Ubuntu Linux 10.04 安装及配置Nginx+PHP FPM 实用脚本

1、ubuntu linux 10.04 安装及配置nginx+php fpm 实用脚本install app server env. prepare:ubuntu 10.04 linux server config ssh,lvs real server and mysql slave. it 1; editor=vim; if ! export editor=vim /etc/pro /dev/null; then echo export editor=vim; /etc/profile; fi; app server domain domain= ics files server domai

2、n s_domain= linux内核参数优化 sysctl -w net.ipv4.t_syookies=1 表示开启syn cookies。当浮现syn等待队列溢出时，启用cookies来处理，可防范少量syn袭击，默认为0，表示关闭 sysctl -w net.ipv4.tcp_tw_reuse=1 表示开启重用。允许将time-wait sockets重新用于新的tcp衔接，默认为0，表示关闭 sysctl -w net.ipv4.tcp_tw_recycle=1 表示开启tcp衔接中time-wait sockets的迅速回收，默认为0，表示关闭 sysctl -w net.ipv4

3、.tcp_fin_out=30 表示假如套接字由本端要求关闭，这个参数打算了它保持在fin-wait-2状态的时光 sysctl -w net.ipv4.tcp_max_tw_buckets=6000 系统同时保持time_wait套接字的最大数量 sysctl -w net.core.somaxconn=262144 表示系统同时保持time_wait套接字的最大数量，假如超过这个数字，time_wait套接字将立即被清除并打印警告信息。默认为180000，改为5000。对于apache、nginx等服务器，上几行的参数可以很好地削减time_wait套接字数量，但是对于squ，效果却不大。

4、此项参数可以控制time_wait套接字的最大数量，避开squid服务器被大量的time_wait套接字拖死。 sysctl -w net.ipv4.tcp_keepalive_time = 1200 表示当keepalive起用的时候，tcp发送keepalive消息的频度。缺省是2小时，改为20分钟。 sysctl -w net.ipv4.ip_local_port_range = 1024 65000 表示用于向外衔接的端口范围。缺省状况下很小：32768到61000，改为1024到65000。 sysctl -w net.ipv4.tcp_max_syn_backlog = 8192

5、表示syn队列的长度，默认为1024，加大队列长度为8192，可以容纳更多等待衔接的网络衔接数。 sysctl /etc/sysctl.conf; ( start install proction server ( apt-get -y -force-yes install curl;安装curl apt-get -y -force-yes install python-software-properties; a-apt-repository ppa:brianmercer/;ubuntu 10.04 需要添加 fpm的ppa源 apt-get up; apt-get -y -force-y

6、es install nginx; apt-get -y -force-yes install meached; apt-get -y -force-yes install mercurial; apt-get -y -force-yes install php5-cgi php5-fpm php-apc php5-mysql php5-gd php5-mcrypt php5-memcache; ) /dev/null; fix comment echo extension=mcrypt.so /etc/php5/fpm/conf.d/mcrypt.ini; deploy app 收拾 /va

7、r/www; -rf app; hg clone https:/repo.app config nginx 我们服务器有16核,所以. echo user www-data; worker_processes 16; worker_cpu_affinity 1000000000000000 0100000000000000 0010000000000000 0001000000000000 0000100000000000 0000010000000000 0000001000000000 0000000100000000 0000000010000000 0000000001000000 0

8、000000000100000 0000000000010000 0000000000001000 0000000000000100 0000000000000010 0000000000000001; worker_rlimit_nofile 65536; error_log /var/log/nginx/error.log; pid /var/run/nginx.pid; events use epoll; worker_connections 131072; http client_header_buffer_size 4k; open_file_cache max=65536 inac

9、tive=20s; open_file_cache_min_uses 3; open_file_cache_valid 30s; access_log off; include /etc/nginx/mime.types; senile on; tcp_nopush on; tcp_nodelay on; g on; _disable msie 1-6.(?!.*sv1) gzip_buffers 16 64k; gzip_min_length 1k; gzip_comp_level 6; gzip_vary on; gzip_types text/plain text/javascript

10、text/css appliion/x-javascript text/xml application/xml application/xml+rss; include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-d/*; /etc/nginx/nginx.conf; enable nginx-status echo server listen 80 default; server_name localhost; access_log off; location / root /var/www/nginx-default; index

11、index.html index.htm; location = /favicon.ico log_not_found off; location /nginx-status stub_status on; allow ; deny all; /etc/nginx/sites-enabled/default; echo server listen 80; server_name $domain keepalive_timeout 0; access_log off; log_not_found off; error_log /var/log/nginx/app.error.l

12、og; root /var/www/app/; index index.php index.htm index.html; location / y_files $uri $uri/ /index.php?$args; location /(protected|yii)/ deny all; location = /favicon.ico expires max; return 204; location .php$ fastcgi_pass unix:/dev/shm/app-.socket; fastcgi_param path_info $fastcgi_path_info; fastc

13、gi_index index.php; fastcgi_param script_filename $document_root$fastcgi_script_name; fastcgi_param server_addr $server_addr; fastcgi_param server_port $server_port; fastcgi_param remote_addr $remote_addr; fastcgi_param remote_port $remote_port; fastcgi_param x-real-ip $remote_addr; include fastcgi_

14、params; /etc/nginx/sites-available/app; echo server listen 80; server_name $s_domain keepalive_timeout 60; access_log off; log_not_found off; index index.htm index.html; location / root /var/www/app/; deny all; location /(statics|css|ass|demo|themes|tests)/ root /var/www/app/; gzip on; gzip_disable

15、msie 1-6.(?!.*sv1) gzip_buffers 16 64k; gzip_min_length 1k; gzip_comp_level 6; gzip_vary on; expires 7d; add_header pragma public; add_header cache-control public, must-ridate, proxy-revalidate location = /favicon.ico return 204; location .php$ deny all; /etc/nginx/sites-available/s.app; -sf ./sites

16、-available/app /etc/nginx/sites-enabled/; ln -sf ./sites-available/s.app /etc/nginx/sites-enabled/; echo global pid = /var/run/php5-fpm.pid error_log = /var/log/php5-fpm-error.log process_control_timeout = 30 daemonize = yes www listen = /dev/shm/app-php-fpm.socket user = www-data group = www-data pm = static pm.max_children = 256 pm.max_requests = 65535 request_terminate_timeout = 30 rlimit_files = 65535 /etc/php5/fpm/php5-fpm.conf; service php5-fp