nginx安装与配置

nginx安装配置

1.安装参数: centos7; nginx: 1.12.0

2:下载安装包

1、网址：

http://nginx.org/en/download.html

ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/

 

2、linux下载命令

wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.40.tar.gz wget https://nginx.org/download/nginx-1.12.0.tar.gz

 

3.安装依赖

1. 安装pcre: 支持rewrite等regular功能 tar zxvf pcre-8.38.tar.gz cd pcre-8.38 ./configure make && make install man pcre 2. 安装openssl: 支持ssl功能 apt-get install -y openssl* 或者 yum install -y openssl* 3. 安装gzip: 支持zlib数据头/压缩数据 apt-get install -y zlib* 或者 yum install -y zlib*

4:创建目录、用户、组

mkdir -p /usr/local/nginx groupadd nginx useradd nginx -g nginx -d /usr/local/nginx -s /sbin/nologin

5:解压、编译、安装

tar zxvf nginx-1.12.0.tar.gz cd nginx-1.12.0 mkdir -p /usr/local/nginx ./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-http_v2_module --with-http_stub_status_module --with-pcre --with-stream --with-stream_ssl_module make && make install

6:设置目录所属

chown -R nginx:nginx /usr/local/nginx

7:检查安装：版本和模块(若错误:附录1)

/usr/local/nginx/sbin/nginx -V ---------------------------------- nginx version: nginx/1.12.0 built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04.3) built with OpenSSL 1.0.1f 6 Jan 2014 TLS SNI support enabled configure arguments: --prefix=/usr/local/nginx --with-http_ssl_module --with-http_v2_module - -with-http_stub_status_module --with-pcre

 

8:测试配置文件是否正确

 

#建议每次启动检查 /usr/local/nginx/sbin/nginx -t ------------------- nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful

 

9:启动和热启动和停止

 

# 启动服务 /usr/local/nginx/sbin/nginx # 热重启 - 不断开请求的 kill -HUP `cat /usr/local/nginx/logs/nginx.pid` # 停止服务(主进程退出) kill -QUIT `cat /usr/local/nginx/logs/nginx.pid`

10:启动测试(80端口占用:附录2)

#进程 ps -ef |grep nginx #端口，默认80 netstat -tunlp #web访问，简单页面就ok Welcome to nginx!

 

附录1

 

[Error]: ./nginx: error while loading shared libraries: libpcre.so.1: cannot open shared object file: No such file or directory [Solve]: ln -s /usr/local/lib/libpcre.so.1 /lib ln -s /usr/local/lib/libpcre.so.1 /lib64

附录2

#查看80的pid lsof -i:80 -------------------------- COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME aolserver 949 www-data 4u IPv4 9980 0t0 TCP localhost:http (LISTEN) -------------------------- kill -9 949

配置文件(nginx.conf)：

user nginx nginx; # nginx所用的用户和组,windows下不指定worker_processes 2; # nginx工作的子进程数量(通常等于CPU数量或者CPU的2倍)--每个进程消耗10~12M内存error_log logs/error.log info; # nginx错误日志的存放位置和级别pid logs/nginx.pid; # nginx的进程id存放地址,启动自动生成events { use epoll; # 使用网络IO模型linux建议epoll,FreeBSD建议采用kqueue,window下不指定 worker_connections 1024; # 允许最大连接数}# http / httpshttp { include mime.types; default_type application/octet-stream;# 定义日志格式 --main为日志格式名称 log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '"$status" $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for" ' '"$gzip_ratio" $request_time $bytes_sent $request_length'; sendfile on; # 开启高效文件传输模式 --tcp_nopush 和tcp_nodelay 两个设置为on,防止网络阻塞 tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; # 用于设置客户端连接保持活动的超时时间 gzip on; # 设置开启和关闭gzip模块,此处开启gzip压缩,实时压缩输出数据流 gzip_min_length 1k; # 允许压缩的页面最小字节数,页面字节数从header头的Content-Length中获取。默认0,不管页面多大都进行压缩,建议设置1k的字节数,小于1k可能会越压越大 gzip_buffers 4 16k; # 申请4个单位为16k的内存作为压缩结果流缓存,默认申请和原始数据同大小的内存空间来存储压缩结果 gzip_http_version 1.1; # 用于设置识别http协议版本,默认1.1 gzip_comp_level 2; # 指定gzip压缩比,1压缩比最小,处理速度最快,9压缩比最大,传输速度快,处理速度慢,耗cpu gzip_types text/plain application/x-javascript text/css application/xml; # 用于指定压缩多类型 --无论指定text/html类型总会被压缩 gzip_vary on; # 让前段的缓存服务器缓存经过gzip压缩的页面 client_max_body_size 1024M; # 允许客户端请求的最大的单个文件字节数,nginx上传文件大小限制 client_body_buffer_size 512K; # 指定来自客户端请求头的headerbuffer的大小 --大多数请求1k足够,自定义消息头或更大的cookie include http-conf/*.conf; # 导入http的配置文件 }# stream TCP代理和负载均衡stream{ include stream-conf/*.conf; # 导入stream的配置文件}

 

配置：nginx配置80跳转443(自定义404/50x错误页面)(http-conf/目录下)：

server { listen 80; server_name loveshare.me; rewrite ^(.*)$ https://$server_name$1 permanent;}server { listen 443 ssl http2; # HTTP/2 and SPDY indicator server_name loveshare.me; ssl on; ssl_certificate cert/214214467090613.pem; ssl_certificate_key cert/214214467090613.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; location / { proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Real-IP $remote_addr; proxy_pass https://127.0.0.1:7688; } error_page 404 /404-443.html; location = /404-443.html{ root /usr/local/nginx/html/443; #全路径 } error_page 500 502 503 504 /50x-443.html; location = /50x-443.html { root /usr/local/nginx/html/443; }}

配置：nginx多域名DNS转发(http-conf/目录下):

server { listen 80; server_name a.loveshare.me; proxy_redirect off; location / { proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Real-IP $remote_addr; proxy_pass http://192.168.1.123:8012; }}server { listen 80; server_name b.loveshare.me; proxy_redirect off; location / { proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Real-IP $remote_addr; proxy_pass http://192.168.1.124:8013; }}

配置：nginx对html页面转发(http-conf/目录下)，页面地址:/home/html，下，页面跳转逻辑自己维护好:

 

server { listen 80; server_name h.loveshare.me; location /{ root /home/html; index index.html index.htm; }}

 

配置：html页面转发(http-conf/目录下)，页面地址:/home/html，下，url路径正则转发磁盘目录:

 

比如：http://h.loveshare.me/aaa 转发 /root/html/aaa/index.html

server { listen 80; server_name h.loveshare.me; location /{ root /home/html/game; index index.html index.htm; }}

 

配置：nginx对web页面和api接口同域名，正则路径，(http-conf/目录下)，页面地址:/home/html:

 

location ^~ /web/ { root /home/web; index index.html index.htm;}location ^~ /api/ { proxy_pass http://192.168.1.221:8080/loveshareapi/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme;}location ~ .*\\.(html|htm|gif|jpg|jpeg|bmp|png|ico|txt|js|css)$ { root /home/web; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; client_max_body_size 10m; client_body_buffer_size 128k; #proxy_connect_timeout 90; #proxy_send_timeout 90; #proxy_read_timeout 90; proxy_buffer_size 4k; proxy_buffers 4 32k; proxy_busy_buffers_size 64k; proxy_temp_file_write_size 64k; expires 3d;}

 

配置：nginx对PC和移动端页面切换(http-conf/目录下):

server { listen 80; server_name www.loveshare.me; location / { root /home/website; if ( $http_user_agent ~ "(MIDP)|(WAP)|(UP.Browser)|(Smartphone)|(Obigo)|(Mobile)|(AU.Browser)|(wxd.Mms)|(WxdB.Browser)|(CLDC)|(UP.Link)|(KM.Browser)|(UCWEB)|(SEMC\-Browser)|(Mini)|(Symbian)|(Palm)|(Nokia)|(Panasonic)|(MOT\-)|(SonyEricsson)|(NEC\-)|(Alcatel)|(Ericsson)|(BENQ)|(BenQ)|(Amoisonic)|(Amoi\-)|(Capitel)|(PHILIPS)|(SAMSUNG)|(Lenovo)|(Mitsu)|(Motorola)|(SHARP)|(WAPPER)|(LG\-)|(LG/)|(EG900)|(CECT)|(Compal)|(kejian)|(Bird)|(BIRD)|(G900/V1.0)|(Arima)|(CTL)|(TDG)|(Daxian)|(DAXIAN)|(DBTEL)|(Eastcom)|(EASTCOM)|(PANTECH)|(Dopod)|(Haier)|(HAIER)|(KONKA)|(KEJIAN)|(LENOVO)|(Soutec)|(SOUTEC)|(SAGEM)|(SEC\-)|(SED\-)|(EMOL\-)|(INNO55)|(ZTE)|(iPhone)|(Android)|(Windows CE)|(Wget)|(Java)|(curl)|(Opera)" ){ root /home/mobilesite; } index index.html index.htm; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; client_max_body_size 10m; client_body_buffer_size 128k; #proxy_connect_timeout 90; #proxy_send_timeout 90; #proxy_read_timeout 90; proxy_buffer_size 4k; proxy_buffers 4 32k; proxy_busy_buffers_size 64k; proxy_temp_file_write_size 64k; expires 3d; } error_page 404 /404.html; location = /404.html { root html; } error_page 500 502 503 504 /50x.html; location = /50x.html { root html; }}

 

配置：nginx负载均衡(http-conf/目录下):

upstream wwwLoveshareMeLoadBalance { #ip_hash; server 192.168.1.155:8080 weight=1 max_fails=2 fail_timeout=30s; server 192.168.1.156:8080 weight=1 max_fails=2 fail_timeout=30s; server 192.168.1.157:8080 weight=1 max_fails=2 fail_timeout=30s;} server { listen 80; server_name www.loveshare.me; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Host $server_name; proxy_next_upstream http_502 http_504 error timeout invalid_header; #注* server段 proxy_pass定义的web_app需要跟upstream里面定义的web_app一致,否则server找不到均衡。 proxy_pass https://wwwLoveshareMeLoadBalance; }}

 

配置：nginx支持TCP代理，mysql、远程桌面等端口代理，(stream-conf/目录下):

upstream mysql{ server 192.168.1.120:3306 weight=1 max_fails=2 fail_timeout=30s;}upstream windows_remote_desk{ server 192.168.1.135:3389 weight=1 max_fails=2 fail_timeout=30s;}server{ listen 3306; proxy_pass mysql;}server{ listen 3389; proxy_pass windows_remote_desk;}