nginx详解、反向代理、负载均衡和LNMP架构

资源池

nginx官方网站：http://nginx.org/
nginx官方文档：http://nginx.org/en/docs/
本章资源：点击这里资源提取码：u2jv

1、nginx简介

Nginx (engine x) 是俄罗斯人编写的十分轻量级的、高性能的HTTP和反向代理web服务器，同时也提供了IMAP/POP3/SMTP服务；

nginx的特点是占有内存少，并发能力强，nginx 以 epoll and kqueue 作为开发模型，并发能力确实在同类型的网页服务器中表现较好；

nginx 作为负载均衡服务器，支持 7 层负载均衡。

nginx 应用异步IO：遇到IO就切换

2、nginx对比apache

nginx	apache
轻量级服务器	重量级服务器
适合处理静态页面	适合处理动态页面
处理高并发能力比较好高并发占用资源少	稳定性非常好、技术成熟

3、nginx下载

第一步：配置网络yum源

╭─root@localhost.localdomain ~  
╰─➤  vim /etc/yum.repos.d/local.repo 
...
[local]
name=local
enabled=1
gpgcheck=0
baseurl=file:///mnt
[epel]
name=epel
enabled=1
gpgcheck=0
baseurl=https://mirrors.aliyun.com/epel/7Server/x86_64
...
╭─root@localhost.localdomain ~  
╰─➤  mount /dev/cdrom /mnt      #挂载cd   
mount: /dev/sr0 is write-protected, mounting read-only
╭─root@localhost.localdomain ~  
╰─➤  yum repolist     #查看

第二步：下载nginx

╭─root@localhost.localdomain ~  
╰─➤  yum install nginx -y

第三步：启动nginx

╭─root@localhost.localdomain ~  
╰─➤  systemctl start nginx

第四步：防火墙放行80端口

╭─root@localhost.localdomain ~  
╰─➤  iptables -I INPUT -p tcp --dport 80 -j ACCEPT

第五步：浏览器访问

4、nginx主配置文件简介

╭─root@localhost.localdomain /etc/nginx  
╰─➤  cat nginx.conf
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;    #运行nginx服务的属主
worker_processes auto;   #进程数与内核数相同
error_log /var/log/nginx/error.log;    #指定错误日志
pid /run/nginx.pid;   #进程id

# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;    #加载的模块

events {
    worker_connections 1024;     #一个进程可以接受多少用户请求
}

http {     # http下定义了网站的信息
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
          #log_format定义了日志的格式

    access_log  /var/log/nginx/access.log  main;   
          #access_log定义访问网站的日志记录    

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;   #文件传输的规则

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;   #指定配置文件
    server{   #定义一个新的网站虚拟主机
         listen  80;    #监听端口
         root /var/www/html;    #指定网站根目录
         index  index.html;   #指定网站首页文件
        }
    server {       
        listen       80 default_server;   
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location / {    #定义访问规则
        }

        error_page 404 /404.html;   #指定错误文件
            location = /40x.html {
        root  /var/www/html      #可以指定错误文件目录
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }

# Settings for a TLS enabled server.
# 启用TLS的服务器的设置
#
#    server {
#        listen       443 ssl http2 default_server;
#        listen       [::]:443 ssl http2 default_server;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers HIGH:!aNULL:!MD5;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        location / {
#        }
#
#        error_page 404 /404.html;
#            location = /40x.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#            location = /50x.html {
#        }
#    }

}

5、nginx反向代理

nginx反向代理讲解

location  （匹配规则）+[匹配内容] {
	proxy_pass url;
	}

1、匹配规则有五种（优先等级由高到低）

 =       # = 表示精确匹配，只有完全匹配上才能生效
 ^~      #一般匹配一个目录
 ~        #区分大小写的正则匹配
 ~*      #不区分大小写正则匹配
 /        #通用匹配

2、完全代理与不完全代理

假设：[匹配内容] =admin

url=http：//192.168.64.4;
不完全代理：
	如果不加斜杆上面location表示的含义是请求http：//192.168.64.4/admin
      客户端admin文件或者目录必须存在！
      [匹配内容] 会自动填补到查找地址的后面.

url=http：//192.168.64.4/;	
完全代理：
	如果加斜杆上面location表示的含义是请求http：//192.168.64.4/
       客户端admin文件或者目录不需要存在！
       [匹配内容] 不会自动填补到查找地址的后面.

动静分离实验

第一步：布置环境

192.168.80.3 --->主服务器
192.168.80.4 --->静态节点（apache）
192.168.80.5 --->动态节点（apache）

第二步：在主服务器部署nginx并配置动静分离规则

╭─root@localhost.localdomain /etc/nginx  
╰─➤  vim /etc/nginx/nginx.conf

...
# Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location ~ html$ {
        proxy_pass http://192.168.80.4;   #分号结束
        }
        location ~ php$ {
        proxy_pass http://192.168.80.5;
        }
...

╭─root@localhost.localdomain /etc/nginx  
╰─➤  nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
╭─root@localhost.localdomain /etc/nginx  
╰─➤  systemctl restart nginx

第三步：配置静态服务器

╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  yum install httpd -y
╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  echo "i am html" >> /var/www/html/index.html
╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  systemctl restart httpd.service

第四步：配置动态服务器

╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  yum install httpd  php -y
╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  vim /etc/httpd/conf/httpd.conf 
...
<IfModule dir_module>
    DirectoryIndex index.php  index.html
</IfModule>
...

╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  systemctl restart httpd.service
╭─root@localhost.localdomain /etc/yum.repos.d  
╰─➤  vim /var/www/html/index.php
...
<?php
phpinfo();
?>
...

第五步：浏览器访问主服务器

6、负载均衡

weight ：权重
max_fails：最大失败次数
fail_timeout：失败等待时间
eg：max_fails=2 fail_timeout=2
表示：请求2s没有回复记1次失败；2次失败将该服务器提出该upstream组；

第一步：修改配置文件

╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  vim /etc/nginx/nginx.conf

...
    include /etc/nginx/conf.d/*.conf;
    upstream du1 {
        server 192.168.80.4 weight=5 max_fails=2 fail_timeout=2;
        server 192.168.80.5 weight=2 max_fails=2 fail_timeout=2;
        }
    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location /  {
        proxy_pass http://du1;
        }
...

第二步：检测语法并重启

╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  nginx -t                    
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  systemctl restart nginx.service

第三步：监控access日志

192.168.80.4

╭─root@localhost.localdomain /etc/httpd/logs  
╰─➤  echo '' > /etc/httpd/logs/access_log 
╭─root@localhost.localdomain /etc/httpd/logs  
╰─➤  cat /etc/httpd/logs/access_log      

╭─root@localhost.localdomain /etc/httpd/logs  
╰─➤  tail -f /etc/httpd/logs/access_log

192.168.80.5

╭─root@localhost.localdomain /var/www/html  
╰─➤  echo '' > /etc/httpd/logs/access_log    
╭─root@localhost.localdomain /var/www/html  
╰─➤  tail -f /etc/httpd/logs/access_log

第四步、浏览器访问
192.168.80.4

╭─root@localhost.localdomain /etc/httpd/logs 
╰─➤  tail -f /etc/httpd/logs/access_log  

192.168.80.3 - - [29/May/2019:18:40:58 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:03 +0800] "GET / HTTP/1.0" 200 10 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:03 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:03 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:04 +0800] "GET / HTTP/1.0" 200 10 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:04 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:04 +0800] "GET / HTTP/1.0" 200 10 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:04 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:05 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:05 +0800] "GET / HTTP/1.0" 200 10 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:05 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:06 +0800] "GET / HTTP/1.0" 200 10 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:06 +0800] "GET / HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"

192.168.80.5

╭─root@localhost.localdomain /var/www/html  
╰─➤  tail -f /etc/httpd/logs/access_log   

192.168.80.3 - - [29/May/2019:18:40:59 +0800] "GET / HTTP/1.0" 200 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:03 +0800] "GET / HTTP/1.0" 200 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:04 +0800] "GET / HTTP/1.0" 200 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:05 +0800] "GET / HTTP/1.0" 200 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
192.168.80.3 - - [29/May/2019:18:41:05 +0800] "GET / HTTP/1.0" 200 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"

7、拓展：负载均衡组合动静分离

8、LNMP架构上线动态网站（实验）

第一步：下载相关软件

╭─root@localhost.localdomain ~  
╰─➤  yum install nginx php php-mysql mariadb-server php-fpm -y

第二步：编辑php匹配规则

╭─root@localhost.localdomain ~  
╰─➤  vim /etc/nginx/nginx.conf

...
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/nginx/html;
        index  index.php  index.html;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location / {
        }
        location ~ php$ {
         include fastcgi.conf;
         fastcgi_pass 127.0.0.1:9000;
         }  
...
╭─root@localhost.localdomain ~  
╰─➤  nginx -t                                                 
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
╭─root@localhost.localdomain ~  
╰─➤  systemctl restart nginx.service

第三步：启动php-fpm

╭─root@localhost.localdomain ~  
╰─➤  systemctl restart php-fpm

第四步：启动数据库

╭─root@localhost.localdomain ~  
╰─➤  systemctl restart mariadb

第五步：创建数据库添加用户

╭─root@localhost.localdomain ~  
╰─➤  mysql -u root
Welcome to the MariaDB monitor.  Commands end with ; or g.
Your MariaDB connection id is 2
Server version: 5.5.60-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.

MariaDB [(none)]> create database du;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all on *.* to du@'localhost' identified by '123';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit
Bye

第六步：上传wordpress安装包至nginx网站根目录下/usr/share/nginx/html 并解压

注意：wordpress安装包本章开头资源池中寻找

╭─root@localhost.localdomain ~  
╰─➤  cd /usr/share/nginx/html
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  yum install unzip lrzsz -y  
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  rz

╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  unzip wordpress-3.3.1-zh_CN.zip
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  cp ./wordpress/* . -a                                 
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  cp wp-config-sample.php wp-config.php -a
╭─root@localhost.localdomain /usr/share/nginx/html  
╰─➤  vim wp-config.php 
...
/** WordPress 数据库的名称 */
define('DB_NAME', 'du');

/** MySQL 数据库用户名 */
define('DB_USER', 'du');

/** MySQL 数据库密码 */
define('DB_PASSWORD', '123');

/** MySQL 主机 */
define('DB_HOST', 'localhost');
...

第七步：浏览器访问

相关阅读:
字体符号版面设计
 有人嘲笑我ps技术不够好@罗小白
 浅谈UI：
色彩基础：
常用的Mysql数据库操作语句大全
 汇编（坑逼之路）
Linux学习笔记|扬帆
 坑爹的C++要课堂检测了然而我什么都没学
 why I need a flow learn note.
burpsuite
原文地址：https://www.cnblogs.com/du-z/p/10935232.html