Nginx服务基础
Nginx专为性能优化而开发,其最知名的优点是它的稳定性和低系统资源消耗,以及对HTTP并发连接的高出力能力(单台物理服务器可支持30000~50000个并发请求)。
Nginx与Apche的区别
- nginx:轻量级,跨平台,轻量化,并发请求(30000-50000)
- apache:重量级的web服务,并发请求(3000-5000)
LAMP与LNMP区别
- LAMP–apache+php装在同一个主机
- php为apache提供了php的解析模块,该模块给了apache,所以,在此环境中,PHP代码是apache来解析的,而本身php,因此环境中没有php进程
- LNMP–php无法为nginx提供解析模块,nginx不能解析php代码,php的进程来解析php代码。该进程是fpm的进程(9000端口号),由fpm的进程为php代码进行解析—这个方法较fast-cgi
编译安装Nginx
#关闭防火墙以及内核安全机制
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0
#安装支持软件
[root@localhost ~]# yum -y install pcre-devel zlib-devel gcc* openssl-devel
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
#解压并编译安装Nginx
[root@localhost ~]# tar zxvf nginx-1.12.0.tar.gz
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
[root@localhost ~]# tar zxvf nginx-1.12.0.tar.gz
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
[root@localhost ~]# cd nginx-1.12.0
[root@localhost nginx-1.12.0]# ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module
[root@localhost nginx-1.12.0]# make && make install
[root@localhost nginx-1.12.0]# ls /usr/local/nginx/
[root@localhost nginx-1.12.0]# ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/
#更改以下内容
location /status {
stub_status on;
access_log off;
}
[root@localhost nginx]# systemctl restart nginx
[root@localhost nginx]# cd
[root@localhost ~]# yum -y install httpd-tools
#配置用户登录
[root@localhost ~]# htpasswd -c /usr/local/nginx/passwd.db zhangsan
[root@localhost ~]# chown nginx /usr/local/nginx/passwd.db
[root@localhost ~]# chmod 400 /usr/local/nginx/passwd.db
[root@localhost ~]# cd /usr/local/nginx/
[root@localhost nginx]# vim conf/nginx.conf
auth_basic "secret"; #基于密码加密方式
auth_basic_user_file /usr/local/nginx/passwd.db; #加密文件路径
[root@localhost nginx]# systemctl restart nginx
#拒绝某一ip访问
[root@localhost nginx]# vim conf/nginx.conf
deny 192.168.10.102 #拒绝
allow all;#允许所有
[root@localhost nginx]# systemctl restart nginx
Nginx虚拟主机
利用虚拟主机,不用为每个要预先的网站提供一台单独的Nginx服务器或单独允许一组Nginx进程,虚拟主机提供了在同一台服务器,同一组Nginx进程上允许多个网站的功能。跟Apache一样,Nginx也可以配置多种类型的虚拟主机,分别是基于IP的虚拟主机、基于域名的虚拟主机、基于端口的虚拟主机。
1.基于域名的虚拟主机
#基于域名的虚拟主机
#客户端 hosts
192.168.10.102 www.benet.com
192.168.10.102 www.accp.com
#服务端
[root@localhost nginx]# vim conf/nginx.conf
#更改以下内容
server {
server_name www.benet.com;
access_log logs/www.benet.com.access.log;
}
server {
server_name www.accp.com;
access_log logs/www.accp.com.access.log;
}
[root@localhost nginx]# mkdir -p /var/www/html/benet
[root@localhost nginx]# mkdir -p /var/www/html/accp
[root@localhost nginx]# cd /var/www/html/benet/
[root@localhost benet]#echo "benet.com">index.html
[root@localhost benet]# cd /var/www/html/accp/
[root@localhost accp]# echo "accp.com">index.html
[root@localhost accp]# systemctl restart nginx
2.基于ip的虚拟主机
#基于ip的虚拟主机
#为服务器设置多个IP地址
[root@localhost ~]# cd /etc/sysconfig/network-scripts/
[root@localhost network-scripts]# cp ifcfg-ens33 ifcfg-ens33:0
[root@localhost network-scripts]# cp ifcfg-ens33 ifcfg-ens33:1
#将网卡IP以及名称更改
[root@localhost network-scripts]# vim ifcfg-ens33
IPADDR=192.168.10.210
NAME=ens33:0
DEVICE=ens33:0
#将网卡IP以及名称更改
[root@localhost network-scripts]# vim ifcfg-ens33:0
IPADDR=192.168.10.211
NAME=ens33:1
DEVICE=ens33:1
#重启网卡服务
[root@localhost network-scripts]# systemctl restart network
#查看是否生效
[root@localhost network-scripts]# ip a
#修改 Nginx的配置文件,使基于 IP 的虚拟主机生效
[root@localhost ~]# vim /usr/local/nginx/conf/nginx.conf
server {
listen 192.168.10.210:80;
server_name www.benet.com;
}
server {
listen 192.168.10.211:80;
server_name www.accp.com;
}
[root@localhost ~]# systemctl restart nginx
3.基于端口的虚拟主机
#基于端口的虚拟主机
[root@localhost ~]# vim /usr/local/nginx/conf/nginx.conf
server {
listen 192.168.10.101:8080;
server_name www.benet.com;
}
server {
listen 192.168.10.101:8888;
server_name www.accp.com;
}
[root@localhost ~]# systemctl restart nginx
#检测端口是否运行正常
[root@localhost ~]# netstat -anpt | grep nginx
LNMP架构部署及应用
LNMP架构
[root@localhost ~]# yum -y install mariadb-server mariadb
[root@localhost ~]# systemctl start mariadb
[root@localhost ~]# mysql -uroot
[root@localhost ~]# mysqladmin -uroot password 'pwd123'
[root@localhost ~]# mysql -uroot -ppwd123
#php安装
[root@localhost ~]# tar zxvf php-5.5.38.tar.gz
[root@localhost ~]# yum -y install gd libxml2-devel libjpeg-devel libpng-devel
[root@localhost ~]# cd php-5.5.38
[root@localhost php-5.5.38]# ./configure --prefix=/usr/local/php5 --with-gd --with-zlib --with-mysql=mysqlnd --with-mysqli=mysqlnd --with-config-file-path=/usr/local/php5 --enable-mbstring --enable-fpm
[root@localhost php-5.5.38]# ls /usr/local/php5/
[root@localhost php-5.5.38]# ln -s /usr/local/php5/sbin/* /usr/local/sbin/
[root@localhost php-5.5.38]# ln -s /usr/local/php5/bin/* /usr/local/bin
[root@localhost php-5.5.38]# cp php.ini-development /usr/local/php5/php.ini
[root@localhost etc]# cd /usr/local/php5/etc
[root@localhost etc]# useradd -M -s /sbin/nologin php
[root@localhost etc]# cp php-fpm.conf.default php-fpm.conf
[root@localhost etc]# vim php-fpm.conf
user = php
group = php
pm.max_children = 50 #最大子进程
pm.start_servers = 20 #启动时开启的进程数
pm.min_spare_servers = 5 #最小空闲进程数
pm.max_spare_servers = 35 #最大空闲进程数
[root@localhost etc]# /usr/local/sbin/php-fpm
[root@localhost etc]# netstat -anpt | grep php-fpm
#指定php网页给fast-cgi解析
[root@localhost etc]# vim /usr/local/nginx/conf/nginx.conf
root /var/www/html;
index index.html index.htm index.php;
location ~ \.php$ {
root /var/www/html;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
include fastcgi.conf;
}
[root@localhost ~]# mkdir -p /var/www/html/
[root@localhost ~]# vim /var/www/html/test1.php
<?php
phpinfo();
?>
[root@localhost ~]# vim /var/www/html/test2.php
<?php
$link=mysqli_connect('127.0.0.1','root','pwd123');
if($link) echo "<h1>恭喜你,数据库连接成功啦!!!</h1>";
mysqli_close($link);
?>
在LNMP平台中部署Web应用
#下载并部署程序代码
[root@localhost ~]# yum -y install unzip
[root@localhost ~]# unzip Discuz_X3.3_SC_UTF8.zip
[root@localhost ~]# mkdir -p /var/www/html/bbs
[root@localhost ~]# mv upload/* /var/www/html/bbs
[root@localhost ~]# chown -R php:php /var/www/html/bbs/
#创建数据库
[root@localhost ~]# mysql -uroot -p
mysql>create database bbs;
mysql>grant all on bbs.* to runbbs@127.0.0.1 identified by 'bbs123';
mysql>grant all on bbs.* to runbbs@'localhost' identified by 'bbs123';