CentOS Nginx PHP MySQL Memcached 安装 配置 优化 （二）接上篇??CentOS Nginx PHP MySQL Memcached 安装
CentOS Nginx PHP MySQL Memcached 安装 配置 优化 （二）
接上篇??CentOS Nginx PHP MySQL Memcached 安装 配置 优化
四、配置篇
4.1 mysql配置
;access.format = "%R - %u %t "%m %r%Q%q" %s %f %{mili}d %{kilo}M %C%%"
; The log file for slow requests
; Default Value: not set
; Note: slowlog is mandatory if request_slowlog_timeout is set
;slowlog = log/$pool.log.slow
slowlog = /var/log/php-fpm.log.slow
; The timeout for serving a single request after which a PHP backtrace will be
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
; Default Value: 0
;request_slowlog_timeout = 0
request_slowlog_timeout = 30s
; The timeout for serving a single request after which the worker process will
; be killed. This option should be used when the 'max_execution_time' ini option
; does not stop script execution for some reason. A value of '0' means 'off'.
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
; Default Value: 0
;request_terminate_timeout = 0
; Set open file descriptor rlimit.
; Default Value: system defined value
;rlimit_files = 1024
; Set max core size rlimit.
; Possible Values: 'unlimited' or an integer greater or equal to 0
; Default Value: system defined value
;rlimit_core = 0
; Chroot to this directory at the start. This value must be defined as an
; absolute path. When this value is not set, chroot is not used.
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
; of its subdirectories. If the pool prefix is not set, the global prefix
; will be used instead.
; Note: chrooting is a great security feature and should be used whenever
;? ?? ? possible. However, all PHP paths will be relative to the chroot
;? ?? ? (error_log, sessions.save_path, ...).
; Default Value: not set
;chroot =
; Chdir to this directory at the start.
; Note: relative path can be used.
; Default Value: current directory or / when chroot
;chdir = /var/www
chdir = /var/www
; Redirect worker stdout and stderr into main error log. If not set, stdout and
; stderr will be redirected to /dev/null according to FastCGI specs.
; Note: on highloaded environement, this can cause some delay in the page
; process time (several ms).
; Default Value: no
;catch_workers_output = yes
; Limits the extensions of the main script FPM will allow to parse. This can
; prevent configuration mistakes on the web server side. You should only limit
; FPM to .php extensions to prevent malicious users to use other extensions to
; exectute php code.
; Note: set an empty value to allow all extensions.
; Default Value: .php
;security.limit_extensions = .php .php3 .php4 .php5
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
; the current environment.
; Default Value: clean env
;env[HOSTNAME] = $HOSTNAME
;env[PATH] = /usr/local/bin:/usr/bin:/bin
;env[TMP] = /tmp
;env[TMPDIR] = /tmp
;env[TEMP] = /tmp
; Additional php.ini defines, specific to this pool of workers. These settings
; overwrite the values previously defined in the php.ini. The directives are the
; same as the PHP SAPI:
;? ?php_value/php_flag? ?? ?? ?? ? - you can set classic ini defines which can
;? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?be overwritten from PHP call 'ini_set'.
;? ?php_admin_value/php_admin_flag - these directives won't be overwritten by
;? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ? PHP call 'ini_set'
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
; Defining 'extension' will load the corresponding shared extension from
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
; overwrite previously defined php.ini values, but will append the new value
; instead.
; Note: path INI options can be relative and will be expanded with the prefix
; (pool, global or /usr/local/web/php)
; Default Value: nothing is defined by default except the values in php.ini and
;? ?? ?? ?? ?? ? specified at startup with the -d argument
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
;php_flag[display_errors] = off
;php_admin_value[error_log] = /var/log/fpm-php.www.log
;php_admin_flag[log_errors] = on
;php_admin_value[memory_limit] = 32M
复制代码4.3Nginx配置
? ? #? ?? ?? ?? ?? ?? ?'$status $body_bytes_sent "$http_referer" '
? ? #? ?? ?? ?? ?? ?? ?'"$http_user_agent" "$http_x_forwarded_for"';
? ? #access_log??logs/access.log??main;
? ? charset utf-8;
? ? server_names_hash_bucket_size 128;
? ? client_header_buffer_size 32k;
? ? large_client_header_buffers 4 32k;
? ? client_max_body_size 8m;
? ? sendfile on;
? ? tcp_nopush on;
? ? #tcp_nopush? ???on;
? ? #keepalive_timeout??0;
? ? keepalive_timeout??65;
? ? tcp_nodelay on;
? ? fastcgi_connect_timeout 300;
? ? fastcgi_send_timeout 300;
? ? fastcgi_read_timeout 300;
? ? fastcgi_buffer_size 64k;
? ? fastcgi_buffers 4 64k;
? ? fastcgi_busy_buffers_size 128k;
? ? fastcgi_temp_file_write_size 128k;
? ? #gzip??on;
? ? gzip on;
? ? gzip_min_length 1k;
? ? gzip_buffers 4 16k;
? ? gzip_http_version 1.0;
? ? gzip_comp_level 2;
? ? gzip_types text/plain application/x-javascript text/css application/xml;
? ? gzip_vary on;
? ? server {
? ?? ???listen? ?? ? 80;
? ?? ???server_name??localhost;
? ?? ???index index.html index.htm index.php;
? ?? ???root /var/www;
? ?? ???#charset koi8-r;
? ?? ???#access_log??logs/host.access.log??main;
? ?? ???location ~ .*\.(php|php5)?$ {
? ?? ?? ?? ?? ? fastcgi_pass 127.0.0.1:9000;
? ?? ?? ?? ?? ? fastcgi_index index.php;
? ?? ?? ?? ?? ? include fastcgi.conf;
? ?? ???}
? ?? ???#error_page??404? ?? ?? ?? ???/404.html;
? ?? ???# redirect server error pages to the static page /50x.html
? ?? ???#
? ?? ???error_page? ?500 502 503 504??/50x.html;
? ?? ???location = /50x.html {
? ?? ?? ?? ?root? ?html;
? ?? ???}
? ?? ???# proxy the PHP scripts to Apache listening on 127.0.0.1:80
? ?? ???#
? ?? ???#location ~ \.php$ {
? ?? ???#? ? proxy_pass? ?http://127.0.0.1;
? ?? ???#}
? ?? ???# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
? ?? ???#
? ?? ???#location ~ \.php$ {
? ?? ???#? ? root? ?? ?? ???html;
? ?? ???#? ? fastcgi_pass? ?127.0.0.1:9000;
? ?? ???#? ? fastcgi_index??index.php;
? ?? ???#? ? fastcgi_param??SCRIPT_FILENAME??/scripts$fastcgi_script_name;
? ?? ???#? ? include? ?? ???fastcgi_params;
? ?? ???#}
? ?? ???# deny access to .htaccess files, if Apache's document root
? ?? ???# concurs with nginx's one
? ?? ???#
? ?? ???#location ~ /\.ht {
? ?? ???#? ? deny??all;
? ?? ???#}
? ?? ???log_format??main??'$remote_addr - $remote_user [$time_local] "$request" '
? ?? ?? ?? ?? ? '$status $body_bytes_sent "$http_referer" '
? ?? ?? ?? ?? ? '"$http_user_agent" "$http_x_forwarded_for"';
? ?? ???access_log??/var/log/access.log??main;
? ? }
? ? # another virtual host using mix of IP-, name-, and port-based configuration
? ? #
? ? #server {
? ? #? ? listen? ?? ? 8000;
? ? #? ? listen? ?? ? somename:8080;
? ? #? ? server_name??somename??alias??another.alias;
? ? #? ? location / {
? ? #? ?? ???root? ?html;
? ? #? ?? ???index??index.html index.htm;
? ? #? ? }
? ? #}
? ? # HTTPS server
? ? #
? ? #server {
? ? #? ? listen? ?? ? 443;
? ? #? ? server_name??localhost;
? ? #? ? ssl? ?? ?? ?? ?? ?? ?on;
? ? #? ? ssl_certificate? ?? ?cert.pem;
? ? #? ? ssl_certificate_key??cert.key;
? ? #? ? ssl_session_timeout??5m;
? ? #? ? ssl_protocols??SSLv2 SSLv3 TLSv1;
? ? #? ? ssl_ciphers??ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
? ? #? ? ssl_prefer_server_ciphers? ?on;
? ? #? ? location / {
? ? #? ?? ???root? ?html;
? ? #? ?? ???index??index.html index.htm;
? ? #? ? }
? ? #}
}
复制代码五、启动篇
启动MySQL
cp /usr/local/mysql/share/mysql/mysql.server /etc/rc.d/init.d/
chkconfig --add mysql.server ←加入service和开机启动
/etc/rc.d/init.d/mysql.server start ←手动启动，下面设置root密码
/usr/local/mysql/bin/mysqladmin -u root password 'new-password'
/usr/local/mysql/bin/mysqladmin -uroot -p shutdown ←手动关闭
复制代码启动memcached
chmod 0777 /var/run ←允许普通用户程序写入pid文件
/usr/local/memcached/bin/memcached -p 11211 -d -u www -P /var/run/memcached.pid -m 64M -c 1024
复制代码参考命令格式：
/usr/local/memcached/bin/memcached -p 11211 -l 127.0.0.1 -d -u nobody -P /var/run/memcached.pid -m 64M -c 1024
几个参数的解释：
-p memcached监听的TCP端口
-l 监听的ip地址，127.0.0.1是本机，当然也可以写上你的服务器IP，如：61.150.91.26，这是我服务器的IP地址，如果你需要多个服务器都能够读取这台memcached的缓存数据，那么就必须设定这个ip
-d 以daemon方式运行，将程序放入后台
-u memcached的运行用户，我设定的是nobody
-P memcached的pid文件路径
-m memcached可以使用的最大内存数量
-c memcached同时可以接受的最大的连接数
如果你希望以socket方式来访问memcached，那么在启动的时候就必须去掉 -l和-p参数，并加上-s参数：
-s memcached的socket文件路径
启动mephp-fpm和nginx
ulimit -SHn 65535
/usr/local/php/sbin/php-fpm
/usr/local/nginx/sbin/nginx
复制代码以将这3条语句写入/etc/rc.local文件，
这样每次开机就可以启动php-fpm和nginx了。
优化Linux内核参数
vi /etc/sysctl.conf
复制代码在文件末尾增加以下内容：
# append
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
#net.ipv4.tcp_tw_len = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
#net.ipv4.tcp_fin_timeout = 30
#net.ipv4.tcp_keepalive_time = 120
net.ipv4.ip_local_port_range = 1024 65535
复制代码使配置立即生效：
/sbin/sysctl -p
复制代码六． References & thanks
? http://blog.s135.com/nginx_php_v6/
? http://blog.csdn.net/shagoo/archive/2008/08/05/2772418.aspx
? http://php-fpm.org/download/
? http://janwer.javaeye.com/blog/210952
? http://blog.chinaunix.net/u/31547/showart_493408.html
? http://www.yanghengfei.com/archives/294/
? http://bbs.linuxsky.org/thread-5561-1-1.html
