx php-fpm.d\]# systemctl enable --now memcached.service 查看是否开启 \[root@nginx php-fpm.d\]# netstat -antulpe \| grep memcache tcp 0 0 0.0.0.0:11211 0.0.0.0:\* LISTEN 991 174294 145476/memcached tcp6 0 0 ::1:11211 :::\* LISTEN 991 174295 145476/memcached #### 升级php对于memcache的支持 #### 解压 \[root@nginx \~\]# gunzip memc-nginx-module-0.20.gz \[root@nginx \~\]# cd memcache-8.2/ \[root@nginx memcache-8.2\]# dnf install autoconf -y \[root@nginx memcache-8.2\]# phpize \[root@nginx memcache-8.2\]# ./configure \&\& make \&\& make install \[root@nginx memcache-8.2\]# ls /usr/local/php/lib/php/extensions/no-debug-non-zts-20230831/ memcache.so opcache.so \[root@nginx memcache-8.2\]# vim /usr/local/php/etc/php.ini 939 extension=memcache \[root@nginx memcache-8.2\]# systemctl restart php-fpm.service \[root@nginx memcache-8.2\]# php -m \| grep memcache memcache ### nginx+memcache实现高速缓存解 #### 重新编译nginx \[root@nginx \~\]# systemctl stop nginx.service \[root@nginx \~\]# cp /usr/local/nginx/conf/ /mnt/ -r \[root@nginx \~\]# rm -fr /usr/local/nginx/ \[root@nginx \~\]# rm -rf nginx-1.29.4 nginx-1.28.1 \[root@nginx \~\]# tar zxf nginx-1.28.1.tar.gz \[root@nginx \~\]# cd nginx-1.28.1/ \[root@nginx nginx-1.28.1\]# cd .. \[root@nginx \~\]# tar zxf srcache-nginx-module-0.33.tar.gz \[root@nginx \~\]# tar zxf memc-nginx-module-0.20.tar.gz \[root@nginx conf\]# cp /mnt/conf/nginx.conf /mnt/conf/conf.d/ -r \[root@nginx conf\]# systemctl restart nginx.service #### 整合memcache \[root@nginx conf\]# vim /usr/local/nginx/conf/conf.d/php.conf upstream memcache { server 127.0.0.1:11211; keepalive 512; } server { listen 80; server_name php.timinglee.org; root /webdir/timinglee.org/php/html; index index.php index.html; location /memc { internal; memc_connect_timeout 100ms; memc_send_timeout 100ms; memc_read_timeout 100ms; set $memc_key $query_string; set $memc_exptime 300; memc_pass memcache; } location \~ \\.php$ { set $key $uri$args; srcache_fetch GET /memc $key; srcache_store PUT /memc $key; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi.conf; } } ## Nginx的四层负载均衡代理 #### rs主机下载mysql \[root@rs1 \~\]# dnf install mariadb-server -y \[root@rs1 \~\]# vim /etc/my.cnf.d/mariadb-server.cnf 17 server-id=10 \[root@rs1 \~\]# mysql Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 3 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> CREATE USER 'rrr'@'%' identified '1'; ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ''1'' at line 1 MariaDB \[(none)\]\> CREATE USER 'rrr'@'%' identified by '1'; Query OK, 0 rows affected (0.001 sec) MariaDB \[(none)\]\> GRANT ALL ON \*.\* TO 'rrr'@'%'; Query OK, 0 rows affected (0.001 sec) MariaDB \[(none)\]\> quit Bye \[root@rs2 \~\]# dnf install mariadb-server -y \[root@rs2 \~\]# vim /etc/my.cnf.d/mariadb-server.cnf 17 server-id=20 \[root@rs2 \~\]# mysql Welcome to the MariaDB monitor. Commands end with ; or \\g. Your MariaDB connection id is 3 Server version: 10.5.27-MariaDB MariaDB Server Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\\h' for help. Type '\\c' to clear the current input statement. MariaDB \[(none)\]\> CREATE USER 'rrr'@'%' indentified by '1'; ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'indentified by '1'' at line 1 MariaDB \[(none)\]\> CREATE USER 'rrr'@'%' identified by '1'; Query OK, 0 rows affected (0.002 sec) MariaDB \[(none)\]\> GRANT ALL ON \*.\* TO 'rrr'@'%'; Query OK, 0 rows affected (0.001 sec) MariaDB \[(none)\]\> #### 实验环境（dns） \[root@rs1 \~\]# vim /etc/named.conf 注释掉这几行 11 // listen-on port 53 { 127.0.0.1; }; 12 // listen-on-v6 port 53 { ::1; }; 13 directory "/var/named"; 14 dump-file "/var/named/data/cache_dump.db"; 15 statistics-file "/var/named/data/named_stats.txt"; 16 memstatistics-file "/var/named/data/named_mem_stats.txt"; 17 secroots-file "/var/named/data/named.secroots"; 18 recursing-file "/var/named/data/named.recursing"; 19 // allow-query { localhost; }; \[root@rs2 \~\]# vim /etc/named.conf 11 // listen-on port 53 { 127.0.0.1; }; 12 // listen-on-v6 port 53 { ::1; }; 13 directory "/var/named"; 14 dump-file "/var/named/data/cache_dump.db"; 15 statistics-file "/var/named/data/named_stats.txt"; 16 memstatistics-file "/var/named/data/named_mem_stats.txt"; 17 secroots-file "/var/named/data/named.secroots"; 18 recursing-file "/var/named/data/named.recursing"; 19 // allow-query { localhost; }; \[root@rs1 \~\]# vim /etc/named.rfc1912.zones 46 zone "www.qqq.com" IN { 47 type master; 48 file "www.qqq.com.zone"; 49 allow-update { none; }; 50 }; \[root@rs2 \~\]# vim /etc/named.rfc1912.zones 46 zone "www.qqq.com" IN { 47 type master; 48 file "www.qqq.com.zone"; 49 allow-update { none; }; 50 } \[root@rs1 \~\]# cd /var/named/ \[root@rs1 named\]# cp -p named.localhost www.qqq.com.zone \[root@rs1 named\]# vim www.qqq.com.zone $TTL 1D @ IN SOA dns.www.qqq.com rname.invalid. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS dns.www.qqq.com. dns A 172.25.254.20 \[root@rs1 named\]# systemctl enable --now named.service 测试 ![](https://i-blog.csdnimg.cn/direct/443f90f70b7e4b24bdf54c5d69b55625.png) \[root@rs2 \~\]# cd /var/named/ \[root@rs2 named\]# cp -p named.localhost www.qqq.com.zone \[root@rs2 named\]# vim www.qqq.com.zone $TTL 1D @ IN SOA dns.www.qqq.com rname.invalid. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS dns.www.qqq.com. dns A 172.25.254.30 \[root@rs2 named\]# systemctl enable --now named.service 测试 ![](https://i-blog.csdnimg.cn/direct/abad6849e84640ae9a9fd3378d2ae1b1.png) #### tcp四层负载 \[root@nginx nginx-1.28.1\]# vim /usr/local/nginx/conf/tcp/mariadb.conf stream { upstream mysql_server { server 172.25.254.20:3306 max_fails=3 fail_timeout=30s; server 172.25.254.30:3306 max_fails=3 fail_timeout=30s; } server { listen 172.25.254.10:3306; proxy_pass mysql_server; proxy_connet_timeout 30s; proxy_timeout 300s; } } \[root@nginx nginx-1.28.1\]# vim /usr/local/nginx/conf/nginx.conf 16 include "/usr/local/nginx/conf/tcp/\*.conf"; \[root@nginx nginx-1.28.1\]# vim /usr/local/nginx/conf/tcp/mariadb.conf stream { upstream mysql_server { server 172.25.254.20:3306 max_fails=3 fail_timeout=30s; server 172.25.254.30:3306 max_fails=3 fail_timeout=30s; } server { listen 172.25.254.10:3306; proxy_pass mysql_server; proxy_connect_timeout 30s; proxy_timeout 300s; } } \[root@nginx nginx-1.28.1\]# nginx -s reload 测试 ![](https://i-blog.csdnimg.cn/direct/2b0f79c1c9c74152bedaacbb4d7fb5e7.png) #### udp四层负载 \[root@nginx nginx-1.28.1\]# vim /usr/local/nginx/conf/tcp/mariadb.conf stream { upstream mysql_server { server 172.25.254.20:3306 max_fails=3 fail_timeout=30s; server 172.25.254.30:3306 max_fails=3 fail_timeout=30s; } upstream dns_server{ server 172.25.254.20:53 max_fails=3 fail_timeout=30s; server 172.25.254.30:53 max_fails=3 fail_timeout=30s; } server { listen 172.25.254.10:3306; proxy_pass mysql_server; proxy_connect_timeout 30s; proxy_timeout 300s; } server { listen 172.25.254.10:53 udp; proxy_pass dns_server; proxy_timeout 1s; proxy_responses 1; error_log logs/dns.log; } } 测试 ![](https://i-blog.csdnimg.cn/direct/8bc8cdcb0bae427c99bf42461c689c89.png) \[root@nginx nginx-1.28.1\]# cd /usr/local/nginx/conf/ \[root@nginx conf\]# mkdir conf.d \[root@nginx conf\]# vim nginx.conf 81 include "/usr/local/nginx/conf/conf.d/\*.conf"; \[root@nginx conf\]# nginx -s reload ### #Nginx下构建PC站点 #### ## 1.location中的root \[root@nginx conf.d\]# mkdir -p /webdata/nginx/www.qqq.com/qqq/html \[root@nginx conf.d\]# echo www.qqq.com \> /webdata/nginx/www.qqq.com/qqq/html/index.html \[root@nginx conf.d\]# vim vhosts.conf \[root@nginx conf.d\]# nginx -s reload \[root@nginx conf.d\]# systemctl restart nginx.service \[root@nginx conf.d\]# vim /etc/hosts \[root@nginx conf.d\]# curl www.qqq.com www.qqq.com #### local示例需要访问lee.timinglee.org/qqq/目录 \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location / { root /webdata/nginx/www.qqq.com/qqq/html; } location /qqq { root /webdata/nginx/www.qqq.com/qqq/html; } } \[root@nginx conf.d\]# systemctl restart nginx \[root@nginx conf.d\]# mkdir -p /webdata/nginx/www.qqq.com/qqq/html/qqq \[root@nginx conf.d\]# echo qqq \> /webdata/nginx/www.qqq.com/qqq/html/qqq/index.html 测试 \[root@nginx conf.d\]# curl www.qqq.com/qqq/ qqq #### location中的alias \[root@nginx conf.d\]# vim vhosts.conf server { listen 80; server_name www.qqq.com; location /passwd { alias /etc/passwd; } location /passwd/ { alias /mnt/; } } \[root@nginx conf.d\]# nginx -s reload ![](https://i-blog.csdnimg.cn/direct/8dd5310fe9a441e0981df9e3d76c8c32.png) ### 编译安装 openresty \[root@nginx conf.d\]# wget https://openresty.org/download/openresty-1.27.1.2.tar.gz \[root@nginx conf.d\]# dnf -yq install gcc pcre-devel openssl-devel perl zlib-devel \[root@nginx conf.d\]# useradd -r -s /sbin/nologin nginx 编译 \[root@nginx openresty-1.27.1.2\]# ./configure --prefix=/apps/openresty --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module \[root@nginx openresty-1.27.1.2\]# gmake \[root@nginx openresty-1.27.1.2\]# gmake install \[root@nginx openresty-1.27.1.2\]# vim \~/.bash_profile # .bash_profile export PATH=$PATH:/usr/local/nginx/sbin export PATH=$PATH:/usr/local/nginx/sbin:/usr/local/php/sbin:/usr/local/php/bin export PATH=$PATH:/usr/local/openresty/bin #添加 # Get the aliases and functions if \[ -f \~/.bashrc \]; then . \~/.bashrc fi # User specific environment and startup programs \[root@nginx openresty-1.27.1.2\]# source \~/.bash_profile \[root@nginx openresty-1.27.1.2\]# curl 172.25.254.10 hello

相关推荐
茉莉玫瑰花茶8 小时前
工作流的常见模式 [ 1 ]
java·服务器·前端
南京码讯光电技术有限公司10 小时前
工业无线AP选型指南：从WiFi 5到WiFi 6+5G CPE，如何构建全覆盖、零漫游、高可靠的智能工厂网络？
服务器·网络·5g
二宝哥11 小时前
Linux虚拟机网络配置
linux·运维·服务器
陳103011 小时前
Linux：进程间通信 和 简单进程池
linux·运维·服务器
jimy112 小时前
改.bashrc，直观地判断本地repo是否有改动
linux·服务器
zt1985q12 小时前
本地部署网页监控工具 Webmonitor 并实现外部访问
运维·服务器·网络·网络协议
匆匆那年96712 小时前
远程 Linux 校园网认证操作手册（本地浏览器法）
linux·运维·服务器
dog25013 小时前
为何新增网络路径反而引入额外时延
服务器·网络·php
newnazi13 小时前
RedHat10 安装MS SQL Server2025
linux·服务器·数据库
QuestLab14 小时前
③-进阶篇：vLLM实战——多卡部署、压测与排障
linux·服务器·网络
热门推荐
01GitHub 镜像站点02Codex 接入 DeepSeek API 完整配置文档03Gemini大升级、AI眼镜首发、Android XR亮相，13天后见分晓04CC-Switch & Claude 基于 Linux 服务器安装使用指南05【AI】2026 年具身智能模型和世界模型总结06Codex 手机端连接教程：三分钟搞定，附完整步骤07codex app每次打开重连5次Reconnecting问题解决08裂开！ChatGPT 居然开始要手机号验证，附详细解决方法09【踩坑记录 | 第一篇】微软商店无法使用时，如何手动安装 OpenAI Codex？附`.msix`文件系统错误解决方法10几个好用的ip纯净度检测网站