一.redis 安装部署:

cd /opt/

tar xf redis-3.2.8.tar.gz

cd redis-3.2.8

make MANIFESTO=jemalloc

make PREFIX=/usr/local/redis-3.2.8 install

ln -s /usr/local/redis-3.2.8/ /usr/local/redis

echo "export PATH=/usr/local/redis/bin:$PATH" >> /etc/profile

source /etc/profile

mkdir  /usr/local/redis/conf/

cp /opt/redis-3.2.8/redis.conf /usr/local/redis/conf/


启动redis

redis-server /usr/local/redis/conf/redis.conf


解决redis启动告警问题:

vm.overcommit_memory = 1

加入开启自启动文件:


[root@localhost ~]# tail -3 /etc/rc.local 

echo never > /sys/kernel/mm/transparent_hugepage/enabled

redis-server /usr/local/redis/conf/redis.conf 


二.redis基本安全优化:

以下配置文件为基本安全优化:


[root@localhost ~]#  grep -vE "#|^$" /usr/local/redis/conf/redis.conf

bind 0.0.0.0

protected-mode yes

port 123456

tcp-backlog 511

timeout 30

tcp-keepalive 300

daemonize yes

supervised no

pidfile /var/run/redis123456.pid

loglevel warning

logfile "/data/redis/log/redis.log"

databases 16

stop-writes-on-bgsave-error yes

rdbcompression yes

rdbchecksum yes

dbfilename dump.rdb

requirepass (23+_%^$34)

dir /data/redis/data

slave-serve-stale-data yes

slave-read-only yes

repl-diskless-sync no

repl-diskless-sync-delay 5

repl-disable-tcp-nodelay no

slave-priority 100

maxmemory 2g

appendonly yes

appendfilename "appendonly.aof"

appendfsync everysec

no-appendfsync-on-rewrite no

auto-aof-rewrite-percentage 100

auto-aof-rewrite-min-size 64mb

aof-load-truncated yes

lua-time-limit 5000

slowlog-log-slower-than 10000

slowlog-max-len 128

latency-monitor-threshold 0

notify-keyspace-events ""

hash-max-ziplist-entries 512

hash-max-ziplist-value 64

list-max-ziplist-size -2

list-compress-depth 0

set-max-intset-entries 512

zset-max-ziplist-entries 128

zset-max-ziplist-value 64

hll-sparse-max-bytes 3000

activerehashing yes

client-output-buffer-limit normal 0 0 0

client-output-buffer-limit slave 256mb 64mb 60

client-output-buffer-limit pubsub 32mb 8mb 60

hz 10

aof-rewrite-incremental-fsync yes




二.php-redis扩展安装:

wget https://github.com/nicolasff/phpredis/archive/master.zip


cp master.zip /tmp/

cd /tmp/

unzip master.zip && cd phpredis-master

/usr/local/php/bin/phpize 

cd /tmp/phpredis-master/

find / -name "php-config"

./configure --with-php-config=/usr/local/php/bin/php-config

make

make install

echo "extension = redis.so" >> /usr/local/php/etc/php.ini 


/etc/init.d/php-fpm restart

测试:

cat test.php 

phpinfo();

?>