Detailed configuration of the Linux-nginx+tomcat

Everything comes from work, talk about demand first.

To make the test environment mimic the online environment as much as possible, four desktops build a test environment. Nginx + tomcat + MySQL + red5pro (live video).

Nginx is used as an agent to access the backend tomcat via Nginx.

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/85/DD/wKiom1eslQ_xv4OMAABGy-Go-zs595.jpg-wh_500x0-wm_3 -wmp_4-s_2984353183.jpg "title=" qq20160811230803.jpg "alt=" Wkiom1eslq_xv4omaabgy-go-zs595.jpg-wh_50 "/>

Nginx server configuration file in simple configuration (nginx.conf) only need to copy the server section, modify the Listen port and the path behind the Proxy_pass. If you do not load balance, you can add links (such as http://192.168.1.2:8080). If you do load balancing, add the upstream name to the back of the line.

The Tomcat server is equipped with two tomcat and needs to modify two tomcat ports (each port, 8005 8080 8009 8443 need to be changed, not the same).

The basic idea is this, detailed configuration analysis is as follows:

Nginx configuration file Detailed (nginx.conf)

#定义Nginx运行的用户和用户组

user www www;

#nginx进程数，建议设置为等于CPU总核心数。
worker_processes 8;

#全局错误日志定义类型，[ debug | info | notice | warn | error | crit ]
error_log /var/log/nginx/error.log info;

#进程文件
pid /var/run/nginx.pid;

#一个nginx进程打开的最多文件描述符数目，理论值应该是最多打开文件数（系统的值ulimit -n）与nginx进程数相除，但是nginx分配请求并不均匀，所以建议与ulimit -n的值保持一致。
worker_rlimit_nofile 65535;

#工作模式与连接数上限
Events
{
#参考事件模型, use [kqueue | rtsig | epoll |/dev/poll | select | poll]; The Epoll model is a high-performance network I/O model in the Linux version 2.6 kernel, and if it runs on FreeBSD, it uses the Kqueue model.
Use Epoll;
#单个进程最大连接数 (maximum number of connections = number of connections * processes)
Worker_connections 65535;
}

#设定http服务器
http
{
Include Mime.types; #文件扩展名与文件类型映射表
Default_type Application/octet-stream; #默认文件类型
#charset Utf-8; #默认编码
Server_names_hash_bucket_size 128; #服务器名字的hash表大小
Client_header_buffer_size 32k; #上传文件大小限制
Large_client_header_buffers 4 64k; #设定请求缓
Client_max_body_size 8m; #设定请求缓
Sendfile on; #开启高效文件传输模式, the sendfile instruction specifies whether Nginx calls the Sendfile function to output the file, and for normal applications to be set to ON, if it is used for downloading applications such as disk IO heavy load applications, can be off to balance disk and network I/O processing speed, Reduce the load on the system. Note: If the picture does not appear normal, change this to off.
AutoIndex on; #开启目录列表访问, the appropriate download server, the default shutdown.
Tcp_nopush on; #防止网络阻塞
Tcp_nodelay on; #防止网络阻塞
Keepalive_timeout 120; #长连接超时时间, Unit is seconds

#FastCGI相关参数是为了改善网站的性能：减少资源占用，提高访问速度。下面参数看字面意思都能理解。
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k;

#gzip模块设置
gzip on; #开启gzip压缩输出
gzip_min_ Length 1k; #最小压缩文件大小
gzip_buffers 4 16k; #压缩缓冲区
gzip_ Http_version 1.0; #压缩版本 (default 1.1, front End If squid2.5 please use 1.0)
gzip_comp_level 2; #压缩等级
gzip_types text/plain application/x-javascript text/css application/xml;
#压缩类型, the default is already included text/html, so there is no need to write, write it will not be a problem, but there will be a warn.
gzip_vary on;
#limit_zone crawler $binary _remote_addr 10m; #开启限制IP连接数的时候需要使用

upstream blog.ha97.com {
#upstream的负载均衡，weight是权重，可以根据机器配置定义权重。weigth参数表示权值，权值越高被分配到的几率越大。
server 192.168.80.121:80 weight=3;
server 192.168.80.122:80 weight=2;
server 192.168.80.123:80 weight=3;
}

#虚拟主机的配置
Server
{
#监听端口
Listen 80;
#域名可以有多个, separated by a space
server_name www.ha97.com ha97.com;
Index index.html index.htm index.php;
root/data/www/ha97;
Location ~. *\. (PHP|PHP5)? $
{
Fastcgi_pass 127.0.0.1:9000;
Fastcgi_index index.php;
Include fastcgi.conf;
}
#图片缓存时间设置
Location ~. *\. (gif|jpg|jpeg|png|bmp|swf) $
{
Expires 10d;
}
#JS和CSS缓存时间设置
Location ~. *\. (JS|CSS)? $
{
Expires 1h;
}
#日志格式设定
Log_format access ' $remote _addr-$remote _user [$time _local] "$request"
' $status $body _bytes_sent ' $http _referer '
' "$http _user_agent" $http _x_forwarded_for ';
#定义本虚拟主机的访问日志
Access_log/var/log/nginx/ha97access.log access;

#对 "/" Enable reverse Proxy
Location/{
Proxy_pass http://127.0.0.1:88;
Proxy_redirect off;
Proxy_set_header X-real-ip $remote _addr;
#后端的Web服务器可以通过X-forwarded-for Get the user real IP
Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
#以下是一些反向代理的配置, optional.
Proxy_set_header Host $host;
Client_max_body_size 10m; #允许客户端请求的最大单文件字节数
Client_body_buffer_size 128k; #缓冲区代理缓冲用户端请求的最大字节数,
Proxy_connect_timeout 90; #nginx跟后端服务器连接超时时间 (proxy connection timed out)
Proxy_send_timeout 90; #后端服务器数据回传时间 (proxy send timeout)
Proxy_read_timeout 90; #连接成功后, back-end server response time (proxy receive timeout)
Proxy_buffer_size 4k; #设置代理服务器 (nginx) buffer size for saving user header information
Proxy_buffers 4 32k; #proxy_buffers缓冲区, the average Web page is set below 32k
Proxy_busy_buffers_size 64k; #高负荷下缓冲大小 (proxy_buffers*2)
Proxy_temp_file_write_size 64k;
#设定缓存文件夹大小, greater than this value, will be passed from the upstream server
}

#设定查看Nginx状态的地址
location /NginxStatus {
stub_status on;
access_log on;
auth_basic "NginxStatus";
auth_basic_user_file conf/htpasswd;
#htpasswd文件的内容可以用apache提供的htpasswd工具来产生。
}

#本地动静分离反向代理配置
#所有jsp的页面均交由tomcat或resin处理
Location ~. (JSP|JSPX|DO)? $ {
Proxy_set_header Host $host;
Proxy_set_header X-real-ip $remote _addr;
Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
Proxy_pass http://127.0.0.1:8080;
}
#所有静态文件由nginx直接读取不经过tomcat或resin
Location ~. *. (HTM|HTML|GIF|JPG|JPEG|PNG|BMP|SWF|IOC|RAR|ZIP|TXT|FLV|MID|DOC|PPT|PDF|XLS|MP3|WMA) $
{Expires 15d;}
Location ~. *. (JS|CSS)? $
{Expires 1h;}
}
}

Detailed configuration of the Linux-nginx+tomcat