搭建一个大型网站架构的实验环境(Nginx代理服务器篇)

搭建一个大型网站架构的实验环境(Nginx代理服务器篇)# Z# H% C0 Q+ J1 h" N3 x0 z9 y7 h  b
2007/12/28 16:38
七、Porxy服务器配置
Proxy服务器（192.168.10.20）主要是负责终端客户的接入，为两台Squid缓存服务器提供均衡负载。现在我们就开始吧！
服务器网络配置  f8 B% G3 Q0 m8 A4 W) T
# ee /etc/rc.conf+ D  b; H3 Q/ o, U: V$ Y& t
ifconfig_lnc0="inet 192.168.10.20 netmask 255.255.255.0"
defaultrouter="192.168.10.10"
hostname="proxy.rd.bj"  C4 A5 |; g$ C! }, f
# ee /etc/hosts
192.168.10.20 proxy.rd.bj
# ee /etc/resolv.conf
nameserver 192.168.10.40
网络环境配置好后，我们开始安装Nginx，在那里，告诉我
# whereis nginx6 Z! m5 u" b6 X
nginx: /usr/ports/www/nginx
# make config  m2 L) s5 ^. Q- l# _3 F

: A! r! I6 {& X, q
0 G! M0 t6 s+ E7 q. n
# make showconfig #我的配置选项
===> The following configuration options are available for nginx-0.5.34:9 J/ ~9 k8 K' a
   DEBUG=off "Enable nginx debugging"
   HTTP_MODULE=on "Enable HTTP module"
   HTTP_ADDITION_MODULE=on "Enable http_addition module"2 v% `# v5 o/ x( `# Z
   HTTP_DAV_MODULE=on "Enable http_webdav module"/ G2 \& `/ o  ?
   HTTP_FLV_MODULE=on "Enable http_flv module"1 G+ W2 g* |2 D+ u' D( ]2 O
   HTTP_PERL_MODULE=on "Enable http_perl module"  e0 U4 j) J- ?) c  u! u+ r" S
   HTTP_REALIP_MODULE=on "Enable http_realip module"( _) M. |9 O0 p+ r* p; I: l
   HTTP_REWRITE_MODULE=on "Enable http_rewrite module"
   HTTP_SSL_MODULE=on "Enable http_ssl module"& D- J! z5 \2 `) A7 u
   HTTP_STATUS_MODULE=on "Enable http_stub_status module"
   HTTP_SUB_MODULE=on "Enable http_sub module"- S8 j$ k0 y+ l( j! O
   MAIL_MODULE=off "Enable IMAP4/POP3/SMTP proxy module"
   MAIL_IMAP_MODULE=off "Enable IMAP4 proxy module"
   MAIL_POP3_MODULE=off "Enable POP3 proxy module"
   MAIL_SMTP_MODULE=off "Enable SMTP proxy module"
   MAIL_SSL_MODULE=off "Enable mail_ssl module"  Q3 c8 ^7 Q- U' y7 t* ]
   WWW=on "Enable html sample files"
===> Use 'make config' to modify these settings
# make install clean
又开始等待了 ... NNN ..." o  Y; a# m2 o" j4 @2 g& G2 r
又看看了看播客，终于完了，现在开始配置吧！
# cd /usr/local/etc/nginx* A, \) C9 ~# H, c* X* _
# ee nginx.conf #更改配置文件+ B$ O# l6 Y$ U% n
我更改后的配置文件如下：( f$ q# f; t3 q9 H: J
user www www;8 l5 X. k2 f9 ?
worker_processes 1;5 P' ^! f/ q  o' x$ ^
error_log /var/log/nginx_error.log;
pid       /var/run/nginx.pid;
events {
use kqueue;
worker_connections 65535;# {: V4 l7 e6 n) g2 J
}& Q0 T3 y3 s' |+ z8 W
http {
include    mime.types;! i: W4 k. s4 d
default_type application/octet-stream;% g/ T- a4 \( j' B/ s
log_format main '$remote_addr - $remote_user [$time_local] $request '% m! I; r' I9 x8 T
                  '"$status" $body_bytes_sent "$http_referer" '- k2 K- ?1 ^* k' a. L% T
                  '"$http_user_agent" "$http_x_forwarded_for"';& V. V. G+ T3 m/ p' Y4 N
access_log /var/log/nginx_access.log main;
client_header_timeout 3m;
client_body_timeout 3m;
send_timeout          3m;5 O2 N4 ~0 l1 V: Y: h
sendfile    on;
tcp_nopush    on;
tcp_nodelay on;
keepalive_timeout 65;# I- D" `7 h* q! N8 D( X7 B5 U
client_header_buffer_size 1k;4 v) Q" R( G2 E! i3 c8 a4 x
large_client_header_buffers 4 4k;
output_buffers 1 32k;& P7 o% v: `3 ~9 d
postpone_output 1460;
gzip on;2 O9 V0 k" Z6 j0 w( v
gzip_min_length 1100;
gzip_buffers    4 8k;9 l5 ]. C2 W% C5 s# m6 D
gzip_types    text/plain;( T7 H$ L6 w! ^# _/ i  B
upstream mysvr {
      server 192.168.10.30:3128 weight=5;
      server 192.168.10.31:3128 weight=5;
}* L% ^) |& ?2 E  t$ t
server {
      listen    80;. H8 Z2 ~, t2 A7 V& f7 L
      server_name www.rd.bj;
      charset gbk;5 F) p+ ?* a2 n) ]; X8 o
      access_log /var/log/nginx_host.access.log main;
      location / {( ^# W  K5 V; f4 }4 ^. d
         proxy_pass    http://mysvr/;3 V* p4 L3 g" O$ M# ~
         proxy_redirect          off;
         proxy_set_header          Host $host;% E! I1 W9 K6 a3 d: N* Z% y; l
         proxy_set_header          X-Real-IP $remote_addr;
         proxy_set_header          X-Forwarded-For $proxy_add_x_forwarded_for;2 F7 ]& K: y. Q+ u
         client_max_body_size    10m;: v$ `8 `& }: S; r9 O
         client_body_buffer_size 128k;
         proxy_connect_timeout    90;2 d+ `% J; B2 ^; I1 G
         proxy_send_timeout       90;
         proxy_read_timeout       90;
         proxy_buffer_size       4k;
         proxy_buffers             4 32k;8 V# n% I7 h9 }9 x, P, H  e, Z1 u
         proxy_busy_buffers_size 64k;5 @) \1 L, D$ C+ k( k
         proxy_temp_file_write_size 64k;
      }
      location /nginx {1 h; J4 O- w0 W' S2 x3 [
         stub_status          on;
         access_log             on;6 ?, ~  v, A6 o# ?+ r. I
         auth_basic             "NginxStatus";
         auth_basic_user_file /usr/local/etc/nginx/htpasswd;
      }* a: A  v2 `1 B& p* f+ ^  Z
}
}
保存配置文件退出后，现在对刚才设置的文件进行验证。
# rehash
# nginx -t
2007/12/27 15:42:52 [info] 25243#0: the configuration file /usr/local/etc/nginx/nginx.conf syntax is ok4 u& V; H' m* }0 p3 L/ b) w
2007/12/27 15:42:52 [info] 25243#0: the configuration file /usr/local/etc/nginx/nginx.conf was tested successfully  q3 I' \+ [  R/ B; k7 G' E
Very good，没问题了，我们在配置文件中还设置了查看Nginx的状态信息，所以，现在我们还必需生成一个htppasswd文件，这时候我们得用到Apache的htpasswd 工具了，我们这台代理服务器上没有Apache，现在只能依靠web服务器的了，去那生成一个复制过来。
生成htppasswd文件的方法：
# htpasswd -c /tmp/htpassswd nginx
输入两次密码就完成了，然后把生成好的htpasswd文件拷贝到proxy的机器的/usr/local/etc/nginx目录下就行了。
如何在两台机器之间拷贝文件呢？scp出场了 ...
# scp /tmp/htpassswd root@192.168.10.20:/usr/local/etc/nginx
好了，现在万事具备了，现在启动她吧！！！
# nginx
# ps -aux | grep nginx$ B- n  @- @5 C8 Z% q% B: f9 D& G% n
root 804 0.0 3.4 4908 4288 ?? Ss 4:49PM 0:00.00 nginx: master process nginx (nginx)
www    805 0.0 13.8 18004 17404 ?? S    4:49PM 0:00.02 nginx: worker process (nginx)7 V3 _" K! ?% r( O
root 807 0.0 0.3 536 416 p0 RL+ 4:49PM 0:00.00 grep nginx1 j8 L2 m; I- }% M
现在用浏览器查看一下Nginx的状态，1 j/ R# V" V' `
http://192.168.10.20/nginx$ C3 H; ?* z4 l" H
输入用户名和密码进入，如图：

4 y+ ]3 J) U; t/ F$ a/ w+ B0 Z

好了，Nginx也配置完成了。

收藏分享评分

做一个快乐的!，建一个漂亮的"。

回复引用

订阅 TOP

返回列表