安装openresty

部署openresty

• 安装依赖

yum install -y make cmake gcc gcc-c++ autoconf automake libpng-devel libjpeg-devel zlib libxml2-devel ncurses-devel bison libtool-ltdl-devel libiconv libmcrypt mhash mcrypt pcre-devel openssl-devel freetype-devel libcurl-devel readline-devel curl wget unzip net-tools

• 下载openresty

可以登陆官网: openresty

wget https://github.com/vozlt/nginx-module-vts/archive/refs/tags/v0.2.1.zip
wget https://openresty.org/download/openresty-1.21.4.1.tar.gz

• 编译解压

mkdir -p /var/cache/openresty
mkdir -p /var/log/openresty
useradd nginx -s /sbin/nologin
tar -zxvf openresty-1.21.4.1.tar.gz
unzip v0.2.1.zip
mv nginx-module-vts-0.2.1  openresty-1.21.4.1
cd openresty-1.21.4.1
./configure -j8 --add-module=nginx-module-vts-0.2.1 --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module && gmake install
ln -s /usr/local/openresty/nginx/sbin/nginx /usr/bin/nginx

等待编译完成后openresty的目录为/user/local/openresty

• 目录结构

[root@master openresty]# ll
总用量 256
drwxr-xr-x.  2 root root    123 3月   1 15:05 bin
-rw-r--r--.  1 root root  22924 3月   1 15:05 COPYRIGHT
drwxr-xr-x.  6 root root     56 3月   1 15:05 luajit
drwxr-xr-x.  6 root root    116 3月   1 15:05 lualib
drwxr-xr-x.  6 root root     54 3月   1 15:05 nginx
drwxr-xr-x. 47 root root   4096 3月   1 15:05 pod
-rw-r--r--.  1 root root 231226 3月   1 15:05 resty.index
drwxr-xr-x.  5 root root     47 3月   1 15:05 site

修改配置文件

默认启动配置文件为当前目录下的nginx.conf，需要制定配置文件启动，则需要nginx -f [confIgfile]

[root@master nginx]# tree
.
├── conf
│   ├── fastcgi.conf
│   ├── fastcgi.conf.default
│   ├── fastcgi_params
│   ├── fastcgi_params.default
│   ├── koi-utf
│   ├── koi-win
│   ├── mime.types
│   ├── mime.types.default
│   ├── nginx.conf
│   ├── nginx.conf.default
│   ├── scgi_params
│   ├── scgi_params.default
│   ├── uwsgi_params
│   ├── uwsgi_params.default
│   └── win-utf
├── html
│   ├── 50x.html
│   └── index.html
├── logs
└── sbin
    └── nginx

4 directories, 18 files

• 修改默认配置文件为

最简单的配置

[root@master nginx]# cat /usr/local/openresty/nginx/conf/nginx.conf

user  nginx;
worker_processes  auto;
worker_rlimit_nofile 65535;

error_log  /var/log/openresty/error.log warn;

events {
    worker_connections  65535;
}


http {
    include       /usr/local/openresty/nginx/conf/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;

    keepalive_timeout  65;

    include /etc/nginx/conf.d/*.conf;
}

优化配置

#nginx.conf

user  nginx;
worker_processes  auto;
worker_rlimit_nofile 65535;

error_log   /var/log/openresty/error.log warn;

events {
    worker_connections  65535;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    log_format main '{ "@timestamp": "$time_local", '
                         '"@fields": { '
                         '"uri":"$request_uri",'
                         '"url":"$uri",'
                         '"upstream_addr":"$upstream_addr",'
                         '"remote_addr": "$remote_addr", '
                         '"remote_user": "$remote_user", '
                         '"body_bytes_sent": "$body_bytes_sent", '
                         '"host":"$host",'
                         '"server_addr":"$server_addr",'
                         '"request_time": "$request_time", '
                         '"request_time":"$request_time",'
                         '"status":"$status",'
                         '"request": "$request", '
                         '"request_method": "$request_method", '
                         '"size":$body_bytes_sent,'
                         '"upstream_time":"$upstream_response_time"'
                         '"http_referrer": "$http_referer", '
                         '"body_bytes_sent":"$body_bytes_sent", '
                         '"http_x_forwarded_for": "$http_x_forwarded_for", '
                         '"http_user_agent": "$http_user_agent" } }';

    access_log  /var/log/openresty/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  300;

    tcp_nodelay on;

    gzip  on;
    gzip_min_length 1k;
    gzip_proxied any;
    gzip_buffers 4 32k;
    gzip_types text/plain text/css text/xml application/xml application/atom+xml application/x-javascript application/json application/javascript;
    gzip_disable "MSIE [1-6]\.";

    ignore_invalid_headers    on;
    client_body_timeout 300s;
    client_header_timeout 300s;
    client_max_body_size 100m;
    large_client_header_buffers 4 128k;

    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 8 128k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;

    proxy_buffering on;
    proxy_temp_path /var/cache/openresty/proxy_temp;
    proxy_cache_path /var/cache/openresty/proxy_cache levels=1:2 keys_zone=nginx_cache:256m inactive=60m max_size=10g use_temp_path=off;
    underscores_in_headers on;
    proxy_buffer_size  128k;
    proxy_buffers 100  128k;

    include /etc/nginx/conf.d/*.conf;
}
stream {
    upstream jf_uat-mysql {
        server 10.66.1.50:30485;
    }
    server {
        listen 30485;
        proxy_pass jf_uat-mysql;
    }
}

• 新建nginx配置文件目录

mkdir /etc/nginx/conf.d
#目录结构为
[root@master conf.d]# tree
.
├── server.conf           #server配置文件
├── logs.conf              #web访问日志文件
├── download.conf     #下载文件
├── location
│   └── location.conf   #location配置文件
└── upsteam.conf       #upstream配置文件
1 directory, 3 files

• 默认server配置文件

/etc/nginx/conf.d/server.conf

server{
    listen      80;
    charset utf-8;

    access_log  /var/log/openresty/nginx/access.log main;
    error_log   /var/log/openresty/nginx/error.log;

    #rewrite ^/rcs/(.*)$ /$1 break;

    proxy_next_upstream http_502 http_404;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header Cookie $http_cookie;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Scheme $scheme;
    proxy_pass_header Server;
    proxy_redirect off;

    include /etc/nginx/conf.d/location/location.conf;
}

• location配置文件

/etc/nginx/conf.d/location/location.conf

location = / {
        root  /opt/dist;
        index index.html;
        expires      3d;
        error_page 405 =200 $uri;
}

location ~ ^/amtorder {
        client_max_body_size 3G;  #允许客户端请求的最大单文件字节数
        client_body_buffer_size 128k; #缓冲区代理缓冲用户端请求的最大字节数
        proxy_pass http://order;
}
location /status {  
      vhost_traffic_status_display;
      vhost_traffic_status_display_format html;
 }
location ~ ^/amtuser {
        client_max_body_size 3G;  #允许客户端请求的最大单文件字节数
        client_body_buffer_size 128k; #缓冲区代理缓冲用户端请求的最大字节数
        proxy_pass http://user;
}
location /components {
        if ( $request_uri  ~*  \.jpg$){ #截取后缀jpg的
                rewrite ^/(.*)\.jpg$ /$1.png last; #后缀为jpg的替换成png
                break;
            }
        }

• 默认upstream文件

/etc/nginx/conf.d/upstream.conf

upstream order {
    server 127.0.0.1:8080 max_fails=3 fail_timeout=30s;
}
upstream user {
    server 127.0.0.1:8081 max_fails=3 fail_timeout=30s;
}

• 访问服务器日志文件

/etc/nginx/conf.d/logs.conf

server {
    listen       81;
    server_name  localhost;
    location / {
        autoindex on; #开启浏览目录
        root   /opt/logs; #日志文件路径
    }
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}

• 下载服务器文件

/etc/nginx/conf.d/download.conf

server {
    listen       82;
    server_name  localhost;
    location / {
        autoindex on;
        root   /opt/download/;
    }
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}

配置ssl

• 安装openssl

脚本安装openresty