下载以及解压源码包:
# wget http://mirrors.sohu.com/mysql/MySQL-5.6/mysql-5.6.48-linux-glibc2.12-x86_64.tar.gz
# wget http://cn2.php.net/distributions/php-5.6.30.tar.gz
# wget http://nginx.org/download/nginx-1.16.1.tar.gz
# tar -zxvf
# tar -zxvf
# tar -zxvf
—————————————————————————————————
安装
MySQL安装:
#yum install -y perl-Module-Install
# cd /usr/local/mysql
# ./scripts/mysql_install_db --user=mysql --datadir=/data/mysql
//--user表示定义数据库的以哪个用户的身份运
//--datadir表示定义数据库的安装目录
# cp support-files/my-default.cnf /etc/my.cnf
cp:是否覆盖"/etc/my.cnf"? y
# vim /etc/my.cnf
# cp support-files/mysql.server /etc/init.d/mysqld
# chmod 777 /etc/init.d/mysqld
# vim /etc/init.d/mysqld
开机启动:
# chkconfig --add mysqld
# chkconfig mysqld on
# service mysqld start
Starting MySQL. SUCCESS!
PHP安装:
# yum -y install gcc libxml2 libxml2-devel openssl openssl-devel libcurl curl-devel libjpeg-devel libpng libpng-devel freetype-devel epel-release
# yum install -y php-mcrypt libmcrypt libmcrypt-devel
# useradd -s /sbin/nologin php-fpm
# cd /usr/local/src/php-5.6.30
#./configure --prefix=/usr/local/php-fpm --with-config-file-path=/usr/local/php-fpm/etc --enable-fpm --with-fpm-user=php-fpm --with-fpm-group=php-fpm --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-pdo-mysql=/usr/local/mysql --with-mysql-sock=/tmp/mysql.sock --with-libxml-dir --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --with-iconv-dir --with-zlib-dir --with-mcrypt --enable-soap --enable-gd-native-ttf --enable-ftp --enable-mbstring --enable-exif --with-pear --with-curl --with-openssl
#make && make install
#cp /usr/local/src/php-5.6.30/php.ini-production /usr/local/php-fpm/etc/php.ini
# vim /usr/local/php-fpm/etc/php-fpm.conf
写入:
[global]
pid = /usr/local/php-fpm/var/run/php-fpm.pid
error_log = /usr/local/php-fpm/var/log/php-fpm.log
[www]
user = php-fpm
group = php-fpm
listen = /tmp/php-fcgi.sock
listen.mode = 666
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
# /usr/local/php-fpm/sbin/php-fpm -t
[10-Mar-2021 10:30:30] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
# cd /usr/local/src/php-5.6.30
# cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
# chmod 777 /etc/init.d/php-fpm
# chkconfig --add php-fpm
# chkconfig php-fpm on
# cd /usr/local/php-fpm/
# sbin/php-fpm -t
[10-Mar-2021 10:35:46] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
# service php-fpm start
Starting php-fpm done
# ps -ef | grep php
# ll /tmp/php-fcgi.sock
# ps aux | grep php-fpm
Nginx安装:
# cd nginx-1.16.1/
#./configure --prefix=/usr/local/nginx
# make && make install
# vim /etc/init.d/nginx
写入:
#!/bin/bash
# chkconfig: - 30 21
# description: http service.
# Source Function Library
. /etc/init.d/functions
# Nginx Settings
NGINX_SBIN="/usr/local/nginx/sbin/nginx"
NGINX_CONF="/usr/local/nginx/conf/nginx.conf"
NGINX_PID="/usr/local/nginx/logs/nginx.pid"
RETVAL=0
prog="Nginx"
start()
{
echo -n $"Starting $prog: "
mkdir -p /dev/shm/nginx_temp
daemon $NGINX_SBIN -c $NGINX_CONF
RETVAL=$?
echo
return $RETVAL
}
stop()
{
echo -n $"Stopping $prog: "
killproc -p $NGINX_PID $NGINX_SBIN -TERM
rm -rf /dev/shm/nginx_temp
RETVAL=$?
echo
return $RETVAL
}
reload()
{
echo -n $"Reloading $prog: "
killproc -p $NGINX_PID $NGINX_SBIN -HUP
RETVAL=$?
echo
return $RETVAL
}
restart()
{
stop
start
}
configtest()
{
$NGINX_SBIN -c $NGINX_CONF -t
return 0
}
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
restart
;;
configtest)
configtest
;;
*)
echo $"Usage: $0 {start|stop|reload|restart|configtest}"
RETVAL=1
esac
exit $RETVAL
# chmod 775 /etc/init.d/nginx
# chkconfig --add nginx
# chkconfig nginx on
# > /usr/local/nginx/conf/nginx.conf
# vim /usr/local/nginx/conf/nginx.conf
写入:
user nobody nobody;
worker_processes 2;
error_log /usr/local/nginx/logs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 51200;
events
{
use epoll;
worker_connections 6000;
}
http
{
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 3526;
server_names_hash_max_size 4096;
log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]'
'$host "$request_uri" $status'
'"$http_referer" "$http_user_agent"';
sendfile on;
tcp_nopush on;
keepalive_timeout 30;
client_header_timeout 3m;
client_body_timeout 3m;
send_timeout 3m;
connection_pool_size 256;
client_header_buffer_size 1k;
large_client_header_buffers 8 4k;
request_pool_size 4k;
output_buffers 4 32k;
postpone_output 1460;
client_max_body_size 10m;
client_body_buffer_size 256k;
client_body_temp_path /usr/local/nginx/client_body_temp;
proxy_temp_path /usr/local/nginx/proxy_temp;
fastcgi_temp_path /usr/local/nginx/fastcgi_temp;
fastcgi_intercept_errors on;
tcp_nodelay on;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_types text/plain application/x-javascript text/css text/htm
application/xml;
server
{
listen 80;
server_name localhost;
index index.html index.htm index.php;
root /usr/local/nginx/html;
location ~ \.php$
{
include fastcgi_params;
fastcgi_pass unix:/tmp/php-fcgi.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;
}
}
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# service nginx start
Starting nginx (via systemctl): [ 确定 ]
#ps aux | grep nginx
# vim /usr/local/nginx/html/2.php
# curl localhost/2.php
test php scripts
安装完成。
—————————————————————————————
Nginx配置
# vim /usr/local/nginx/conf/nginx.conf
# mkdir /usr/local/nginx/conf/vhost
# cd /usr/local/nginx/conf/vhost
# vim default.conf
写入:
server
{
listen 80 default_server;
server_name aaa.com;
index index.html index.htm index.php;
root /data/nginx/default;
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# mkdir -p /data/nginx/default
# echo "default_server" > /data/nginx/default/index.html
# curl -x127.0.0.1:80 aaa.com
用户认证:
# cd /usr/local/nginx/conf/vhost/
# vim test.com.conf
写入:
server
{
listen 80;
server_name test.com;
index index.html index.htm index.php;
root /data/nginx/test.com;
location /
{
auth_basic "Auth";
auth_basic_user_file /usr/local/nginx/conf/htpasswd;
}
}
# yum install -y httpd
]# htpasswd -c /usr/local/nginx/conf/htpasswd wxt
New password:
Re-type new password:
Adding password for user wxt
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# mkdir /data/nginx/test.com
# echo "test.com" > /data/nginx/test.com/index.html
# curl -uwxt:wxt520 -x127.0.0.1:80 test.com
# curl -uwxt -x127.0.0.1:80 test.com
域名重定向:
# vim /usr/local/nginx/conf/vhost/test.com.conf
server_name
后面多加几个域名
插入:
if ($host != 'test.com' ){
rewrite ^(.*)$ http://test.com/$1 permanent;
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# curl -x127.0.0.1:80 test1.com -I
Nginx访问日志:
# grep -A2 log_format /usr/local/nginx/conf/nginx.conf
log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]'
'$host "$request_uri" $status'
'"$http_referer" "$http_user_agent"';
' "$http_referer" "$http_user_agent"';
//combined_realip为日志格式名字,$remote_addr为网站的用户的出口IP;
//$http_x_forwarded_for 为代理服务器的IP,如果使用了代理,则会记录IP
//$time_local为当前时间;$host为主机名;$request_uri为访问的URL地址
//$status为状态码,$http_referer为referer地址,$http_user_agent为user_agent
修改配置文件
# vim /usr/local/nginx/conf/vhost/test.com.conf
后面插入一行access_log /tmp/test.log combined_realip;
//使用access_log来指定日志的存储路径,最后面为日志的格式名字
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# curl -x127.0.0.1:80 test.com/1 -I
#cat /tmp/test.log
** 配置静态文件不记录日志并添加过期时间:**
# vim /usr/local/nginx/conf/vhost/test.com.conf
插入:
if ($host != 'test.com' ){
rewrite ^(.*)$ http://test.com/$1 permanent;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 7d;
access_log off;
}
location ~ .*\.(js|css)$
{
expires 12h;
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# echo "111" > /data/nginx/test.com/1.js
# echo "222" > /data/nginx/test.com/2.jpg
# touch /data/nginx/test.com/3.jss
# curl -x127.0.0.1:80 test.com/1.js -I
200 OK
# curl -x127.0.0.1:80 test.com/2.jpg -I
200 OK
# curl -x127.0.0.1:80 test.com/3.jss -I
200 OK
# cat /tmp/test.log
Nginx防盗链:
# vim /usr/local/nginx/conf/vhost/test.com.conf
插入:
valid_referers none blocked server_names *.test.com ;
if ($invalid_referer) {
return 403; //如果来源网址的不是test.com的域名,则返回403
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
]# service nginx stop
Stopping nginx (via systemctl): [ 确定 ]
# service nginx start
Starting nginx (via systemctl): [ 确定 ]
# curl -x127.0.0.1:80 -e "http://test.com" test.com/1.js -I
# curl -x127.0.0.1:80 -e "http://abc.com" test.com/1.js -I
访问控制:
# vim /usr/local/nginx/conf/vhost/test.com.conf
插入:
location /admin/
{
allow 192.168.63.139;
allow 127.0.0.1;
deny all;
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# mkdir /data/nginx/test.com/admin
# echo "123" > /data/nginx/test.com/admin/1.html
# curl -x172.0.0.1:80 test.com/admin/1.html -I
200 OK
# curl -x192.168.43.134:80 test.com/admin/1.html -I
403
Nginx解析PHP:
# vim /usr/local/nginx/conf/vhost/test.com.conf
插入:
location ~ \.php$
{
include fastcgi_params;
fastcgi_pass unix:/tmp/php-fcgi.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /data/nginx/test.com$fastcgi_script_name;
}
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx -s reload
# curl -x127.0.0.1:80 test.com/3.php
成功解析。
—————————————————————————————
Nginx php-fpm
php-fpm的pool:
# vim /usr/local/php-fpm/etc/php-fpm.conf
插入一行:
include = etc/php-fpm.d/*.conf
# mkdir /usr/local/php-fpm/etc/p
# cd /usr/local/php-fpm/etc/php-fpm.d
# vim www.conf
写入:
[www]
listen = /tmp/php-fcgi.sock
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
//第一行定义php-fpm的子进程启动模式,dynamic为动态模式
//第二行定义动态增加或减少的量不会超过设定的值
//第三行是针对dynamic模式,他定义php-fpm服务在启动服务时产生的子进程数量
//第四行是针对dynamic模式,他定义空闲时子进程数最少数量,若达到数值会派生新的子进程
//第五行是针对dynamic模式,他定义空闲时子进程数最多数量,若高于数值会开始清理空闲的子进程
//第六行是针对dynamic模式,他定义一个子进程最多处理的请求数,若达到数额会自动退出
#vim aming.conf
写入:
[aming]
listen = /tmp/aming.sock
listen.mode = 666
user = php-fpm
group = php-fpm
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024
# /usr/local/php-fpm/sbin/php-fpm -t
[10-Mar-2021 20:51:34] NOTICE: configuration file /usr/local/php-fpm/etc/php-fpm.conf test is successful
# /etc/init.d/php-fpm restart
# ls /tmp/*.sock
/tmp/aming.sock /tmp/mysql.sock /tmp/php-fcgi.sock
# ps aux | gerp php
php-fpm的慢执行日志:
# vim /usr/local/php-fpm/etc/php-fpm.d/www.conf
写入:
request_slowlog_timeout = 1
slowlog = /usr/local/php-fpm/var/log/www-slow.log
# /etc/init.d/php-fpm reload
# ls /usr/local/php-fpm/var/log/
php-fpm.log www-slow.log
# vim /data/nginx/test.com/sleep.php
插入:
<?php
echo "test slow log";
sleep(2);
echo "done";
?>
curl -x127.0.0.1:80 test.com/sleep.php
test slow logdone[root@localhost ~]#
# cat /usr/local/php-fpm/var/log/www-slow.log
完成。