Nginx反向代理以及配置优化
下面配置包含了，nginx配置的一个比较全面的反向代理的例子：
user www www
worker_processes 8;
events {
use epoll;
worker_connections 10240;
}
pid /opt/work/log/nginx.pid;
error_log /dev/null error;
http {
include /opt/nginx/conf/mime.types;
default_type text/html;
log_format pv '[$time_local]|$remote_addr|$cookie_SUV|$args|$http_referer|$http_user_agent';
log_format main '$request_time $remote_addr $cookie_SUV [$time_local] $status ' '"$request" $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"' '"$cookie_Fr"';
log_format pbmain '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_user_agent"';
access_log off;
sendfile on;
keepalive_timeout 0;
gzip on;
#允许客户端请求的最大单个文件字节数
client_max_body_size 200m;
upload_progress proxied 8m;
#DNS服务器ip
resolver 192.168.1.1;
proxy_set_header Host $http_host;
proxy_set_header x-forwarded-for $remote_addr;
proxy_cache_key "$scheme$host$request_uri";
proxy_cache_path /opt/work/cache levels=1:2:1 keys_zone=js_cache:100m max_size=1024m inactive=15d;
proxy_cache_valid any 15d;
upstream backend {
ip_hash;
server 127.0.0.1:8080 weigth=4 max_fails=2 fail_timeout=30s;
server 127.0.0.1:8081 weigth=3 max_fails=2 fail_timeout=30s;
}
upstream liveBackends {
server 192.168.1.15:9090;
server 192.168.1.16:9090;
#备机
server 192.168.1.17:9090 backup;
}
server{
listen 80;
server_name www.myserver1.com;
error_log /opt/work/log/nginx_error.log error;
client_max_body_size 200m;
proxy_set_header Host $http_host;
proxy_set_header x-forwarded-for $remote_addr;
proxy_buffer_size 64k;
proxy_buffers 32 64k;
#查看服务状态
location /server-status {
stub_status on;
access_log off;
allow all;
}
location ^~ /pv {
access_log /opt/work/log1/nginx_access.log pv;
proxy_pass http://backend;
}
location ^~ /cc.do
{
proxy_pass http://backend;
}
location ^~/favicon.ico{
alias /usr/local/src/web/favicon.ico;
}
location ^~ /pv2 {
access_log /opt/work/log2/nginx_access.log pv;
access_log /opt/work/log/main/nginx_access_main.log main;
error_log /opt/work/log/error/nginx_error.log error;
return 204;
}
location /proxy/
{
#后端返回502,504，执行超时等错误，自动将请求转发到upstream负载池中另一台服务器
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://backend;
}
#禁止访问除以外的其他目录
location /{
deny all;
}
}
server{
listen 80;
server_name www.myserver2.com;
root /www;
location ~ t1.(gif)$ {
root /www;
expires -1;
access_log /data/log/access.log pbmain;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location ~ t2.(gif)$ {
root /www;
expires -1;
access_log /data/log/access.log pbmain;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
if ($args ~ "ltype=1(&|$)") {
proxy_pass http://liveBackends;
}
}
location /server-status {
stub_status on;
access_log off;
allow 10.0.0.0/8;
allow 192.168.0.0/16;
deny all;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
配置完后通过命令 nginx -t (或者nginx -t -c 配置文件路径)来检查配置文件是否有语法错误，没有错误后就可以启动了 /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf ,用默认路径配置文件的话可以不加-c
从容停止kill -QUIT nginx主进程号
平滑重启 kill -HUP nginx主进程号
配置文件修改可以通过不停机reload的方式实现加载。 nginx -s reload