一.redis 安装部署:
cd /opt/
tar xf redis-3.2.8.tar.gz
cd redis-3.2.8
make MANIFESTO=jemalloc
make PREFIX=/usr/local/redis-3.2.8 install
ln -s /usr/local/redis-3.2.8/ /usr/local/redis
echo "export PATH=/usr/local/redis/bin:$PATH" >> /etc/profile
source /etc/profile
mkdir /usr/local/redis/conf/
cp /opt/redis-3.2.8/redis.conf /usr/local/redis/conf/
启动redis
redis-server /usr/local/redis/conf/redis.conf
解决redis启动告警问题:
vm.overcommit_memory = 1
加入开启自启动文件:
[root@localhost ~]# tail -3 /etc/rc.local
echo never > /sys/kernel/mm/transparent_hugepage/enabled
redis-server /usr/local/redis/conf/redis.conf
二.redis基本安全优化:
以下配置文件为基本安全优化:
[root@localhost ~]# grep -vE "#|^$" /usr/local/redis/conf/redis.conf
bind 0.0.0.0
protected-mode yes
port 123456
tcp-backlog 511
timeout 30
tcp-keepalive 300
daemonize yes
supervised no
pidfile /var/run/redis123456.pid
loglevel warning
logfile "/data/redis/log/redis.log"
databases 16
stop-writes-on-bgsave-error yes
rdbcompression yes
rdbchecksum yes
dbfilename dump.rdb
requirepass (23+_%^$34)
dir /data/redis/data
slave-serve-stale-data yes
slave-read-only yes
repl-diskless-sync no
repl-diskless-sync-delay 5
repl-disable-tcp-nodelay no
slave-priority 100
maxmemory 2g
appendonly yes
appendfilename "appendonly.aof"
appendfsync everysec
no-appendfsync-on-rewrite no
auto-aof-rewrite-percentage 100
auto-aof-rewrite-min-size 64mb
aof-load-truncated yes
lua-time-limit 5000
slowlog-log-slower-than 10000
slowlog-max-len 128
latency-monitor-threshold 0
notify-keyspace-events ""
hash-max-ziplist-entries 512
hash-max-ziplist-value 64
list-max-ziplist-size -2
list-compress-depth 0
set-max-intset-entries 512
zset-max-ziplist-entries 128
zset-max-ziplist-value 64
hll-sparse-max-bytes 3000
activerehashing yes
client-output-buffer-limit normal 0 0 0
client-output-buffer-limit slave 256mb 64mb 60
client-output-buffer-limit pubsub 32mb 8mb 60
hz 10
aof-rewrite-incremental-fsync yes
二.php-redis扩展安装:
wget https://github.com/nicolasff/phpredis/archive/master.zip
cp master.zip /tmp/
cd /tmp/
unzip master.zip && cd phpredis-master
/usr/local/php/bin/phpize
cd /tmp/phpredis-master/
find / -name "php-config"
./configure --with-php-config=/usr/local/php/bin/php-config
make
make install
echo "extension = redis.so" >> /usr/local/php/etc/php.ini
/etc/init.d/php-fpm restart
测试:
cat test.php
phpinfo();
?>