Ubuntu9.10下 php(FastCGI PHP-FPM)+Nginx+.........

曾经终败给现在 2021-11-22 22:24 360阅读 0赞

ubuntu安装部分省略N.M.P  
下面开始安装编译安装php nginx等所需要包（有的是在ubuntu的源里有的是自己下载源代码编译安装）  
一、安装build-essential(包括gcc c++(g++)等）、 autoconf、 automake、 m4  
apt-get install build-essential autoconf automake  
二、安装支持包  
1、安装libjpeg libjpeg-devel  
apt-get install libjpeg62 libjpeg62-dev  
2、安装libpng libpng-devel  
apt-get install libpng12-0 libpng12-dev  
3、安装 freetype-devel  
apt-get install libfreetype6-dev libfreetype6 freetype2-demos  
4、安装libxml2  
apt-get install libxml2 libxml2-dev libxml++2.6-2 libxml++2.6-dev  
5、安装zlib zlib-devel  
apt-get zlib1g zlib1g-dev zlib1g-dbg  
6、安装glib2 glib2-devel  
apt-get install libglib2.0-0 libglib2.0-dev  
7、安装bzip2 bzip2-devel  
apt-get bzip2 libbz2-dev  
8、安装ncurses ncurses-devel  
apt-get install libncurses5 libncurses5-dev  
9、安装curl curl-devel  
apt-get install curl libcurl3 libcurl4-dev libcurl4-openssl-dev  
10、安装e2fsprogs e2fsprogs-devel  
apt-get install e2fsprogs uuid-dev  
11、安装krb5 krb5-devel  
apt-get install libkrb5-3 libkrb5-dev  
12、安装libidn libidn-devel  
apt-get install libidn11 libidn11-dev  
13、安装openssl openssl-devel  
apt-get install openssl libssl-dev  
14、装openldap openldap-devel  
apt-get libldap-2.4-2 libldap2-dev  
15、libmcrypt libmcrypt-dev  
apt-get install libmcrypt4 libmcrypt-dev  
16、libltdl libltdl-dev  
apt-get install libltdl7 libltdl-dev  
17、libmhash libmhash-dev  
apt-get install libmhash2 libmhash-dev  
18、mcrypt  
apt-get install mcrypt  
19、gd2  
apt-get install libgd2-xpm

20、安装mysql

apt-get install mysql-server

21、安装sqlite libsqlite-dev

apt-get install sqlite libsqlite-dev

22、安装mysql-dev  
apt-get libmysqlclient libmysqlclient-dev libmysqlclient16 libmysqlclient16-dev  
23、libsasl2-dev  
apt-get install libsasl2-dev  
24、libticonv3 libticonv-dev

24、安装libiconv-1.13.1  
下载libiconv-1.13.1.tar.tar  
tar zxvf libiconv-1.13.1.tar.tar  
cd llibiconv-1.13.1  
./configure --prefix=/usr/local  
make  
make install  
25php的安装  
下载php源代码我用的是php5.3.1  
下载fpm-php源代码  
解压缩  
生成fpm的patch文件  
./generate-fpm-patch  
给php打fpm补丁  
进入php源码目录  
patch -p1 < ../fpm.patch  
打完补丁后运行  
./buildconf --force  
完了  
./configure --prefix=/usr/local/webserver/php --with-mysql --with-mysqli --with-mysql-sock --with-iconv-dir=/usr/local --with-

iconv-dir=/usr/local --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir --enable-xml --disable-rpath --

enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --with-curlwrappers --enable-mbregex

\--with-fpm --with-libevent --enable-mbstring --with-mcrypt --with-gd --enable-gd-native-ttf --with-openssl --with-mhash --

enable-pcntl --enable-sockets --with-ldap --with-ldap-sasl --with-xmlrpc --enable-zip --enable-soap --with-pear  
完了  
make ZEND\_EXTRA\_LIBS='-liconv'  
完了  
make test  
完了  
make install  
meke make test 时间都很长  
完成后  
cp php.ini-production /usr/local/webserver/php/lib/php.ini  
cd ../  
curl [http://pear.php.net/go-pear][http_pear.php.net_go-pear] | /usr/local/webserver/php/bin/php  
一路回车吧  
接下来安装php的扩展模块  
tar zxvf memcache-2.2.5.tgz  
cd memcache-2.2.5/  
/usr/local/webserver/php/bin/phpize  
./configure --with-php-config=/usr/local/webserver/php/bin/php-config  
make  
make install  
cd ../

tar jxvf eaccelerator-0.9.6-rc1.tar.bz2  
cd eaccelerator-0.9.6-rc1  
/usr/local/webserver/php/bin/phpize  
./configure --enable-eaccelerator=shared --with-php-config=/usr/local/webserver/php/bin/php-config  
make  
make install  
cd ../

tar zxvf PDO\_MYSQL-1.0.2.tgz  
cd PDO\_MYSQL-1.0.2/  
/usr/local/webserver/php/bin/phpize  
./configure --with-php-config=/usr/local/webserver/php/bin/php-config --with-pdo-mysql=/usr/local/webserver/mysql  
make  
make install  
cd ../

apt-get install imagemagick  
(特别注意要安装dev的，不然下面的那个不能编译的)

tar zxvf imagick-2.3.0.tgz  
cd imagick-2.3.0/  
/usr/local/webserver/php/bin/phpize  
./configure --with-php-config=/usr/local/webserver/php/bin/php-config  
make  
make install  
cd ../

修改php.ini文件  
手工修改：查找/usr/local/webserver/php/lib/php.ini中的extension\_dir = "./"  
修改为extension\_dir = "/usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-20090613/"  
并在此行后增加以下几行，然后保存：  
extension = "memcache.so"  
extension = "pdo\_mysql.so"  
extension = "imagick.so"  
设置下时区date.tiemzone="PRC"  
配置eAccelerator加速PHP(据说比zend好用)  
mkdir -p /usr/local/webserver/eaccelerator\_cache  
vi /usr/local/webserver/php/lib/php.ini  
按shift+g键跳到配置文件的最末尾，加上以下配置信息  
\[eaccelerator\]  
zend\_extension="/usr/local/webserver/php/lib/php/extensions/no-debug-non-zts-20090613/eaccelerator.so"  
eaccelerator.shm\_size="64"  
eaccelerator.cache\_dir="/usr/local/webserver/eaccelerator\_cache"  
eaccelerator.enable="1"  
eaccelerator.optimizer="1"  
eaccelerator.check\_mtime="1"  
eaccelerator.debug="0"  
eaccelerator.filter=""  
eaccelerator.shm\_max="0"  
eaccelerator.shm\_ttl="3600"  
eaccelerator.shm\_prune\_period="3600"  
eaccelerator.shm\_only="0"  
eaccelerator.compress="1"  
eaccelerator.compress\_level="9"  
创建www用户和组，以及供虚拟主机使用的目录  
groupadd www  
useradd -g www www  
mkdir -p /usr/local/www/www  
chmod +w /usr/local/www/www  
chown -R www:www /usr/local/www/www  
配置php-fpm的配置文件（位置在/etc/php-fpm.conf)  
一下是我的配置文件，注意的地只有几个pid文件的位置 这个文件在php-fpm的控制脚本里面要用，不然没办法停止php-fpm  
还有连接日志、错误日志的位置要建立好相应的目录 并且给相应权限 chmod +w chown -R www:www  
还有就是几个数字 都是英文的而且有解释自己根据自己的情况来吧！这个需要按照实际情况调整的，服务器配置不可能一下子就ok的，要综合各种情况和

环境来设置这些性能参数

<?xml version="1.0" ?>  
<configuration>

All relative paths in this config are relative to php's install prefix

Pid file  
<value name="pid\_file">/var/run/php-fpm.pid</value>

Error log file  
<value name="error\_log">/usr/local/webserver/php/logs/php-fpm.log</value>

Log level  
<value name="log\_level">notice</value>

When this amount of php processes exited with SIGSEGV or SIGBUS ...  
<value name="emergency\_restart\_threshold">10</value>

... in a less than this interval of time, a graceful restart will be initiated.  
Useful to work around accidental curruptions in accelerator's shared memory.  
<value name="emergency\_restart\_interval">1m</value>

Time limit on waiting child's reaction on signals from master  
<value name="process\_control\_timeout">5s</value>

Set to 'no' to debug fpm  
<value name="daemonize">yes</value>

</section>

Name of pool. Used in logs and stats.  
<value name="name">default</value>

Address to accept fastcgi requests on.  
Valid syntax is 'ip.ad.re.ss:port' or just 'port' or '/path/to/unix/socket'  
<value name="listen\_address">127.0.0.1:9000</value>

Set listen(2) backlog  
<value name="backlog">-1</value>

Set permissions for unix socket, if one used.  
In Linux read/write permissions must be set in order to allow connections from web server.  
Many BSD-derrived systems allow connections regardless of permissions.  
<value name="owner"></value>  
<value name="group"></value>  
<value name="mode">0666</value>  
</value>

Additional php.ini defines, specific to this pool of workers.  
<value name="php\_defines">  
<value name="sendmail\_path">/usr/sbin/sendmail -t -i</value>  
<value name="display\_errors">1</value>  
</value>

Unix user of processes  
<value name="user">www</value>

Unix group of processes  
<value name="group">www</value>

Process manager settings  
<value name="pm">

Sets style of controling worker process count.  
Valid values are 'static' and 'apache-like'  
<value name="style">static</value>

Sets the limit on the number of simultaneous requests that will be served.  
Equivalent to Apache MaxClients directive.  
Equivalent to PHP\_FCGI\_CHILDREN environment in original php.fcgi  
Used with any pm\_style.  
<value name="max\_children">128</value>

Settings group for 'apache-like' pm style  
<value name="apache\_like">

Sets the number of server processes created on startup.  
Used only when 'apache-like' pm\_style is selected  
<value name="StartServers">20</value>

Sets the desired minimum number of idle server processes.  
Used only when 'apache-like' pm\_style is selected  
<value name="MinSpareServers">5</value>

Sets the desired maximum number of idle server processes.  
Used only when 'apache-like' pm\_style is selected  
<value name="MaxSpareServers">35</value>

</value>

The timeout (in seconds) for serving a single request after which the worker process will be terminated  
Should be used when 'max\_execution\_time' ini option does not stop script execution for some reason  
'0s' means 'off'  
<value name="request\_terminate\_timeout">0s</value>

The timeout (in seconds) for serving of single request after which a php backtrace will be dumped to slow.log file  
'0s' means 'off'  
<value name="request\_slowlog\_timeout">0s</value>

The log file for slow requests  
<value name="slowlog">logs/slow.log</value>

Set open file desc rlimit  
<value name="rlimit\_files">65535</value>

Set max core size rlimit  
<value name="rlimit\_core">0</value>

Chroot to this directory at the start, absolute path  
<value name="chroot"></value>

Chdir to this directory at the start, absolute path  
<value name="chdir"></value>

Redirect workers' stdout and stderr into main error log.  
If not set, they will be redirected to /dev/null, according to FastCGI specs  
<value name="catch\_workers\_output">yes</value>

How much requests each process should execute before respawn.  
Useful to work around memory leaks in 3rd party libraries.  
For endless request processing please specify 0  
Equivalent to PHP\_FCGI\_MAX\_REQUESTS  
<value name="max\_requests">102400</value>

Comma separated list of ipv4 addresses of FastCGI clients that allowed to connect.  
Equivalent to FCGI\_WEB\_SERVER\_ADDRS environment in original php.fcgi (5.2.2+)  
Makes sense only with AF\_INET listening socket.  
<value name="allowed\_clients">127.0.0.1</value>

Pass environment variables like LD\_LIBRARY\_PATH  
All $VARIABLEs are taken from current environment  
<value name="environment">  
<value name="HOSTNAME">$HOSTNAME</value>  
<value name="PATH">/usr/local/bin:/usr/bin:/bin</value>  
<value name="TMP">/tmp</value>  
<value name="TMPDIR">/tmp</value>  
<value name="TEMP">/tmp</value>  
<value name="OSTYPE">$OSTYPE</value>  
<value name="MACHTYPE">$MACHTYPE</value>  
<value name="MALLOC\_CHECK\_">2</value>  
</value>

</section>

</workers>

</configuration>

启动下php-fpm看  
ulimit -SHn 65535  
service php-fpm start (安装的时候自己会生成一个启动脚本在inti.d下)  
ulimit -SHn 65535必须和配置文件里相对应否则会产生错误，可以看日志文件就明白了。  
如果没有错误提示恭喜，完成了，如果有错误按照提示解决

主要的一起错误就shmmax的值，在下面优化内核参数里面有的。  
你还可以用netstat -nltp | grep php-fpm 确认下，监听的端口是9000  
php到此结束  
接下来是nginx  
下载nginx  
我用的是0.8.28  
安装前要先安装Nginx所需的pcre库  
tar zxvf pcre-8.00.tar.gz  
cd pcre-8.00/  
./configure --enable-utf8  
make  
make install

注意看下产生的lib的位置，如果nginx启动出错要ln -s 到相应目录

ln -s /usr/local/lib/libpcre.so.0 /usr/lib/libpcre.so.0

tar zxvf nginx-0.8.28.tar.gz  
cd nginx-0.8.28/  
./configure --user=www --group=www --prefix=/usr/local/webserver/nginx --http-client-body-temp-

path=/var/cache/nginx/client\_body\_temp --with-select\_module --with-poll\_module --with-http\_sub\_module --with-

http\_stub\_status\_module --with-http\_gzip\_static\_module --with-http\_dav\_module --with-http\_flv\_module --with-

http\_secure\_link\_module  
make  
make install

安装完成后  
修改nginx的配置文件，不得不说的是nginx的配置文件看着真是舒服（/usr/local/webserver/nginx/conf/nginx.conf)  
我的配置文件如下 (一个网站 [www.cfsyzx.cn][] 一个用来查看nginx的状态 status.cfsyzx.cn)  
需要注意的是worker\_cpu\_affinity和你的cpu又关系的,另外连接日志，错误日志，pid文件路径要注意下。  
user www www;

worker\_processes 8;

worker\_cpu\_affinity 0001 0100 1000 0010 0001 0100 1000 0010;

error\_log /var/log/nginx/nginx\_error.log crit;

pid /usr/local/webserver/nginx/nginx.pid;

\#Specifies the value for maximum file descriptors that can be opened by this process.  
worker\_rlimit\_nofile 65535;

events  
\{  
use epoll;  
worker\_connections 65535;  
\}

http  
\{  
include mime.types;  
default\_type application/octet-stream;

\#charset gb2312;  
server\_names\_hash\_bucket\_size 128;  
client\_header\_buffer\_size 32k;  
large\_client\_header\_buffers 4 32k;  
client\_max\_body\_size 8m;  
sendfile on;  
tcp\_nopush on;

keepalive\_timeout 60;

tcp\_nodelay on;

fastcgi\_connect\_timeout 300;  
fastcgi\_send\_timeout 300;  
fastcgi\_read\_timeout 300;  
fastcgi\_buffer\_size 64k;  
fastcgi\_buffers 4 64k;  
fastcgi\_busy\_buffers\_size 128k;  
fastcgi\_temp\_file\_write\_size 128k;

gzip on;  
gzip\_min\_length 1k;  
gzip\_buffers 4 16k;  
gzip\_http\_version 1.0;  
gzip\_comp\_level 2;  
gzip\_types text/plain application/x-javascript text/css application/xml;  
gzip\_vary on;

\#limit\_zone crawler $binary\_remote\_addr 10m;

server  
\{  
listen 80;  
server\_name [www.cfsyzx.cn][];  
index index.html index.htm index.php;  
root /usr/local/www/www;

\#limit\_conn crawler 20;  
location ~ .\*\\.(php|php5)?$  
\{  
\#fastcgi\_pass unix:/tmp/php-cgi.sock;  
fastcgi\_pass 127.0.0.1:9000;  
fastcgi\_index index.php;  
include fcgi.conf;  
\}  
location ~ .\*\\.(gif|jpg|jpeg|png|bmp|swf)$  
\{  
expires 30d;  
\}

location ~ .\*\\.(js|css)?$  
\{  
expires 1h;  
\}

log\_format access '$remote\_addr - $remote\_user \[$time\_local\] "$request" '  
'$status $body\_bytes\_sent "$http\_referer" '  
'"$http\_user\_agent" $http\_x\_forwarded\_for';  
access\_log /var/log/nginx/access.log access;  
\}

server  
\{  
listen 80;  
server\_name status.cfsyzx.cn;

location / \{  
stub\_status on;  
access\_log off;  
\}  
\}  
\}  
根据配置文件的内容建立相应目录用来存放日志，注意设置权限 chmod +w chown -R www:www  
在/usr/local/webserver/nginx/conf/目录中创建fcgi.conf文件内容如下：  
fastcgi\_param GATEWAY\_INTERFACE CGI/1.1;  
fastcgi\_param SERVER\_SOFTWARE nginx;

fastcgi\_param QUERY\_STRING $query\_string;  
fastcgi\_param REQUEST\_METHOD $request\_method;  
fastcgi\_param CONTENT\_TYPE $content\_type;  
fastcgi\_param CONTENT\_LENGTH $content\_length;

fastcgi\_param SCRIPT\_FILENAME $document\_root$fastcgi\_script\_name;  
fastcgi\_param SCRIPT\_NAME $fastcgi\_script\_name;  
fastcgi\_param REQUEST\_URI $request\_uri;  
fastcgi\_param DOCUMENT\_URI $document\_uri;  
fastcgi\_param DOCUMENT\_ROOT $document\_root;  
fastcgi\_param SERVER\_PROTOCOL $server\_protocol;

fastcgi\_param REMOTE\_ADDR $remote\_addr;  
fastcgi\_param REMOTE\_PORT $remote\_port;  
fastcgi\_param SERVER\_ADDR $server\_addr;  
fastcgi\_param SERVER\_PORT $server\_port;  
fastcgi\_param SERVER\_NAME $server\_name;

\# PHP only, required if PHP was built with --enable-force-cgi-redirect  
fastcgi\_param REDIRECT\_STATUS 200;  
完成  
ulimit -SHn 65535  
service php-fpm start  
/usr/local/webserver/nginx/sbin/nginx  
在/usr/local/www/www 建立一个php文件  
<?php  
phpinfo();  
?>;  
好了完成了 看看你的php信息呵呵，漂亮吧，基本上全部都支持了！！！  
下来时优化linux内核参数  
vi /etc/sysctl.conf  
在末尾增加以下内容：

\# Add  
net.ipv4.tcp\_max\_syn\_backlog = 65536  
net.core.netdev\_max\_backlog = 32768  
net.core.somaxconn = 32768

net.core.wmem\_default = 8388608  
net.core.rmem\_default = 8388608  
net.core.rmem\_max = 16777216  
net.core.wmem\_max = 16777216

net.ipv4.tcp\_timestamps = 0  
net.ipv4.tcp\_synack\_retries = 2  
net.ipv4.tcp\_syn\_retries = 2

net.ipv4.tcp\_tw\_recycle = 1  
\#net.ipv4.tcp\_tw\_len = 1  
net.ipv4.tcp\_tw\_reuse = 1

net.ipv4.tcp\_mem = 94500000 915000000 927000000  
net.ipv4.tcp\_max\_orphans = 3276800

\#net.ipv4.tcp\_fin\_timeout = 30  
\#net.ipv4.tcp\_keepalive\_time = 120  
net.ipv4.ip\_local\_port\_range = 1024 65535

kernel.shmmax= 内存大小/2\*1024\*1024  
使配置立即生效：

/sbin/sysctl -p

下来就是教php和nginx自动启动  
需要安装一个软件包  
apt-get install sysv-rc-conf

编辑/etc/init.d/下的php-fpm  
注意几个文件路径，另外这个启动脚本有个bug ，在启动那里加上判断下 php-fpm是否已经启动如果已经启动，给出提示！

在 /etc/init.d/下建立nginx  
vi nginx  
内容如下：  
\#! /bin/sh

\#\#\# BEGIN INIT INFO  
\# Provides: php-fpm  
\# Required-Start: $all  
\# Required-Stop: $all  
\# Default-Start: 2 3 4 5  
\# Default-Stop: 0 1 6  
\# Short-Description: starts Nginx  
\# Description: starts the Nginx Process Manager daemon  
\#\#\# END INIT INFO

nginx\_BIN=/usr/local/webserver/nginx/sbin/nginx  
nginx\_CONF=/usr/local/webserver/nginx/conf/nginx.conf  
nginx\_PID=/usr/local/webserver/nginx/nginx.pid

nginx\_opts="-c $nginx\_CONF"

wait\_for\_pid () \{  
try=0

while test $try -lt 35 ; do

case "$1" in  
'created')  
if \[ -f "$2" \] ; then  
try=''  
break  
fi  
;;

'removed')  
if \[ ! -f "$2" \] ; then  
try=''  
break  
fi  
;;  
esac

echo -n .  
try=\`expr $try + 1\`  
sleep 1

done

case "$1" in  
start)  
if \[ -r $nginx\_PID \];then  
echo "nginx has been running... "  
exit 1  
fi

echo -n "Starting nginx "

ulimit -SHn 65535

$nginx\_BIN $nginx\_opts

if \[ "$?" != 0 \] ; then  
echo " failed"  
exit 1  
fi

wait\_for\_pid created $nginx\_PID

if \[ -n "$try" \] ; then  
echo " failed"  
exit 1  
else  
echo " done"  
fi  
;;

stop)  
echo -n "Gracefully shutting down nginx "

if \[ ! -r $nginx\_PID \] ; then  
echo "warning, no pid file found - nginx is not running ?"  
exit 1  
fi

kill -QUIT \`cat $nginx\_PID\`

wait\_for\_pid removed $nginx\_PID

if \[ -n "$try" \] ; then  
echo " failed.Try force-quit"  
exit 1  
else  
echo " done"  
fi  
;;

force-quit)  
echo -n "Terminating nginx "

if \[ ! -r $nginx\_PID \] ; then  
echo "warning, no pid file found - nginx is not running ?"  
exit 1  
fi

kill -TERM \`cat $nginx\_PID\`

wait\_for\_pid removed $nginx\_PID

if \[ -n "$try" \] ; then  
echo " failed"  
exit 1  
else  
echo " done"  
fi  
;;

restart)  
$0 stop  
$0 start  
;;

reload)

echo -n "Reload service nginx "

if \[ ! -r $nginx\_PID \] ; then  
echo "warning, no pid file found - nginx is not running ?"  
exit 1  
fi

kill -USR2 \`cat $nginx\_PID\`

echo " done"  
;;

\*)  
echo "Usage: $0 \{start|stop|force-quit|restart|reload\}"  
exit 1  
;;

esac

保存  
运行 sysv-rc-conf  
把php-fpm和nginx 的2 3 4 5 打钩q键退出！  
完成！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！！  
接下来是些零散的资料  
ps -ef | grep apache | grep -v grep | wc -l

第一项：查看所有进程信息

第二项：过滤获取apache进程

第三项：反选去除本身grep干扰项

第四项：统计行数  
==============================================  
Nginx保护目录的配置如下，目录密码保护文件是 dynamic/htpasswd

if (!-e $request\_filename) \{  
rewrite ^(.\*)$ /hbcms404.php last;  
\}

location ~ /(admin/.\*|phpMyAdmin\*|include/.\*|setup/.\*) \{  
location ~ \\.php$ \{  
fastcgi\_pass 127.0.0.1:9000;  
\}  
auth\_basic "Restricted";  
auth\_basic\_user\_file dynamic/htpasswd;  
\}

location ~ \\.php$ \{  
fastcgi\_pass 127.0.0.1:9000;  
\}

目录密码保护的配置，如果不加红色部分代码，php文件不会执行，会出现php文件下载的提示。

保护目录的配置，如果放在绿色代码后面，虽然会提示要输入密码，但是，不输入目录保护密码也会执行php并显示出来。

多次测试得到上面的结果，有些糊涂，记录一下，以便备查。

生成密码文件：

htpasswd -b -c htpasswd username password;  
===================================================  
Nginx身份验证  
nginxstatus做身份验证:  
\#cd /usr/local/nginx/conf  
\#mkdir htpasswd  
/usr/local/apache2/bin/htpasswd -c /usr/local/nginx/conf/htpasswd/zhang zhang \#添加用户名为zhang  
\#或者  
htpasswd -c /usr/local/nginx/conf/htpasswd/zhang zhang \#添加用户名为zhang  
New password: (此处输入你的密码)  
Re-type new password: (再次输入你的密码)  
Adding password for user  
配置nginx  
location ~ ^/(zhang)/ \{  
root /htdocs/count;  
auth\_basic "LT-COUNT-TongJi";  
auth\_basic\_user\_file /usr/local/nginx/conf/htpasswd/zhang;  
\}  
看看打开页面是否需要输入用户名和密码！  
======================================================  
worker\_processes指明了nginx要开启的进程数，据官方说法，一般开一个就够了，多开几个，可以减少机器io带来的影响。  
据实践表明，nginx的这个参数在一般情况下开4个或8个就可以了，再往上开的话优化不太大。据另一种说法是，nginx开启太多的进程，会影响主进程

调度，所以占用的cpu会增高，这个说法我个人没有证实，估计他们是开了一两百个进程来对比的吧。

worker\_processes配置的一些注意事项：

1、worker\_cpu\_affinity配置最好是能写上

我这里服务器多数是双核超线程，相当于4cpu，我一般开8进程，所以这个配置就是这样：

worker\_cpu\_affinity 0001 0100 1000 0010 0001 0100 1000 0010;

另，worker\_cpu\_affinity不是什么时候都能用的，我没有认真研究并罗列所有情况，只知道2.4内核的机器用不了，如果用不了的话，那么最好是加大

worker\_processes进程数，这样分配cpu就会平均一点啦，如果不平均只好多重启几下。

2、worker\_rlimit\_nofile配置要和系统的单进程打开文件数一致，千万不要再画蛇添足地除以worker\_processes。

我现在在linux 2.6内核下开启文件打开数为65535，worker\_rlimit\_nofile就相应应该填写65535。

这是因为nginx调度时分配请求到进程并不是那么的均衡，所以假如填写10240，总并发量达到3-4万时就有进程可能超过10240了，这时会返回502错

误。  
========================================================  
over

转载于:https://www.cnblogs.com/cnbluerain/archive/2011/08/16/2140056.html