**Nginx+mysql+php-fpm搭建高性能Nginx平台[阮胜昌]

系统环境：rhel4.7、centos5.5
检查一下包的安装情况
# rpm -q httpd gcc glibc glibc-common gd gd-devel
#yum -y httpd gcc glibc glibc-common gd gd-devel
1、马上看看所需软件
mysql-5.0.92.tar.gz
libiconv-1.13.tar.gz
libxml2-2.6.31.tar.gz
jpegsrc.v6b.tar.gz
freetype-2.3.5.tar.gz
zlib-1.2.3.tar.gz      //zlib-devel-1.2.3-3
libpng-1.2.40.tar.gz
gd-2.0.35.tar.gz     //让php5支持GIF，PNG，JPEP图片格式
libmcrypt-2.5.7.tar.gz
php-5.2.17.tar.gz
php-5.2.17-fpm-0.5.14.diff.gz
pcre-8.01.tar.gz   pcre-devel-6.6-2.el5_1.7    //rewrite模块支持包
nginx-0.9.5.tar.gz
memcache-2.2.5.tgz                //分布式缓存
eaccelerator-0.9.5.3.tar.bz2     //PHP加速器, 最好不要再安装zend
mhash-0.9.9.9.tar.gz
mcrypt-2.6.8.tar.gz
autoconf-2.62.tar.gz
 m4-1.4.9.tar.gz
openldap
openldap-devel
yum -y install curl-devel
yum install gcc-c++
yum -y install ncurses-devel
suhosin-0.9.32.1.tar.gz   //php安装加固
呼拉拉，一大堆软件，马上看看怎么安装这一大堆软件！

2、安装mysql

 tar xvfz mysql-5.0.92.tar.gz
cd mysql-5.0.92
./configure --prefix=/usr/local/mysql --localstatedir=/var/mysql --with-charset=utf8 --with-extra-charsets=all --with-berkeley-db --with-innodb --without-readline --enable-assembler --with-pthread --enable-thread-safe-client --with-client-ldflags=-all-static
make
make install
如何不打算在本机器上运行mysql，可以跳过下面这一步

配置mysql
[root@node205 mysql]# pwd
/usr/local/mysql/share/mysql
[root@node205 mysql]# cp my-large.cnf /etc/my.cnf

vi /etc/my.cnf
[client]
character-set-server = utf8
port    = 3306
socket  = /tmp/mysql.sock

[mysqld]
character-set-server = utf8
replicate-ignore-db = mysql
replicate-ignore-db = test
replicate-ignore-db = information_schema
user    = mysql
port    = 3306
socket  = /tmp/mysql.sock
basedir = /usr/local/mysql
datadir = /var/mysql
log-error = /var/mysql/mysql_error.log
pid-file =/var/mysql/mysql.pid
open_files_limit    = 10240
back_log = 600
max_connections = 5000
max_connect_errors = 6000
table_cache = 614
external-locking = FALSE
max_allowed_packet = 32M
sort_buffer_size = 1M
join_buffer_size = 1M
thread_cache_size = 300
#thread_concurrency = 8
query_cache_size = 512M
query_cache_limit = 2M
query_cache_min_res_unit = 2k
default-storage-engine = MyISAM
thread_stack = 192K
transaction_isolation = READ-COMMITTED
tmp_table_size = 246M
max_heap_table_size = 246M
long_query_time = 3
log-slave-updates
log-bin = /var/mysql/binlog/binlog
binlog_cache_size = 4M
binlog_format = MIXED
max_binlog_cache_size = 8M
max_binlog_size = 1G
relay-log-index = /var/mysql/relaylog/relaylog
relay-log-info-file = /var/mysql/relaylog/relaylog
relay-log = /var/mysql/relaylog/relaylog
expire_logs_days = 30
key_buffer_size = 256M
read_buffer_size = 1M
read_rnd_buffer_size = 16M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 128M
myisam_max_sort_file_size = 10G
myisam_repair_threads = 1
myisam_recover

interactive_timeout = 120
wait_timeout = 120

skip-name-resolve
#master-connect-retry = 10
slave-skip-errors = 1032,1062,126,1114,1146,1048,1396

#master-host     =   192.168.1.2
#master-user     =   username
#master-password =   password
#master-port     =  3306

server-id = 1

innodb_additional_mem_pool_size = 16M
innodb_buffer_pool_size = 512M
innodb_data_file_path = ibdata1:256M:autoextend
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 16M
innodb_log_file_size = 128M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 0

#log-slow-queries = /var/mysql/slow.log
#long_query_time = 10

[mysqldump]
quick
max_allowed_packet = 32M
 

初始化数据库及配置启动方法
/usr/local/mysql/bin/mysql_install_db --user=mysql         //初始化数据库
chown -R mysql:mysql /home/var        
/usr/local/mysql/bin/mysqld_safe --user=mysql &  
cp ./support-files/mysql.server /etc/rc.d/init.d/mysql     //mysql.server在安装目录下
chmod +x /etc/rc.d/init.d/mysql                
chkconfig --add mysql                   
service mysql start                 //配置自动启动服务
/usr/local/mysql/bin/mysqladmin -u root password 123456   //设置数据库密码
cd /usr/bin
ln -s /usr/local/mysql/bin/mysql mysql     //建立快键方式，在shell下可以直接用mysql客户端访问数据库
 

3、安装libiconv、libxml2、gd等PHP库
安装PHP php-5.2.17（FastCGI模式）
编译安装PHP php-5.2.17所需的支持库：

 tar zxvf libiconv-1.13.tar.gz
cd libiconv-1.13/
./configure --prefix=/usr/local/libiconv/
make
make install
cd ..

tar zxvf libxml2-2.6.31.tar.gz
cd libxml2-2.6.31
./configure --prefix=/usr/local/libxml2
make
make install
cd ..

mkdir -pv /usr/local/jpeg6/{,bin,lib,include,man/man1,man1}
tar vzxf jpegsrc.v6b.tar.gz
cd jpeg-6b
./configure --prefix=/usr/local/jpeg6 --enable-shared --enable-static
make
make install
cd ..

tar zvxf freetype-2.3.5.tar.gz
cd freetype-2.3.5
./configure --prefix=/usr/local/freetype
make
make install
cd ..

tar zvxf zlib-1.2.3.tar.gz
cd zlib-1.2.3
./configure --prefix=/usr/local/zlib
make
make install
cd ..

tar zxvf libpng-1.2.40.tar.gz
cd libpng-1.2.40
cp scripts/makefile.std makefile
make
make install
cd ..

tar xzvf gd-2.0.35.tar.gz
cd gd-2.0.35
./configure --prefix=/usr/local/gd --with-png=/usr/local/libpng --with-zlib=/usr/local/zlib --with-freetype=/usr/local/freetype --with-jpeg=/usr/local/jpeg6 --with-libxml=/usr/local/libxml2
make （make的时候出报错，没关系，再make一次就可以）
make install
cd ..

tar -zxvf libmcrypt-2.5.7.tar.gz
cd libmcrypt-2.5.7
./configure
make
make install
/sbin/ldconfig
cd libltdl/
./configure --enable-ltdl-install
make
make install
cd ../../
cd ..

tar zxvf suhosin-0.9.32.1.tar.gz
/usr/local/php/bin/phpize
./configure --with-php-config=/usrl/local/php/bin/php-config
make
make install

tar zxvf mhash-0.9.9.9.tar.gz
cd mhash-0.9.9.9/
./configure
make
make install

tar zxvf mcrypt-2.6.8.tar.gz
cd mcrypt-2.6.8/
/sbin/ldconfig
./configure
make
make install

ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.la
ln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.so
ln -s /usr/local/lib/libmcrypt.so.4 /usr/lib/libmcrypt.so.4
ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8
ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.a
ln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.la
ln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.so
ln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2
ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1
ln -s /usr/local/bin/libmcrypt-config /usr/bin/libmcrypt-config
这样就安装完成php常用的库了

4、接着安装php、php-frm

 tar zxvf php-5.2.17.tar.gz
gzip -cd php-5.2.17-fpm-0.5.14.diff.gz | patch -d php-5.2.17 -p1
cd php-5.2.17
./configure --prefix=/usr/local/php --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-iconv=/usr/local/libiconv/ --with-libxml-dir=/usr/local/libxml2 --with-gd=/usr/local/gd/ --with-jpeg-dir=/usr/local/jpeg6/ --with-zlib-dir=/usr/local/zlib --with-png-dir=/usr/local/lib --with-freetype-dir=/usr/local/freetype --with-mysql=/usr/local/mysql --with-mcrypt=/usr/local/lib/libmcrypt --enable-mbstring --with-openssl --enable-ftp --with-curl --enable-fastcgi --enable-xml  --disable-rpath --enable-discard-path --enable-safe-mode --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization  --with-curlwrappers --enable-mbregex  --enable-fpm --enable-force-cgi-redirect --enable-gd-native-ttf --enable-pcntl --enable-sockets --with-ldap --with-ldap-sasl

make ZEND_EXTRA_LIBS='-liconv'
make install

cp php.ini-dist /usr/local/php/lib/php.ini

PHP的配置一会再说，先把nginx安装完成

5、nginx及php扩展插件

 tar zxvf pcre-8.01.tar.gz
cd pcre-8.01/
./configure
make
make install
cd ..

groupadd www
useradd -g www -d /home/www -s /sbin/nologin www

tar zxvf nginx-0.9.5.tar.gz
cd nginx-0.9.5/
./configure --with-http_stub_status_module --with-http_ssl_module --user=www --group=www --with-http_realip_module
make
make install
cd ..

tar zxvf memcache-2.2.5.tgz
cd memcache-2.2.5/
/usr/local/php/bin/phpize
./configure --with-php-config=/usr/local/php/bin/php-config
make
make install
cd ..

tar jxvf eaccelerator-0.9.5.3.tar.bz2
cd eaccelerator-0.9.5.3/
/usr/local/php/bin/phpize
./configure --enable-eaccelerator=shared --with-php-config=/usr/local/php/bin/php-config
make
make install
cd ..

mkdir /tmp/eaccelerator
chmod 777 /tmp/eaccelerator
chown www:www /tmp/eaccelerator
 
配  置
6、安装完那一大堆软件之后，要开始配置了，下面这些才是关键

第一步：配置php.ini

 vi /usr/local/php/etc/php.ini

找到  extension_dir =""
修改成
extension_dir = "/usr/local/php/lib/php/extensions/no-debug-non-zts-20060613"
extension = "memcache.so"

再找到
 output_buffering=off
修改成
 output_buffering = On

再次查找
 ; cgi.fix_pathinfo=0
把注释去掉
cgi.fix_pathinfo=0

最后跳到php.ini文件的末尾，加入以下内容：

[eaccelerator]
zend_extension="/usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.so"
eaccelerator.shm_size="16"
eaccelerator.cache_dir="/tmp/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="0"
eaccelerator.compress_level="9"
eaccelerator.keys = "disk_only"
eaccelerator.sessions = "disk_only"
eaccelerator.content = "disk_only"

至此，php.ini文件修改完毕！

第二步：配置nginx的FCGI

 vi /usr/local/nginx/conf/fcgi.conf

写入以下内容：

fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx;

fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;

fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;

fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;
 

第三步：配置php-fpm文件

mv /usr/local/php/etc/php-fpm.conf /usr/local/php/etc/php-fpm.conf.bak
 vi /root/lnmp/php-fpm.conf
 

重新写入以下内容

<?xml version="1.0" ?>
<configuration>

  All relative paths in this config are relative to php's install prefix

  <section name="global_options">

    Pid file
    <value name="pid_file">/usr/local/php/logs/php-fpm.pid</value>

    Error log file
    <value name="error_log">/usr/local/php/logs/php-fpm.log</value>

    Log level
    <value name="log_level">notice</value>

    When this amount of php processes exited with SIGSEGV or SIGBUS ...
    <value name="emergency_restart_threshold">10</value>

    ... in a less than this interval of time, a graceful restart will be initiated.
    Useful to work around accidental curruptions in accelerator's shared memory.
    <value name="emergency_restart_interval">1m</value>

    Time limit on waiting child's reaction on signals from master
    <value name="process_control_timeout">5s</value>

    Set to 'no' to debug fpm
    <value name="daemonize">yes</value>

  </section>

  <workers>

    <section name="pool">

      Name of pool. Used in logs and stats.
      <value name="name">default</value>

      Address to accept fastcgi requests on.
      Valid syntax is 'ip.ad.re.ss:port' or just 'port' or '/path/to/unix/socket'
      <value name="listen_address">127.0.0.1:9000</value>

      <value name="listen_options">

        Set listen(2) backlog
        <value name="backlog">-1</value>

        Set permissions for unix socket, if one used.
        In Linux read/write permissions must be set in order to allow connections from web server.
        Many BSD-derrived systems allow connections regardless of permissions.
        <value name="owner"></value>
        <value name="group"></value>
        <value name="mode">0666</value>
      </value>

      Additional php.ini defines, specific to this pool of workers.
      <value name="php_defines">
        <value name="sendmail_path">/usr/sbin/sendmail -t -i</value>
        <value name="display_errors">1</value>   //0更改为1
      </value>

      Unix user of processes
      <value name="user">www</value>

      Unix group of processes
      <value name="group">www</value>

      Process manager settings
      <value name="pm">

        Sets style of controling worker process count.
        Valid values are 'static' and 'apache-like'
        <value name="style">static</value>

        Sets the limit on the number of simultaneous requests that will be served.
        Equivalent to Apache MaxClients directive.
        Equivalent to PHP_FCGI_CHILDREN environment in original php.fcgi
        Used with any pm_style.
        <value name="max_children">128</value>

        Settings group for 'apache-like' pm style
        <value name="apache_like">

          Sets the number of server processes created on startup.
          Used only when 'apache-like' pm_style is selected
          <value name="StartServers">20</value>

          Sets the desired minimum number of idle server processes.
          Used only when 'apache-like' pm_style is selected
          <value name="MinSpareServers">5</value>

          Sets the desired maximum number of idle server processes.
          Used only when 'apache-like' pm_style is selected
          <value name="MaxSpareServers">35</value>

        </value>

      </value>

      The timeout (in seconds) for serving a single request after which the worker process will be terminated
      Should be used when 'max_execution_time' ini option does not stop script execution for some reason
      '0s' means 'off'
      <value name="request_terminate_timeout">0s</value>

      The timeout (in seconds) for serving of single request after which a php backtrace will be dumped to slow.log file
      '0s' means 'off'
      <value name="request_slowlog_timeout">0s</value>

      The log file for slow requests
      <value name="slowlog">logs/slow.log</value>

      Set open file desc rlimit
      <value name="rlimit_files">65535</value>

      Set max core size rlimit
      <value name="rlimit_core">0</value>

      Chroot to this directory at the start, absolute path
      <value name="chroot"></value>

      Chdir to this directory at the start, absolute path
      <value name="chdir"></value>

      Redirect workers' stdout and stderr into main error log.
      If not set, they will be redirected to /dev/null, according to FastCGI specs
      <value name="catch_workers_output">yes</value>

      How much requests each process should execute before respawn.
      Useful to work around memory leaks in 3rd party libraries.
      For endless request processing please specify 0
      Equivalent to PHP_FCGI_MAX_REQUESTS
      <value name="max_requests">1024</value>

      Comma separated list of ipv4 addresses of FastCGI clients that allowed to connect.
      Equivalent to FCGI_WEB_SERVER_ADDRS environment in original php.fcgi (5.2.2+)
      Makes sense only with AF_INET listening socket.
      <value name="allowed_clients">127.0.0.1</value>

      Pass environment variables like LD_LIBRARY_PATH
      All $VARIABLEs are taken from current environment
      <value name="environment">
        <value name="HOSTNAME">$HOSTNAME</value>
        <value name="PATH">/usr/local/bin:/usr/bin:/bin</value>
        <value name="TMP">/tmp</value>
        <value name="TMPDIR">/tmp</value>
        <value name="TEMP">/tmp</value>
        <value name="OSTYPE">$OSTYPE</value>
        <value name="MACHTYPE">$MACHTYPE</value>
        <value name="MALLOC_CHECK_">2</value>
      </value>

    </section>

  </workers>

</configuration>
 

第四步：配置nginx.conf文件

  vi /usr/local/nginx/conf/nginx.conf

写入以下内容

 user www www;

worker_processes 8;
worker_cpu_affinity 0001 0010 0100 1000 0001 0010 0100 1000;

#error_log  /usr/local/nginx/logs/error.log;
#error_log  /usr/local/nginx/logs/error.log  notice;
#error_log  /usr/local/nginx/logs/error.log  info;

#pid        logs/nginx.pid;

worker_rlimit_nofile 204800;

events {
 use epoll;
 worker_connections 204800;
}

http {
 include       mime.types;
 default_type  application/octet-stream;

 #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
 #                  '$status $body_bytes_sent "$http_referer" '
 #                  '"$http_user_agent" "$http_x_forwarded_for"';

 #access_log  logs/access.log  main;

 sendfile        on;
 tcp_nopush     on;
 tcp_nodelay    on;
 keepalive_timeout  60;
 #ip_hash;

 ignore_invalid_headers   on;
 recursive_error_pages    on;
 server_name_in_redirect off;
 server_tokens           off;

 gzip on;
 gzip_comp_level  9;
 gzip_min_length  1100;
 gzip_buffers  4 8k;
 gzip_http_version  1.1;
 gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;

 server_names_hash_bucket_size 256;
 client_header_buffer_size 16K;
 large_client_header_buffers 4 64k;
 client_max_body_size             50m;
 client_body_buffer_size        256k;
 client_header_timeout     3m;
 client_body_timeout 3m;
 send_timeout             3m;

 open_file_cache max=204800 inactive=20s;
 open_file_cache_min_uses 1;
 open_file_cache_valid 30s;
   
 server
 {
  listen       80;
  server_name lihuipeng.blog.51cto.com;
  index index.html index.php;
  root  /home/www/blog;
  access_log  /home/logs/access_lihuipeng.blog.51cto.com.log;
  
  if (-d $request_filename){
   rewrite ^/(.*)([^/])$ http://$host/$1$2/ permanent;
  }
    
  error_page   500 502 503 504 404 403 ;
    
  location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
   expires 30d;
  }

  location ~ .*\.(js|css)?$ {
   expires 6h;
  }

  location ~ .*\.(log|txt)$
  {
   deny all;
  }

   location ~ .*\.(php)?$
  {
   fastcgi_pass  127.0.0.1:9000;
   fastcgi_index index.php;
   include fcgi.conf;
  }
 }
}
 
7、启动服务

/usr/local/php/sbin/php-fpm start
[root@node205 lib]# /usr/local/nginx/sbin/nginx -s reload
/usr/local/nginx/sbin/nginx
 
看看有没启动成功
 [root@localhost ~]# netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name  
tcp        0      0 127.0.0.1:199               0.0.0.0:*                   LISTEN      3937/snmpd         
tcp        0      0 127.0.0.1:9000              0.0.0.0:*                   LISTEN      3954/php-cgi       
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      2662/mysqld        
tcp        0      0 0.0.0.0:80                  0.0.0.0:*                   LISTEN      18066/nginx        
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN      17955/vsftpd       
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      4137/sendmail: acce
tcp        0      0 :::5989                     :::*                        LISTEN      2714/cimserver     
tcp        0      0 :::22                       :::*                        LISTEN      2574/sshd          
udp        0      0 0.0.0.0:161                 0.0.0.0:*                               3937/snmpd
 

看见php-cgi和nginx端口在正常监听！