linux nginx mysql 优化

1、初始化挂载磁盘文件 /etc/fstab
分区 挂载文件目录 磁盘类型 default 0 2
/xvdb/vdb1 /data0 ext4 default 0 2
/dev/vdb /data0 ext4 defaults 0 2
2、ulimit 配置

2.1 配置ulimit 永久生效配置文件和方法
vim /etc/security/limits.conf
* soft nofile 65535
* hard nofile 65535
* soft noproc 65535
* hard noproc 65535

2.2 配置其他用户ulimit 65535

vim /etc/security/limits.d/90-nproc.conf

• soft nproc 65535
  root soft nproc unlimited

3、修改linux_tcp连接数 systcl.conf 配置
vim /etc/sysctl.conf

net.ipv4.tcp_max_tw_buckets= 180000
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 819200
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_keepalive_time = 120
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 1024 65000

---

net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_max_tw_buckets = 180000
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 819200
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_keepalive_time = 65
net.ipv4.ip_local_port_range = 1024 65000

systcl -p (刷新systcl.conf文件)

4、安装nginx

4.1 nginx开源模块资源网
http://tengine.taobao.org/

4.2 下载解压 pcre 装nginx先解压这个 通用的pcre正则表达式库
http://download.lastme.com/linux/pcre-8.20.tar.gz

{
tar -xvzf pcre-8.20.tar.gz
/data0/source/pcre-8.20
}

4.3 安装google内存优化工具

安装gperftools 必须先安装这个libunwind-devel
yum install libunwind libunwind-devel

安装 gperftools-2.3.90.tar.gz
tar -xvzf gperftools-2.3.90.tar.gz
cd gperftools-2.3.90
./configure && make && make install

http://tengine.taobao.org/download/tengine-2.2.0.tar.gz
/usr/local/nginx/sbin/ngixn -V (查看安装模块参数)

增加nginx组和用户
groupadd nginx
useradd -g nginx -s /bin/false -d /dev/null nginx
{
-g 指定组 -s /bin/false 指定不能重终端 -d /dev/null 指定主目录（但是不想让目录存在就指定到/dev/null）
}

4.5 nginx加强版
{
tar -xvzf tengine-2.2.0.tar.gz
cd tengine-2.2.0
./configure –prefix=/usr/local/nginx –with-http_ssl_module –with-http_gzip_static_module –user=nginx –group=nginx –with-mail –with-google_perftools_module –with-http_concat_module=shared –with-http_upstream_consistent_hash_module –with-http_upstream_check_module –with-http_stub_status_module –with-pcre=/data0/source/pcre-8.20

make && make install
}
启动错误
/usr/local/nginx/sbin/nginx: error while loading shared libraries: libprofiler.so.0: cannot open shared object file: No such file or directory

找不到这个目录，先查找一下系统所在位置
find /usr -name “libprofiler.so.0”

系统64位找lib64， 所以要把这个软连接到lib64
ln -s /usr/local/lib/libprofiler.* /usr/lib64

清除iptables所有规则 清除80端口代理（如果没有代理不需要这样做）
iptables -F

查看80端口
lsof -i:80

关闭SELinux
setenforce 0