nginx
网站服务 代理服务 搭建Nginx服务器
nginx-1.8.0.tar.gz
rpm -q gcc gcc-c++
yum -y groupinstall "开发工具"
yum -y install pcre-devel openssl-devel
rpm -q httpd && service httpd stop
chkconfig httpd off
useradd -s /sbin/nologin nginx
./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module
make
make install
ls /usr/local/nginx/
conf 配置文件
nginx.conf 主配置文件
nginx.conf.default 模版文件
html 网页目录
logs 日志文件
sbin 命令
nginx
启动nginx 进程
/usr/local/nginx -h
常用选项
-v：查看nginx版本
-V：查看编译参数
-t：测试默认配置文件
-c：指定配置文件
[root@A nginx]# ./sbin/nginx
[root@A nginx]# netstat -utnlap | grep :80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 7223/nginx
[root@A nginx]#
[root@A nginx]# ls logs/
access.log error.log nginx.pid
[root@A nginx]#
echo 123 > /usr/local/nginx/html/a.html
yum -y install elinks
elinks --dump http://localhost/a.html
123
Nginx进程管理
杀死nginx进程的方式
/usr/local/nginx/sbin/nginx -s stop
pkill -9 nginx
killall -9 nginx
kill -信号 nginx
TERM, INT 快速关闭 QUIT 从容关闭，关闭主进程及子进程HUP 重载配置文件
USR1 重新打开日志文件 USR2 平滑升级可执行程序
[root@A nginx]# /usr/local/nginx/sbin/nginx -s stop
[root@A nginx]# elinks --dump http://localhost/a.html
ELinks: 拒绝连接
[root@A nginx]#
[root@A nginx]# /usr/local/nginx/sbin/nginx
[root@A nginx]# elinks --dump http://localhost/a.html
123
[root@A nginx]#
kill -HUP `/usr/local/nginx/logs/nginx.pid`
elinks --dump http://localhost:8080/a.html
平滑升级nginx
22 tar -zxvf nginx-1.9.2.tar.gz
cd nginx-1.9.2
/usr/local/nginx/sbin/nginx -V
./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module
make
mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginxold
mv objs/nginx /usr/local/nginx/sbin/
/usr/local/nginx/sbin/nginx -v
[root@A nginx-1.9.2]# make upgrade
/usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
kill -USR2 `cat /usr/local/nginx/logs/nginx.pid`
sleep 1
test -f /usr/local/nginx/logs/nginx.pid.oldbin
kill -QUIT `cat /usr/local/nginx/logs/nginx.pid.oldbin`
[root@A nginx-1.9.2]#
主配置文件的语法格式
http{
server {
listen 80;
server_name localhost;
location / {
root html;
index index.html index.htm;
}
}
}
----------------------------------------------------------------
配置Nginx虚拟主机 server { }
基于端口的虚拟主机(通过端口区分客户端的访问)
端口 网页目录
http://192.168.1.254:80 /usr/local/nginx/html
http://192.168.1.254:8080 /wwwdir
vim nginx.conf
http {
server {
listen 80;
location / {
root html;
index a.html;
}
}
server {
listen 8080;
location / {
root /wwwdir;
index index.html;
}
}
}
-------------------------------------------------------------
基于域名的虚拟主机（通过主机名区分客户端的访问）
http://www.tarena.com /usr/local/nginx/html
http://bbs.tarena.com /bbsdir
192.168.1.254
vim nginxsername.conf
http{
server {
listen 80;
server_name www.tarena.com;
location / {
root html;
index index.html;
}
}
server {
listen 80;
server_name bbs.tarena.com;
location / {
root /bbsdir;
index index.html;
}
}
}
:wq
mkdir /bbsdir
echo 123 > /bbsdir/index.html
echo 567 > /usr/local/nginx/html/index.html
客户端 要能够解析主机名到web服务器的Ip地址
vim /etc/hosts
192.168.1.254 www.tarena.com www
192.168.1.254 bbs.tarena.com bbs
:wq
[root@A conf]# elinks --dump http://bbs.tarena.com
123
[root@A conf]# elinks --dump http://www.tarena.com
567
[root@A conf]#
-----------------------------------------------------------------
基于Ip地址的虚拟主机（通过ip地址区分客户端的访问）
http://1.0.0.254 /usr/local/nginx/html/
http://192.168.1.254 /bbsdir/
cat ip.conf
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
server {
listen 192.168.1.254:80;
location / {
root /bbsdir;
index index.html;
}
}
server {
listen 1.0.0.254:80;
location / {
root html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
:wq
客户访问
ping 192.168.1.254
ping 1.0.0.254
[root@A ~]# elinks --dump http://1.0.0.254
567
[root@A ~]# elinks --dump http://192.168.1.254
123
[root@A ~]#
-----------------------------------------------------------------
客户端访问控制 location / { }
默认允许所有客户端访问网站目录下网页文件
location / {
.....
.....
allow 192.168.1.188;
deny all;
}
用户验证 (访问网页文件时，需要提交用户名和 密码)
location / {
.....
.....
allow 192.168.1.188;
deny all;
auth_basic "auth-domain";
auth_basic_user_file "/usr/local/nginx/conf/user.txt";}
rpm -q httpd-tools
[root@A conf]# htpasswd -c /usr/local/nginx/conf/user.txt webadmin
New password:
Re-type new password:
Adding password for user webadmin
[root@A conf]# cat /usr/local/nginx/conf/user.txt
webadmin:.GHgOK5P5MaiY
[root@A conf]#
-----------------------------------------------------------------
配置虚拟主机
http://192.168.1.254 /usr/local/nginx/html/
http://192.168.1.254:8090 /bbsdir/
但只允许从地址192.168.1.188客户端访问 网站服务器192.168.1.254的8090端口 并要提交正确的用户名和密码才可以访问
---------------------------------------------------------------
配置Nginx反向代理
vim nginx.conf
upstream "webgrp" {
server 192.168.1.1:80 weight=3;
server 192.168.1.2:80;
}
server {
listen 80;
location / {
#proxy_pass http://192.168.1.1;
proxy_pass http://webgrp;
}
}
:wq
nginx目前支持4种分配方式轮询（默认的）： 逐一循环调度Weight：指定轮询几率，权重值和访问比率成正比
ip_hash：根据客户端IP分配固定的后端服务器Fair：按后端服务器响应时间短的优先分配
upstream sergrp {
#ip_hash;
#server 192.168.8.5:80 weight=2;
server 192.168.8.5:80 down;
server 192.168.8.4:8080;
server 192.168.8.6:80 backup;
server 192.168.8.3:80 max_fails=2 fail_timeout=30;
}