RedHat Linux AS 5下Nginx的安装及Nginx+Tomcat负载均衡配置

一、软件准备

zlib-1.2.5.tar.gz[支持gzip]，下载地址：http://www.zlib.net/

pcre-8.10.tar.gz[支持rewrite module]，下载地址：http://sourceforge.net/projects/pcre/files/

openssl-1.0.0a.tar.tar[支持ssl]，下载地址：http://www.openssl.org/source/

下载LATEST版本

nginx-0.8.53.tar.gz，下载地址：http://nginx.org/en/download.html

二、安装过程

由于ssl暂时没有用到，所以没有安装

1、解压缩相关软件

[root@localhost tools]# tar zxvf zlib-1.2.5.tar.gz

[root@localhost tools]# tar zxvf pcre-8.10.tar.gz

[root@localhost tools]# tar zxvf nginx-0.8.53.tar.gz

2、具体安装

[root@localhost tools]# cd nginx-0.8.53

[root@localhost nginx-0.8.53]# ./configure --prefix=/opt/nginx

--with-http_realip_module --with-http_sub_module --with-http_flv_module

--with-http_dav_module –with-http_gzip_static_module --with-http_stub_status_module

--with-http_addition_module --with-pcre=/opt/tools/pcre-8.10 --with-zlib=/opt/tools/zlib-1.2.5

[root@localhost nginx-0.8.53]#make

[root@localhost nginx-0.8.53]#make install

三、Nginx+Tomcat负载均衡配置

  1、架构描述：

     前端一台Nginx服务器做负载均衡，后端放两台[当然可以多台]tomcat服务器，通过

Nginx转发到后面tomcat服务器，并且做动静分离

Nginx服务器IP:192.168.11.197

Tomcat01服务器IP:192.168.11.191

Tomcat02服务器IP:192.168.11.192

 

2、修改Nginx配置文件

[root@localhost conf]# vi nginx.conf

#运行nginx所在的用户名和用户组

user  nobody nobody; 

#运行CPU个数，可以按照实际服务器来计算

worker_processes  1;

#设定错误日志

error_log  logs/error.log;

#error_log  logs/error.log  notice;

#error_log  logs/error.log  info;

 

pid        logs/nginx.pid;

 

 

events {

    #设定连接数

    worker_connections  1024;

}

 

 

http {

    include       mime.types;

    default_type  application/octet-stream;

    include /opt/nginx/conf/proxy.conf;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

                      '$status $body_bytes_sent "$http_referer" '

                      '"$http_user_agent" "$http_x_forwarded_for"';

   #设定请求缓冲

   client_header_buffer_size 1k;

   large_client_header_buffers 4 4k;

   #设定可以使用gzip相关参数

   gzip on;

gzip_comp_level 7;

需要压缩的最小长度

   gzip_min_length 1100;

   gzip_buffers 4 8k;

   #指定需要压缩的文件类型

   gzip_types  text/plain application/javascript text/css text/xml

   gzip_types text/plain;

   output_buffers 1 32k;

   postpone_output 1460;

   #设定访问日志

   access_log  logs/access.log  main;

   client_header_timeout 3m;

   client_body_timeout 3m;

   send_timeout 3m;

   sendfile on;

   tcp_nopush on;

   tcp_nodelay on;

 

 

   # sendfile        on;

   #tcp_nopush     on;

 

   #keepalive_timeout  0;

   #keepalive_timeout  65;

 

   #gzip  on;

   upstream tomcat_server{

     #设定转向Server，weight代表优先级，优先级高的先访问

     server  192.168.11.191:8080 weight=1;

     server  192.168.11.192:8080 weight=2;

    }

    server {

        listen       80;

        server_name  localhost;

        charset gbk;

        access_log  logs/host.access.log  main;

        location / {

            root /opt/www/root

            index  index.html index.htm index.jsp;

            proxy_pass http://tomcat_server;

        }

#设定查看Nginx状态的地址(非默认安装模块，需要在编译时加上

--with-http_stub_status_module)  

location /status {  

    stub_status            on;  

    access_log            on;  

    auth_basic            "status";  

    auth_basic_user_file     conf/passwd;  

}

#访问http://192.168.11.197/status会提示输入账号

#htpasswd用法

#首先在conf/目录下建立passwd文件，具体命令：touch passwd

#htpasswd –cb passwd user password

 

        #css|js|ico|gif|jpg|jpeg|png|txt|html|htm|xml|swf|wav这些都是静态文件，

#但应分辨，js、css可能经常会变，过期时间应小一些，图片、

html基本不变，过期时间可以设长一些  

location ~* ^.+\.(ico|gif|jpg|jpeg|png|html|htm)$ {  

    root         /opt/www/root;  

    access_log   off;  

    expires      30d;  

}  

location ~* ^.+\.(css|js|txt|xml|swf|wav)$ {  

    root         /opt/www/root;   

    access_log   off;  

    expires      24h;  

}  

#注：location不包括?后面带的参数，所以以上正则可以

#匹配http://192.168.11.197/image/sxxx.jpg?a=xxx

        #error_page  404              /404.html;

 

        # redirect server error pages to the static page /50x.html

        #

        error_page   500 502 503 504  /50x.html;

        location = /50x.html {

            root   html;

        }

 

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80

        #

        #location ~ \.php$ {

        #    proxy_pass   http://127.0.0.1;

        #}

 

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000

        #

        #location ~ \.php$ {

        #    root           html;

        #    fastcgi_pass   127.0.0.1:9000;

        #    fastcgi_index  index.php;

        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;

        #    include        fastcgi_params;

        #}

 

        # deny access to .htaccess files, if Apache's document root

        # concurs with nginx's one

        #

        #location ~ /\.ht {

        #    deny  all;

        #}

    }

 

 

    # another virtual host using mix of IP-, name-, and port-based configuration

    #

    #server {

    #    listen       8000;

    #    listen       somename:8080;

    #    server_name  somename  alias  another.alias;

 

    #    location / {

    #        root   html;

    #        index  index.html index.htm;

    #    }

    #}

 

 

    # HTTPS server

    #

    #server {

    #    listen       443;

    #    server_name  localhost;

 

    #    ssl                  on;

    #    ssl_certificate      cert.pem;

    #    ssl_certificate_key  cert.key;

 

    #    ssl_session_timeout  5m;

 

    #    ssl_protocols  SSLv2 SSLv3 TLSv1;

         # ssl_ciphers 

ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

    #    ssl_prefer_server_ciphers   on;

 

    #    location / {

    #        root   html;

    #        index  index.html index.htm;

    #    }

    #}

 

}

在conf目录下创建proxy.conf文件，文件内容为

proxy_redirect off;

proxy_set_header Host $host;

#获取真实IP

proxy_set_header X-Real-IP $remote_addr;

#获取代理者的真实IP

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

client_max_body_size 10m;

client_body_buffer_size 128k;

proxy_connect_timeout 90;

proxy_send_timeout 90;

proxy_read_timeout 90;

proxy_buffer_size 4k;

proxy_buffers 4 32k;

proxy_busy_buffers_size 64k;

proxy_temp_file_write_size 64k;

 

3、测试Nginx

测试nginx.conf文件是否正确

[root@localhost sbin]# ./nginx -t -c conf/nginx.conf

the configuration file /opt/nginx/conf/nginx.conf syntax is ok

configuration file /opt/nginx/conf/nginx.conf test is successful

Nginx启动

[root@localhost sbin]# ./nginx -c /opt/nginx/conf/nginx.conf

 

查看是否启动成功

[root@localhost sbin]# ps aux|grep nginx |grep -v grep

root      4612  0.0  0.0   3792   472 ? Ss   Nov01   0:00 nginx: master process ./nginx

nobody    4613  0.0  0.1   4144  1284 ?    S    Nov01   0:05 nginx: worker process

 

出现上述两行代表启动成功

输入http://192.168.11.197/测试下效果吧

 

 

 

4、Nginx启动、关闭脚本

#!/bin/sh  

#  

# description: Starts, stops nginx  

#  

#chkconfig: 2345 20 80 

#dscription: Startup script for nginx webserver on CentOS. Place in /etc/init.d   

#  

# Author: Touya  

set -e  

 

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/opt/nginx  

DESC="nginx daemon" 

NAME=nginx  

DAEMON=/opt/nginx/sbin/$NAME  

CONFIGFILE=/opt/nginx/conf/nginx.conf  

PIDFILE=/opt/nginx/log/$NAME.pid  

SCRIPTNAME=/etc/init.d/$NAME
 
# Gracefully exit if the package has been removed.  
test -x $DAEMON || exit 0 
 
d_start() {  
echo "Starting $DESC: $NAME" 
$DAEMON -c $CONFIGFILE || echo "already running" 
}  
 
d_stop() {  
echo "Stopping $DESC: $NAME" 
test -f $PIDFILE && kill -QUIT `cat $PIDFILE`  
}  
 
d_reload() {  
echo "Reloading $DESC configuration…" 
kill -HUP `cat $PIDFILE` || echo "can’t reload" 
}  
case "$1" in  
'start')  
    d_start  
    echo "started." 
;;  
'stop')  
    d_stop  
    echo "stoped." 
;;  
'reload')  
    d_reload  
    echo "reloaded." 
;;  
'restart')  
    echo "Restarting $DESC: $NAME ..." 
    d_stop  
    # One second might not be time enough for a daemon to stop,  
    # if this happens, d_start will fail (and dpkg will break if  
    # the package is being upgraded). Change the timeout if needed  
    # be, or change d_stop to have start-stop-daemon use --retry.  
    # Notice that using --retry slows down the shutdown process somewhat.  
    sleep 3 
    d_start  
    echo "done." 
;;  
'list')  
    ps auxf | egrep '(PID|nginx)' | grep -v grep  
;;  
'test')  
    $DAEMON -t -c $CONFIGFILE  
;;  
*)  
echo "Usage: $SCRIPTNAME {reload|list|test|start|stop|restart}" >&2 
exit 3 
;;  
esac  
exit 0 
保存文件nginx ，拷贝到/etc/init.d下，并chmod  +x  /etc/init.d/nginx
[root@localhost init.d]# chkconfig --list nginx
service nginx supports chkconfig, but is not referenced in any runlevel (run 'chkconfig --add nginx')
增加后台服务
[root@localhost init.d]# chkconfig --add nginx
[root@localhost init.d]#
接下可以用service nginx start|restart|stop来操作你的nginx服务器（restart时重新读入config）