利用include功能优化nginx的配置文件
- [root@lnmp conf]# cat nginx.conf
- worker_processes 1;
- events {
- worker_connections 1024;
- }
- http {
- include mime.types;
- default_type application/octet-stream;
- sendfile on;
- keepalive_timeout 65;
- #nginx vhosts config
- include extra/www.conf;
- include extra/bbs.conf;
- include extra/blog.conf;
- }
写配置文件
- [root@lnmp conf]# mkdir extra
- [root@lnmp conf]# sed -n '18,25p' nginx.conf.base-name >extra/bbs.conf
- [root@lnmp conf]# cat extra/bbs.conf
- server {
- listen 80;
- server_name bbs.etiantian.org;
- location / {
- root html/bbs;
- index index.html index.htm;
- }
- }
- [root@lnmp conf]# sed -n '26,33p' nginx.conf.base-name >extra/blog.conf
- [root@lnmp conf]# cat extra/blog.conf
- server {
- listen 80;
- server_name blog.etiantian.org;
- location / {
- root html/blog;
- index index.html index.htm;
- }
- }
- [root@lnmp conf]# cat extra/www.conf
- server {
- listen 80;
- server_name www.etiantian.org;
- location / {
- root html/www;
- index index.html index.htm;
- }
- }
重启服务
- [root@lnmp conf]# /application/nginx/sbin/nginx -t
- nginx: the configuration file /application/nginx-1.6.3/conf/nginx.conf syntax is ok
- nginx: configuration file /application/nginx-1.6.3/conf/nginx.conf test is successful
- [root@lnmp conf]# /application/nginx/sbin/nginx -s reload
测试
- [root@lnmp conf]# curl www.etiantian.org
- www.etiantian.org
- [root@lnmp conf]# curl bbs.etiantian.org
- bbs.etiantian.org
- [root@lnmp conf]# curl blog.etiantian.org
- blog.etiantian.org
nginx虚拟主机别名的配置
- [root@lnmp conf]# cat extra/www.conf
- server {
- listen 80;
- server_name www.etiantian.org etiantian.org;
- location / {
- root html/www;
- index index.html index.htm;
- }
- }
- [root@lnmp conf]# cat /etc/hosts
- 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
- ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
- 192.168.31.132 server
- 192.168.31.133 lamp
- 192.168.31.134 lnmp www.etiantian.org bbs.etiantian.org blog.etiantian.org etiantian.org
- 192.168.31.136 backup
- [root@lnmp conf]# /application/nginx/sbin/nginx -t
- nginx: the configuration file /application/nginx-1.6.3/conf/nginx.conf syntax is ok
- nginx: configuration file /application/nginx-1.6.3/conf/nginx.conf test is successful
- [root@lnmp conf]# /application/nginx/sbin/nginx -s reload
- [root@lnmp conf]# curl etiantian.org
- www.etiantian.org
- [root@lnmp conf]# curl www.etiantian.org
- www.etiantian.org
启动报错:
- [root@lnmp ~]# /application/nginx/sbin/nginx -s reload
- nginx: [error] invalid PID number "" in "/application/nginx-1.6.3/logs/nginx.pid"
解决办法:
- [root@lnmp ~]# /application/nginx/sbin/nginx -c /application/nginx/conf/nginx.conf
- [root@lnmp ~]# /application/nginx/sbin/nginx -s reload
nginx状态信息配置
- [root@lnmp extra]# cat status.conf
- #status
- server{
- listen 80;
- server_name status.etiantian.org;
- location / {
- stub_status on;
- access_log off;
- }
- }
添加包含
- include extra/status.conf;
重启nginx,浏览器访问
第一个server表示nginx启动到现在共处理了多少个连接。
第二个accepts表示nginx启动到现在共创建了多少次握手,请求丢失次数=(握手次数-连接次数)。
第三个handled request表示总共处理了多少次请求。
Reading:nginx读取到客户端的header信息数。
writing:nginx返回给客户端的header信息素。
waiting:nginx已经处理完正在等候下一次请求指令的驻留连接,开启keep-alive的情况下,这个值等于active-(reading+writing)。
nginx错误日志
常见的错误日志级别有[debug|info|notice|warn|error|crit|alert|emerg],级别越高记录的信息越少,生产场景一般是warm|error|crit这三个级别之一,注意不要配置info等级较低的级别,会带来磁盘I/O消耗。
error_log的默认值为:error_log logs/error.log error
- [root@lnmp conf]# cat nginx.conf
- worker_processes 1;
- error_log logs/error.log error;
- events {
- worker_connections 1024;
- }
- http {
- include mime.types;
- default_type application/octet-stream;
- sendfile on;
- keepalive_timeout 65;
- #nginx vhosts config
- include extra/www.conf;
- include extra/bbs.conf;
- include extra/blog.conf;
- }
可以放置的标签段为:main,http,server,location。
访问日志
log_format:用来定义记录日志的格式(可以定义多种日志格式,取不同名字即可)。
access_log:用来指定日志文件的路径及使用的何种日志格式记录日志。
- [root@lnmp conf]# cat nginx.conf
- worker_processes 1;
- error_log logs/error.log error;
- events {
- worker_connections 1024;
- }
- http {
- include mime.types;
- default_type application/octet-stream;
- sendfile on;
- keepalive_timeout 65;
- log_format main '$remote_addr - $remote_user [$time_local] "$request" '
- '$status $body_bytes_sent "$http_referer" '
- '"$http_user_agent" "$http_x_forwarded_for"';
- #nginx vhosts config
- include extra/www.conf;
- include extra/bbs.conf;
- include extra/blog.conf;
- }
$remote_addr:记录访问网站的客户端地址。
$http_x_forwarded_for:当前端有代理服务器时,设置web节点记录客户端地址的配置,此参数生效的前提是代理服务器上也要进行相关的x_forwarded_for设置。
$remote_user:远程客户端用户名称。
$time_local:记录访问时间与时区。
$request:用户的http请求起始行信息。
$status:http状态码,记录请求返回的状态,例如:200、404、301等。
$body_bytes_sent:服务器发送给客户端的响应body字节数。
$http_referer:记录此次请求是从哪个链接访问过来的,可以根据referer进行防盗链设置。
$http_user_agent:记录客户端访问信息,例如:浏览器、手机客户端等。
access_log off;这里的off表示不记录访问日志。
默认配置:access_log logs/access.log combined;
放置位置:http,server,location,if in location,limit_except。
- [root@lnmp conf]# cat extra/www.conf
- server {
- listen 80;
- server_name www.etiantian.org etiantian.org;
- location / {
- root html/www;
- index index.html index.htm;
- }
- access_log logs/access_www.log main;
- }
重启nginx
- [root@lnmp conf]# /application/nginx/sbin/nginx -t
- nginx: the configuration file /application/nginx-1.6.3/conf/nginx.conf syntax is ok
- nginx: configuration file /application/nginx-1.6.3/conf/nginx.conf test is successful
- [root@lnmp conf]# /application/nginx/sbin/nginx -s reload
- [root@lnmp conf]# tail -f ../logs/access_www.log #访问日志
- 192.168.31.1 - - [16/Feb/2017:23:35:38 +0800] "GET / HTTP/1.1" 200 18 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" "-"
- 192.168.31.1 - - [16/Feb/2017:23:35:38 +0800] "GET /favicon.ico HTTP/1.1" 404 570 "http://www.etiantian.org/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" "-"
日志轮询
- [root@lnmp scripts]# cat cut_nginx_log.sh
- #!/bin/sh
- Dateformat=`date +%Y%m%d`
- Basedir="/application/nginx"
- Nginxlogdir="$Basedir/logs"
- Logname="access_www"
- [ -d $Nginxlogdir ] && cd $Nginxlogdir||exit 1
- [ -f ${Logname}.log ]||exit 1
- /bin/mv ${Logname}.log ${Dateformat}_${Logname}.log
- $Basedir/sbin/nginx -s reload
执行
- [root@lnmp scripts]# sh cut_nginx_log.sh
- [root@lnmp scripts]# ll /application/nginx/logs/
- total 24
- -rw-r--r--. 1 root root 978 Feb 16 23:35 20170216_access_www.log
设置定时任务
- #nginx log cut
- 00 00 * * * /bin/sh /server/scripts/cut_nginx_log.sh >/dev/null 2>&1
nginx常用日志收集及分析工具有rsyslog、awstats、flume、ELK、storm等。
rewrite
rewrite指令语法
指令语法:rewrite regex replacement [flag];
默认值:none
应用位置:server,location,if。
- [root@lnmp conf]# cat extra/www.conf
- server {
- listen 80;
- server_name etiantian.org;
- rewrite ^/(.*) http://www.etiantian.org/$1 permanent;
- }
- server {
- listen 80;
- server_name www.etiantian.org;
- location / {
- root html/www;
- index index.html index.htm;
- }
- access_log logs/access_www.log main;
- }
创建oldboy.html然后进行访问
- [root@lnmp www]# curl etiantian.org/oldboy.html -I
- HTTP/1.1 301 Moved Permanently
- Server: nginx/1.6.3
- Date: Thu, 16 Feb 2017 16:30:47 GMT
- Content-Type: text/html
- Content-Length: 184
- Connection: keep-alive
- Location: http://www.etiantian.org/oldboy.html
rewrite指令最后一项参数flag标记说明
last:本条规则匹配完成后,继续向下匹配新的location URI规则。
break:本条规则匹配完成即终止。不再匹配后面的任何规则。
redirect:返回302临时重定向,浏览器地址栏会显示跳转后的URL地址。
permanent:返回301永久重定向,浏览器地址栏会显示后的URL地址。