一、续 1.限制连接 limit_conn 场景: 下载
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 [root@oldboy-pythonedu mirror]# cat /etc/nginx/conf.d/mirror.oldboyedu.com.conf limit_conn_zone $binary_remote_addr zone=addr:10m; # 定义限制的key, 分配区域大小 server { listen 80; server_name mirror.oldboyedu.com; charset utf8; limit_conn addr 1; # 调用区域限制,限制key只可以出现1次, 相当于限制来源客户端IP的连接数为1 limit_conn_status 500; # 限制成功后,会返回500的错误状态码,默认返回503 limit_rate_after 200m; # 全速下载200m资源 limit_rate 300k; # 达到200m以后,限制300k的速度 error_page 500 = @testerror; # 如果 出现500错误,则让其跳转到内部的 @testerror location @testerror { # 定义 @testerror, 返回具体的动作 default_type text/html; return 200 '$remote_addr 你超过了最大连接限制, 请充值VIP解封!'; } location / { root /code/mirror; autoindex on; autoindex_exact_size off; autoindex_localtime on; } }
1 2 dd if =/dev/zero of=./bigdata bs=1M count=500 tail -f /var/log /nginx/error.log
2.状态监控 stub_status [ 7种状态 ] 1 2 3 location = /status { stub_status; }
1 2 3 4 5 6 7 8 9 Active connections: 2 server accepts handled requests 2 2 3 Reading: 0 Writing: 1 Waiting: 1 Active connections: accepts: handled: requests:
3.location 作用: 控制用户请求 uri 的具体路径* | ^ ] uri { … }
多个location时会用上, 但多个location会出现优先级的问题.
1).Location优先级:
1 2 3 4 5 6 # 匹配符 匹配规则 优先级 # = 精确匹配 1 # ^~ 以某个字符串开头 2 # ~ 区分大小写的正则匹配 3 # ~* 不区分大小写的正则匹配 4 # / 通用匹配，任何请求都会匹配到 5
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 server { listen 80; server_name location.oldboyedu.com; location = / { default_type text/html; return 200 'location = /' ; } location / { default_type text/html; return 200 'location /' ; } location /documents/ { default_type text/html; return 200 'location /documents/' ; } location ^~ /images/ { default_type text/html; return 200 'location ^~ /images/' ; } location ~* \.(gif|jpg|jpeg)$ { default_type text/html; return 200 'location ~* \.(gif|jpg|jpeg)' ; } } http://location.oldboyedu.com/index.html location / http://location.oldboyedu.com/documents/1.html location /documents/ http://location.oldboyedu.com/images/1.gif location ^~ /images/ [root@cwj-python ~] location ^~ /images/ http://location.oldboyedu.com/documents/1.jpg location ~* \.(gif|jpg|jpeg) [root@cwj-python ~] location ~* \.(gif|jpg|jpeg)
2).Location具体如何使用:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 server { listen 80; server_name location.oldboyedu.com; # 通用匹配，任何请求都会匹配到 location / { root html; index index.html; } # 精准匹配,必须请求的uri是/nginx_status location = /nginx_status { stub_status; } # 严格区分大小写，匹配以.php结尾的都走这个location location ~ \.php$ { default_type text/html; return 200 'php访问成功'; } # 严格区分大小写，匹配以.jsp结尾的都走这个location location ~ \.jsp$ { default_type text/html; return 200 'jsp访问成功'; } # 不区分大小写匹配，只要用户访问.jpg,gif,png,js,css 都走这条location location ~* \.(jpg|gif|png|js|css)$ { return 403; } # 不区分大小写匹配 location ~* \.(sql|bak|tgz|tar.gz|.git)$ { deny all; } }
二、nginx+php 1.wordpress(博客) 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 LNMP 架构: 1) 什么是LNMP架构 L = Linux N = Nginx M ~= MySQL | Mariadb p ~= PHP | Python 2) LNMP架构如何工作 3) LNMP架构安装 nginx: php: [root@oldboy-pythonedu ~]# rpm -e $(rpm -qa |grep php) #卸载php5版本 [root@oldboy-pythonedu ~]# wget http://cdn.xuliangwei.com/php.zip [root@oldboy-pythonedu ~]# unzip php.zip [root@oldboy-pythonedu ~]# yum localinstall php/*.rpm -y # 修改进程运行的身份 [root@oldboy-pythonedu ~]# sed -i 's#user = apache#user = nginx#g' /etc/php-fpm.d/www.conf [root@oldboy-pythonedu ~]# sed -i 's#group = apache#group = nginx#g' /etc/php-fpm.d/www.conf # 启动php-fpm [root@oldboy-pythonedu ~]# systemctl enable php-fpm [root@oldboy-pythonedu ~]# systemctl start php-fpm nginx+ php 检查: [root@oldboy-pythonedu ~]# cat /etc/nginx/conf.d/php.oldboyedu.com.conf server { listen 80; server_name php.oldboyedu.com; root /code; location / { index index.php; } location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } # 代码: [root@oldboy-pythonedu ~]# cat /code/index.php <?php phpinfo(); ?> mysql: [root@oldboy-pythonedu ~]# yum install mariadb mariadb-server -y [root@oldboy-pythonedu ~]# systemctl enable mariadb [root@oldboy-pythonedu ~]# systemctl start mariadb [root@oldboy-pythonedu ~]# mysqladmin password '123456' [root@oldboy-pythonedu ~]# mysql -uroot -p123456 MariaDB [(none)]> MariaDB [(none)]> create database wordpress charset utf8; 测试php+mysql是否成功: [root@oldboy-pythonedu ~]# cat /code/mysql.php <?php $servername = "localhost"; $username = "root"; $password = "123456"; // 创建连接 $conn = mysqli_connect($servername, $username, $password); // 检测连接 if (!$conn) { die("Connection failed: " . mysqli_connect_error()); } echo "php连接MySQL数据库成功"; ?> [root@oldboy-pythonedu ~]# php /code/mysql.php php连接MySQL数据库成功 4) 部署Wordpress 第一步: 下载代码,存储至指定位置,变更权限 [root@oldboy-pythonedu ~]# cd /code/ [root@oldboy-pythonedu code]# wget https://cn.wordpress.org/latest-zh_CN.tar.gz [root@oldboy-pythonedu code]# tar xf latest-zh_CN.tar.gz [root@oldboy-pythonedu code]# chown -R nginx.nginx wordpress/ 第二步: 编写Nginx配置文件 [root@oldboy-pythonedu code]# cat /etc/nginx/conf.d/blog.oldboyedu.com.conf server { listen 80; server_name blog.oldboyedu.com; root /code/wordpress; client_max_body_size 50m; location / { index index.php; } location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } [root@oldboy-pythonedu code]# nginx -t [root@oldboy-pythonedu code]# systemctl reload nginx 第三步: 配置域名解析.访问浏览器.安装该产品 10.0.0.200 blog.oldboyedu.com
2.部署edusoho项目(网络课堂)
1).安装EduSoho
1 2 3 4 5 6 7 8 mkdir /code cd /code rz #上传文件 tar xf edusoho-8.2.17.tar.gz #注意：我们的进程能够以什么方式去访问一个文件或目录，取决于进程所运行的用户身份对该文件有什么权限 chown -R nginx.nginx edusoho
2)增加EduSoho nginx配置
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 vim /etc/nginx/conf.d/edu.oldboyedu.com.conf server { listen 80; server_name edu.oldboyedu.com; root /code/edusoho/web; client_max_body_size 1024m; #允许上传视频大小限制 client_body_buffer_size 100m; #缓冲区大小(太小会提示a client request body is buffered to a temporary) location / { index app.php; try_files $uri @rewriteapp; } location @rewriteapp { rewrite ^(.*)$ /app.php/$1 last; } location ~ ^/udisk { internal; root /code/edusoho/app/data/; } location ~ ^/(app|app_dev)\.php(/|$) { fastcgi_pass 127.0.0.1:9000; fastcgi_split_path_info ^(.+\.php)(/.*)$; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param HTTPS off; fastcgi_param HTTP_X-Sendfile-Type X-Accel-Redirect; fastcgi_param HTTP_X-Accel-Mapping /udisk=/code/edusoho/app/data/udisk; fastcgi_buffer_size 128k; fastcgi_buffers 8 128k; } location ~* \.(jpg|jpeg|gif|png|ico|swf)$ { expires 3y; access_log off; gzip off; } location ~* \.(css|js)$ { access_log off; expires 3y; } location ~ ^/files/.*\.(php|php5)$ { deny all; } location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_split_path_info ^(.+\.php)(/.*)$; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param HTTPS off; include fastcgi_params; } }
3)重启nginx服务
1 2 nginx -t systemctl restart nginx
4)修改php.ini 配置文件,调整解析器支持的最大上传限制
1 2 3 4 5 6 7 tail -f /var/log/nginx/error.log vim /etc/php.ini upload_max_filesize = 1024M post_max_size = 1024M systemctl restart php-fpm
5)上传视频
1 2 3 4 课程->创建课程 课程->管理课程--> 课程文件-->添加视频 计划任务-->添加章节-->添加视频-->发布
6)修改图片
1 2 3 4 5 运营->编辑区管理->首页顶部.轮播图 系统->站点设置->网站Logo 系统->站点设置->主题->管理 ->组件调整 ->配色方案
3.kodcloud (网盘) 【+ oss 对象存储 ( 花钱 )】 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 1) Nginx + PHP 环境 2) kodcloud代码 [root@oldboy-pythonedu ~]# cd /code [root@oldboy-pythonedu code]# wget http://static.kodcloud.com/update/download/kodbox.1.13.zip [root@oldboy-pythonedu code]# mkdir kodcloud [root@oldboy-pythonedu code]# unzip kodbox.1.13.zip -d kodcloud/ [root@oldboy-pythonedu code]# chown -R nginx.nginx /code/kodcloud/ 3) Nginx配置文件 [root@oldboy-pythonedu code]# cat /etc/nginx/conf.d/kod.oldboyedu.com.conf server { listen 80; server_name kod.oldboyedu.com; root /code/kodcloud; location / { index index.php; } location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } chown -R nginx.nginx /code/kodcloud/ [root@oldboy-pythonedu code]# nginx -t [root@oldboy-pythonedu code]# systemctl reload nginx 4) 域名解析 10.0.0.200 blog.oldboyedu.com 10.0.0.200 edu.oldboyedu.com 10.0.0.200 kod.oldboyedu.com
三、扩展应用节点及拆分数据库 1.扩展一台应用节点 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 1) 克隆一台全新的Linux主机,需要修改IP地址 node2(201) sed -i 's#old#new#g' /etc/sysconfig/network-script/ifcfg-ens # old: 旧的IP尾号 # new: 新的IP尾号 [root@oldboy-pythonedu ~]# hostnamectl set-hostname node2 2) 安装Nginx PHP环境 [root@node2 ~]# yum install vim net-tools unzip wget lrzsz -y # 基础工具 [root@node2 ~]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo [root@node2 ~]# wget http://cdn.xuliangwei.com/php.zip # 安装Nginx [root@node2 ~]# yum install nginx -y # 安装PHP [root@node2 ~]# unzip php.zip [root@node2 ~]# yum localinstall php/*.rpm -y 3) 拷贝Nginx配置 PHP配置 scp [root@node2 ~]# scp root@10.0.0.200:/etc/nginx/nginx.conf /etc/nginx/nginx.conf [root@node2 ~]# scp -r root@10.0.0.200:/etc/nginx/conf.d/*.conf /etc/nginx/conf.d/ # php [root@node2 ~]# scp root@10.0.0.200:/etc/php.ini /etc/php.ini [root@node2 ~]# scp root@10.0.0.200:/etc/php-fpm.d/www.conf /etc/php-fpm.d/www.conf 4) 拷贝代码, 关闭防火墙 [root@node2 ~]# systemctl disable firewalld [root@node2 ~]# systemctl stop firewalld [root@node2 ~]# setenforce 0 [root@node2 ~]# sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config # 拷贝所有代码 [root@node2 ~]# scp -rp root@10.0.0.200:/code / [root@node2 ~]# chown -R nginx.nginx /code/ 5) 启动服务 [root@node2 ~]# systemctl enable nginx php-fpm [root@node2 ~]# systemctl start nginx php-fpm
2.拆分数据库至独立服务器 ( 应用节点可以共享使用, 数据库还可以组集群架构. ) 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 1) 准备基础环境, 修改IP地址,修改主机名称,关闭防火墙 sed -i 's#200#202#g' /etc/sysconfig/network-scripts/ifcfg-ens32 systemctl restart network hostnamectl set-hostname node-mysql systemctl stop firewalld systemctl disable firewalld setenforce 0 sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config yum install vim net-tools unzip wget lrzsz -y wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo 2) 在202安装Mariadb [root@node-mysql ~]# yum install mariadb mariadb-server -y [root@node-mysql ~]# systemctl enable mariadb [root@node-mysql ~]# systemctl start mariadb [root@node-mysql ~]# mysql -u root -p MariaDB [(none)]> grant all privileges on *.* to 'all'@'%' identified by '123456'; MariaDB [(none)]> 3) 在原有数据上,将库备份下来,然后恢复至 10.0.0.202 主机的MySQL上 [root@oldboy-pythonedu ~]# mysqldump -uroot -p123456 -B wordpress edusoho > bak.sql [root@oldboy-pythonedu ~]# scp bak.sql root@10.0.0.202:~ 4) 在新的数据库服务上恢复数据 [root@node-mysql ~]# mysql -u root -p123456 < bak.sql 5) 修改应用服务连接数据库的地址: ( 所有应用节点都需要操作 ) Wordpress: [root@node2 ~]# vim /code/wordpress/wp-config.php define( 'DB_NAME', 'wordpress' ); /** MySQL数据库用户名 */ define( 'DB_USER', 'all' ); /** MySQL数据库密码 */ define( 'DB_PASSWORD', '123456' ); /** MySQL主机 */ define( 'DB_HOST', '10.0.0.202' ); edusohu: [root@node2 ~]# vim /code/edusoho/app/config/parameters.yml parameters: database_driver: pdo_mysql database_host: 10.0.0.202 database_port: 3306 database_name: edusoho database_user: all database_password: '123456' 在200中也执行以上操作 edusoho存在缓存: [root@node2 ~]# rm -rf /code/edusoho/app/cache/* 6)域名解析 10.0.0.201 kod.oldboyedu.com blog.oldboyedu.com edu.oldboyedu.com
