Nginx搭建胜过Apache十倍的Web服务器-第6版

1、前言：本文是我撰写的关于搭建“Nginx + PHP（FastCGI）”Web服务器的第6篇文章。本系列文章作为国内最早详细介绍 Nginx + PHP 安装、配置、使用的资料之一，为推动 Nginx 在国内的发展产生了积极的作用。本文可能不断更新小版本，请记住原文链接“/nginx_php_v6/”，获取最新内容。第6篇文章主要介绍了Nginx 0.8.x新的平滑重启方式，将PHP升级到了5.2.14，修正了PEAR问题。另将MySQL 5.1.x升级到了5.5.x系列，配置文件变更较大。链接：2007年9月的第1版、2007年12月的第2版、2008年

2、6月的第3版、2008年8月的第4版、2009年5月的第5版Nginx (engine x) 是一个高性能的 HTTP 和反向代理服务器，也是一个 IMAP/POP3/SMTP 代理服务器。 Nginx 是由 Igor Sysoev 为俄罗斯访问量第二的 Rambler.ru 站点开发的，它已经在该站点运行超过三年了。Igor 将源代码以类BSD许可证的形式发布。Nginx 超越 Apache 的高性能和稳定性，使得国内使用 Nginx 作为 Web 服务器的网站也越来越多，其中包括新浪博客、新浪播客、网易新闻、腾讯网、搜狐博客等门户网站频道，六间房、56.com等视频分享网站，Discuz!

3、官方论坛、水木社区等知名论坛，盛大在线、金山逍遥网等网络游戏网站，豆瓣、人人网、YUPOO相册、金山爱词霸、迅雷在线等新兴Web 2.0网站。Nginx 的官方中文维基：/NginxChs在高并发连接的情况下，Nginx是Apache服务器不错的替代品。Nginx同时也可以作为7层负载均衡服务器来使用。根据我的测试结果，Nginx 0.8.46 + PHP 5.2.14 (FastCGI) 可以承受3万以上的并发连接数，相当于同等环境下Apache的10倍。根据我的经验，4GB内存的服务器+Apache（prefork模式）一般只能处理3000个并发连接

4、，因为它们将占用3GB以上的内存，还得为系统预留1GB的内存。我曾经就有两台Apache服务器，因为在配置文件中设置的MaxClients为4000，当Apache并发连接数达到3800时，导致服务器内存和Swap空间用满而崩溃。而这台 Nginx 0.8.46 + PHP 5.2.14 (FastCGI) 服务器在3万并发连接下，开启的10个Nginx进程消耗150M内存（15M*10=150M），开启的64个php-cgi进程消耗1280M内存（20M*64=1280M），加上系统自身消耗的内存，总共消耗不到2GB内存。如果服务器内存较小，完全可以只开启25个php-cgi进程，这样php

5、-cgi消耗的总内存数才500M。在3万并发连接下，访问Nginx 0.8.46 + PHP 5.2.14 (FastCGI) 服务器的PHP程序，仍然速度飞快。下图为Nginx的状态监控页面，显示的活动连接数为28457（关于Nginx的监控页配置，会在本文接下来所给出的Nginx配置文件中写明）：我生产环境下的两台Nginx + PHP5（FastCGI）服务器，跑多个一般复杂的纯PHP动态程序，单台Nginx + PHP5（FastCGI）服务器跑PHP动态程序的处理能力已经超过“700次请求/秒”，相当于每天可以承受6000万（700*60*60*24=）的访问量（更多信息见此），而服

6、务器的系统负载也不高：2009年9月3日下午2：30，金山游戏剑侠情缘网络版叁临时维护1小时（/gonggao/jx3/2009-09-03/.shtml），大量玩家上官网，论坛、评论、客服等动态应用Nginx服务器集群，每台服务器的Nginx活动连接数达到2.8万，这是笔者遇到的Nginx生产环境最高并发值。下面是用100个并发连接分别去压生产环境中同一负载均衡器VIP下、提供相同服务的两台服务器，一台为Nginx，另一台为Apache，Nginx每秒处理的请求数是Apache的两倍多，Nginx服务器的系统负载、CPU使用率远低于Apache：你可以将

7、连接数开到1000030000，去压Nginx和Apache上的phpinfo.php，这是用浏览器访问Nginx上的phpinfo.php一切正常，而访问Apache服务器的phpinfo.php，则是该页无法显示。4G内存的服务器，即使再优化，Apache也很难在“webbench -c 30000 -t 60 http:/xxx.xxx.xxx.xxx/phpinfo.php”的压力情况下正常访问，而调整参数优化后的Nginx可以。webbench 下载地址：/post/288/注意：webbench 做压力测试时，该软件自身也会消耗CPU和内存资源

8、，为了测试准确，请将 webbench 安装在别的服务器上。测试结果：# Nginx + PHP #引用rootlocalhost webbench-1.5# webbench -c 100 -t 30 1/phpinfo.phpWebbench - Simple Web Benchmark 1.5Copyright (c) Radim Kolar 1997-2004, GPL Open Source Software.Benchmarking: GET 1/phpinfo.php100 clients, running 30

9、 sec.Speed= pages/min, bytes/sec.Requests: 51225 susceed, 0 failed.top - 14:06:13 up 27 days,2:25,2 users,load average: 14.57, 9.89, 6.51Tasks: 287 total, 4 running, 283 sleeping, 0 stopped, 0 zombieCpu(s): 49.9% us,6.7% sy,0.0% ni, 41.4% id,1.1% wa,0.1% hi,0.8% siMem: k total,k used,k free, k buffe

10、rsSwap:k total, 3696k used,k free,k cached测试结果：#Apache + PHP #引用rootlocalhost webbench-1.5# webbench -c 100 -t 30 7/phpinfo.phpWebbench - Simple Web Benchmark 1.5Copyright (c) Radim Kolar 1997-2004, GPL Open Source Software.Benchmarking: GET 7/phpinfo.php100 clients

11、, running 30 sec.Speed=42184 pages/min, bytes/sec.Requests: 21092 susceed, 0 failed.top - 14:06:20 up 27 days,2:13,2 users,load average: 62.15, 26.36, 13.42Tasks: 318 total, 7 running, 310 sleeping, 0 stopped, 1 zombieCpu(s): 80.4% us, 10.6% sy,0.0% ni,7.9% id,0.1% wa,0.1% hi,0.9% siMem: k total,k u

12、sed,k free, k buffersSwap:k total,12592k used,k free,k cached为什么Nginx的性能要比Apache高得多？这得益于Nginx使用了最新的epoll（Linux 2.6内核）和kqueue（freebsd）网络I/O模型，而Apache则使用的是传统的select模型。目前Linux下能够承受高并发访问的Squid、Memcached都采用的是epoll网络I/O模型。处理大量的连接的读写，Apache所采用的select网络I/O模型非常低效。下面用一个比喻来解析Apache采用的select模型和Nginx采用的epoll模型进行

13、之间的区别：假设你在大学读书，住的宿舍楼有很多间房间，你的朋友要来找你。select版宿管大妈就会带着你的朋友挨个房间去找，直到找到你为止。而epoll版宿管大妈会先记下每位同学的房间号，你的朋友来时，只需告诉你的朋友你住在哪个房间即可，不用亲自带着你的朋友满大楼找人。如果来了10000个人，都要找自己住这栋楼的同学时，select版和epoll版宿管大妈，谁的效率更高，不言自明。同理，在高并发服务器中，轮询I/O是最耗时间的操作之一，select和epoll的性能谁的性能更高，同样十分明了。安装步骤：（系统要求：Linux 2.6+ 内核，本文中的Linux操作系统为CentOS 5.3，另

14、在RedHat AS4上也安装成功）一、获取相关开源程序：1、【适用CentOS操作系统】利用CentOS Linux系统自带的yum命令安装、升级所需的程序库（RedHat等其他Linux发行版可从安装光盘中找到这些程序库的RPM包，进行安装）：sudo -sLANG=Cyum -y install gcc gcc-c+ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2

15、glib2-devel bzip2 bzip2-devel ncurses ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5 krb5-devel libidn libidn-devel openssl openssl-devel openldap openldap-devel nss_ldap openldap-clients openldap-servers2、【适用RedHat操作系统】RedHat等其他Linux发行版可从安装光盘中找到这些程序库的RPM包（事先可通过类似“rpm -qa | grep libjpe

16、g”的命令查看所需的RPM包是否存在，通常是“xxx-devel”不存在，需要安装）。RedHat可以直接利用CentOS的RPM包安装，以下是RPM包下载网址：、RedHat AS4 & CentOS 4/centos/4/os/i386/CentOS/RPMS//centos/4/os/x86_64/CentOS/RPMS/、RedHat AS5 & CentOS 5/centos/5/os/i386/CentOS//cen

17、tos/5/os/x86_64/CentOS/、RPM包搜索网站//、RedHat AS4 系统环境，通常情况下缺少的支持包安装：、i386 系统wget /soft/linux/nginx_php/rpm/i386/libjpeg-devel-6b-33.i386.rpmrpm -ivh libjpeg-devel-6b-33.i386.rpmwget /soft/linux/nginx_php/rpm/i386/freetype-dev

18、el-2.1.9-1.i386.rpmrpm -ivh freetype-devel-2.1.9-1.i386.rpmwget /soft/linux/nginx_php/rpm/i386/libpng-devel-1.2.7-1.i386.rpmrpm -ivh libpng-devel-1.2.7-1.i386.rpm、x86_64 系统wget /soft/linux/nginx_php/rpm/x86_64/libjpeg-devel-6b-33.x86_64.rpmrpm -ivh libjpeg-devel

19、-6b-33.x86_64.rpmwget /soft/linux/nginx_php/rpm/x86_64/freetype-devel-2.1.9-1.x86_64.rpmrpm -ivh freetype-devel-2.1.9-1.x86_64.rpmwget /soft/linux/nginx_php/rpm/x86_64/libpng-devel-1.2.7-1.x86_64.rpmrpm -ivh libpng-devel-1.2.7-1.x86_64.rpm3、【适用CentOS、RedHat及其它Li

20、nux操作系统】下载程序源码包：本文中提到的所有开源软件为截止到2010年07月26日的最新稳定版。、从软件的官方网站下载：mkdir -p /data0/softwarecd /data0/softwarewget http:/sysoev.ru/nginx/nginx-0.8.46.tar.gzwget /get/php-5.2.14.tar.gz/from/this/mirrorwget /downloads/php-5.2.14-fpm-0.5.14.diff.gzwget /ge

21、t/Downloads/MySQL-5.5/mysql-5.5.3-m3.tar.gz/from//wget /pub/gnu/libiconv/libiconv-1.13.1.tar.gzwget /mcrypt/libmcrypt-2.5.8.tar.gz?modtime=&big_mirror=0wget /mcrypt/mcrypt-2.6.8.tar.gz?modtime=&big_mirro

22、r=0wget /get/memcache-2.2.5.tgzwget /mhash/mhash-.tar.gz?modtime=&big_mirror=0wget ftp:/ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.10.tar.gzwget /source//eaccelerator-.tar.bz2wget http:/pecl.

23、/get/PDO_MYSQL-1.0.2.tgzwget /soft/linux/nginx_php/imagick/ImageMagick.tar.gzwget /get/imagick-2.3.0.tgz、从下载（比较稳定，只允许在本站，或者在Linux/Unix下通过Wget、Curl等命令下载以下软件）：mkdir -p /data0/softwarecd /data0/softwarewget /soft/linux/nginx_ph

24、p/nginx/nginx-0.8.46.tar.gzwget /soft/linux/nginx_php/php/php-5.2.14.tar.gzwget /soft/linux/nginx_php/phpfpm/php-5.2.14-fpm-0.5.14.diff.gzwget /soft/linux/nginx_php/mysql/mysql-5.5.3-m3.tar.gzwget /soft/linux/nginx_php/libic

25、onv/libiconv-1.13.1.tar.gzwget /soft/linux/nginx_php/mcrypt/libmcrypt-2.5.8.tar.gzwget /soft/linux/nginx_php/mcrypt/mcrypt-2.6.8.tar.gzwget /soft/linux/nginx_php/memcache/memcache-2.2.5.tgzwget /soft/linux/nginx_php/mhash/mh

26、ash-.tar.gzwget /soft/linux/nginx_php/pcre/pcre-8.10.tar.gzwget /soft/linux/nginx_php/eaccelerator/eaccelerator-.tar.bz2wget /soft/linux/nginx_php/pdo/PDO_MYSQL-1.0.2.tgzwget /soft/linux/nginx_php/imagick/Image

27、Magick.tar.gzwget /soft/linux/nginx_php/imagick/imagick-2.3.0.tgz二、安装PHP 5.2.14（FastCGI模式）1、编译安装PHP 5.2.14所需的支持库：tar zxvf libiconv-1.13.1.tar.gzcd libiconv-1.13.1/./configure -prefix=/usr/localmakemake installcd ./tar zxvf libmcrypt-2.5.8.tar.gz cd libmcrypt-2.5.8/./configuremakem

28、ake install/sbin/ldconfigcd libltdl/./configure -enable-ltdl-installmakemake installcd ././tar zxvf mhash-.tar.gzcd mhash-/./configuremakemake installcd ./ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.laln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.soln -s /usr/local/lib/

29、libmcrypt.so.4 /usr/lib/libmcrypt.so.4ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.aln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.laln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.soln -s /usr/local/lib/libmhash.so.2 /us

30、r/lib/libmhash.so.2ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1ln -s /usr/local/bin/libmcrypt-config /usr/bin/libmcrypt-configtar zxvf mcrypt-2.6.8.tar.gzcd mcrypt-2.6.8/sbin/ldconfig./configuremakemake installcd ./2、编译安装MySQL 5.5.3-m3/usr/sbin/groupadd mysql/usr/sbin/useradd -g

31、 mysql mysqltar zxvf mysql-5.5.3-m3.tar.gzcd mysql-5.5.3-m3/./configure -prefix=/usr/local/webserver/mysql/ -enable-assembler -with-extra-charsets=complex -enable-thread-safe-client -with-big-tables -with-readline -with-ssl -with-embedded-server -enable-local-infile -with-plugins=partition,innobase,

32、myisammrgmake & make installchmod +w /usr/local/webserver/mysqlchown -R mysql:mysql /usr/local/webserver/mysqlcd ./附：以下为附加步骤，如果你想在这台服务器上运行MySQL数据库，则执行以下几步。如果你只是希望让PHP支持MySQL扩展库，能够连接其他服务器上的MySQL数据库，那么，以下两步无需执行。、创建MySQL数据库存放目录mkdir -p /data0/mysql/3306/data/mkdir -p /data0/mysql/3306/binlog/mkdir -p /

33、data0/mysql/3306/relaylog/chown -R mysql:mysql /data0/mysql/、以mysql用户帐号的身份建立数据表：/usr/local/webserver/mysql/bin/mysql_install_db -basedir=/usr/local/webserver/mysql -datadir=/data0/mysql/3306/data -user=mysql、创建f配置文件：vi /data0/mysql/3306/f输入以下内容：引用clientcharacter-set-server = utf8port= 3306

34、socket= /tmp/mysql.sockmysqldcharacter-set-server = utf8replicate-ignore-db = mysqlreplicate-ignore-db = testreplicate-ignore-db = information_schemauser= mysqlport= 3306socket= /tmp/mysql.sockbasedir = /usr/local/webserver/mysqldatadir = /data0/mysql/3306/datalog-error = /data0/mysql/3306/mysql_err

35、or.logpid-file = /data0/mysql/3306/mysql.pidopen_files_limit= 10240back_log = 600max_connections = 5000max_connect_errors = 6000table_cache = 614external-locking = FALSEmax_allowed_packet = 32Msort_buffer_size = 1Mjoin_buffer_size = 1Mthread_cache_size = 300#thread_concurrency = 8query_cache_size =

36、512Mquery_cache_limit = 2Mquery_cache_min_res_unit = 2kdefault-storage-engine = MyISAMthread_stack = 192Ktransaction_isolation = READ-COMMITTEDtmp_table_size = 246Mmax_heap_table_size = 246Mlong_query_time = 3log-slave-updateslog-bin = /data0/mysql/3306/binlog/binlogbinlog_cache_size = 4Mbinlog_form

37、at = MIXEDmax_binlog_cache_size = 8Mmax_binlog_size = 1Grelay-log-index = /data0/mysql/3306/relaylog/relaylogrelay-log-info-file = /data0/mysql/3306/relaylog/relaylogrelay-log = /data0/mysql/3306/relaylog/relaylogexpire_logs_days = 30key_buffer_size = 256Mread_buffer_size = 1Mread_rnd_buffer_size =

38、16Mbulk_insert_buffer_size = 64Mmyisam_sort_buffer_size = 128Mmyisam_max_sort_file_size = 10Gmyisam_repair_threads = 1myisam_recoverinteractive_timeout = 120wait_timeout = 120skip-name-resolve#master-connect-retry = 10slave-skip-errors = 1032,1062,126,1114,1146,1048,1396#master-host = #ma

39、ster-user = username#master-password = password#master-port =3306server-id = 1innodb_additional_mem_pool_size = 16Minnodb_buffer_pool_size = 512Minnodb_data_file_path = ibdata1:256M:autoextendinnodb_file_io_threads = 4innodb_thread_concurrency = 8innodb_flush_log_at_trx_commit = 2innodb_log_buffer_s

40、ize = 16Minnodb_log_file_size = 128Minnodb_log_files_in_group = 3innodb_max_dirty_pages_pct = 90innodb_lock_wait_timeout = 120innodb_file_per_table = 0#log-slow-queries = /data0/mysql/3306/slow.log#long_query_time = 10mysqldumpquickmax_allowed_packet = 32M、创建管理MySQL数据库的shell脚本：vi /data0/mysql/3306/m

41、ysql输入以下内容（这里的用户名admin和密码接下来的步骤会创建）：#!/bin/shmysql_port=3306mysql_username=adminmysql_password=function_start_mysql()printf Starting MySQL.n/bin/sh /usr/local/webserver/mysql/bin/mysqld_safe -defaults-file=/data0/mysql/$mysql_port/f 2&1 /dev/null &function_stop_mysql()printf Stoping MySQL.n/usr

42、/local/webserver/mysql/bin/mysqladmin -u $mysql_username -p$mysql_password -S /tmp/mysql.sock shutdownfunction_restart_mysql()printf Restarting MySQL.nfunction_stop_mysqlsleep 5function_start_mysqlfunction_kill_mysql()kill -9 $(ps -ef grep bin/mysqld_safe grep $mysql_port awk printf $2)kill -9 $(ps

43、-ef grep libexec/mysqld grep $mysql_port awk printf $2)if $1 = start ; thenfunction_start_mysqlelif $1 = stop ; thenfunction_stop_mysqlelif $1 = restart ; thenfunction_restart_mysqlelif $1 = kill ; thenfunction_kill_mysqlelseprintf Usage: /data0/mysql/$mysql_port/mysql startstoprestartkillnfi、赋予shel

44、l脚本可执行权限：chmod +x /data0/mysql/3306/mysql、启动MySQL：/data0/mysql/3306/mysql start、通过命令行登录管理MySQL服务器（提示输入密码时直接回车）：/usr/local/webserver/mysql/bin/mysql -u root -p -S /tmp/mysql.sock、输入以下SQL语句，创建一个具有root权限的用户（admin）和密码（）：GRANT ALL PRIVILEGES ON *.* TO adminlocalhost IDENTIFIED BY ;GRANT ALL PRIVILEGES ON

45、 *.* TO admin IDENTIFIED BY ;、（可选）停止MySQL：/data0/mysql/3306/mysql stop3、编译安装PHP（FastCGI模式）tar zxvf php-5.2.14.tar.gzgzip -cd php-5.2.14-fpm-0.5.14.diff.gz | patch -d php-5.2.14 -p1cd php-5.2.14/./configure -prefix=/usr/local/webserver/php -with-config-file-path=/usr/local/webserver/php/etc

46、-with-mysql=/usr/local/webserver/mysql -with-mysqli=/usr/local/webserver/mysql/bin/mysql_config -with-iconv-dir=/usr/local -with-freetype-dir -with-jpeg-dir -with-png-dir -with-zlib -with-libxml-dir=/usr -enable-xml -disable-rpath -enable-discard-path -enable-safe-mode -enable-bcmath -enable-shmop -

47、enable-sysvsem -enable-inline-optimization -with-curl -with-curlwrappers -enable-mbregex -enable-fastcgi -enable-fpm -enable-force-cgi-redirect -enable-mbstring -with-mcrypt -with-gd -enable-gd-native-ttf -with-openssl -with-mhash -enable-pcntl -enable-sockets -with-ldap -with-ldap-sasl -with-xmlrpc

48、 -enable-zip -enable-soapmake ZEND_EXTRA_LIBS=-liconvmake installcp php.ini-dist /usr/local/webserver/php/etc/php.inicd ./4、编译安装PHP5扩展模块tar zxvf memcache-2.2.5.tgzcd memcache-2.2.5/usr/local/webserver/php/bin/phpize./configure -with-php-config=/usr/local/webserver/php/bin/php-configmakemake installc

49、d ./tar jxvf eaccelerator-.tar.bz2cd eaccelerator-/usr/local/webserver/php/bin/phpize./configure -enable-eaccelerator=shared -with-php-config=/usr/local/webserver/php/bin/php-configmakemake installcd ./tar zxvf PDO_MYSQL-1.0.2.tgzcd PDO_MYSQL-1.0.2/usr/local/webserver/php/bin/phpize./c

50、onfigure -with-php-config=/usr/local/webserver/php/bin/php-config -with-pdo-mysql=/usr/local/webserver/mysqlmakemake installcd ./tar zxvf ImageMagick.tar.gzcd ImageMagick-6.5.1-2/./configuremakemake installcd ./tar zxvf imagick-2.3.0.tgzcd imagick-2.3.0/usr/local/webserver/php/bin/phpize./configure

51、-with-php-config=/usr/local/webserver/php/bin/php-configmakemake installcd ./5、修改php.ini文件手工修改：查找/usr/local/webserver/php/etc/php.ini中的extension_dir = ./修改为extension_dir = /usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-/并在此行后增加以下几行，然后保存：extension = memcache.soextension = pdo_mysql.soex

52、tension = imagick.so再查找output_buffering = Off修改为output_buffering = On再查找; cgi.fix_pathinfo=0修改为cgi.fix_pathinfo=0，防止Nginx文件类型错误解析漏洞。自动修改：若嫌手工修改麻烦，可执行以下shell命令，自动完成对php.ini文件的修改：sed -i s#extension_dir = ./#extension_dir = /usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-/nextension = memcache.sonextension = pdo_mysql.sonextension = imagick.son# /usr/local/webserver/php/etc/php.inised -i s#output_buffering = Off#output_buffering = On# /usr/local/webserver/php/etc/php.inised -i s#; always_populate_raw_post_data = On#always_populate_raw_post_data = On#g /usr/local/webserver/ph