优化LNMP架构采用“Website Baker”为小型公司创建高性能网站方
优化LNMP架构采用“Website Baker”为小型公司创建高性能网站方案 参考图片： 1.
一、安装部署各种软件:
1.系统环境:
硬件:HP 360G4/2G
System:Centos 5.4
Web:nginx-1.1.6.tar.gz
FastCGI:php-5.3.8.tar.gz
DB:mysql-5.5.3-m3.tar.gz
2. 安装编译环境
#yum -y install gcc gcc-c++ autoconf automake openssl-devel zlib-devel pcre-devel //pcre让nginx支持正则
#yum -yt groupinstall "Developement Tools" "Development Libraries" 1.编译安装mysql
//a.编译安装mysql的优点：源码包的默认编译参数默认以dubgu模式）给mysql的性能带来很大的损失，
// 此处使用 --without-debug参数禁用debug模式
//b.以静态方式编译（比动态方式提高5%-10%的性能）
// 此处使用 --with-mysqld-ldflgs=--all-staic 和 --with-client-ldflds=--all-staic参数
//c.使用unix套接字链接提高7.5%性能
// 此处使用--with-unix-socket-path=/usr/local/mysql/tmp/mysql.sock
//d.允许使用汇编模式
// 此处使用 --enable-assembler (优化性能)
//e.至于 --pgcc 目前没有在生产上使用过（据说可以提高1%）
//f.编译安装，可以在同一台服务器上安装多个mysql（前提要保证存放位置、sock不同）
#groupadd mysql //为mysql创建用户组
#useradd -g mysql mysql //将mysql用户添加到mysql组中
#tar zxvf mysql-5.5.3-m3.tar.gz
#cd mysql-5.5.3-m3
./configure \
--prefix=/usr/local/mysql \
--without-debug \ //取消debug模式编译
--enable-assembler \
--with-mysqld-ldflags=-all-static \
--with-client-ldflags=-all-static \
--with-unix-socket-path=/usr/local/mysql/tmp/mysql.sock \
--with-extra-charsets=utf8,gbk //如果没有问题则会显示
// Thank you for choosing MySQL!
// 以下时间将为很长，请为mysql创建配置文件或数据目录
#make && make install //如果编译安装没有问题则NEXT
#chmod 755 /usr/local/mysql
#chown -R mysql:mysql /usr/local/mysql //修改安装目录的用户和用户组为mysql
#mkdir -pv /mysql_data/{data,binlog,relaylog} //为mysql提供数据存放目录
#/usr/local/mysql/bin/mysql_install_db \ //推荐是用其它新分区，避免IO重读/分区
--basedir=/usr/local/mysql \
--datadir=/mysql_data --user=mysql
----------------------------------------------
//创建并优化my.cnf文件
#vi /mysql_data/my.cnf //创建后保存
[client]
character-set-server = utf8
port = 3306
socket = /usr/local/mysql/tmp/mysql.sock
[mysqld]
character-set-server = utf8
replicate-ignore-db = mysql
replicate-ignore-db = test
replicate-ignore-db = information_schema
user = mysql
port = 3306
socket = /usr/local/mysql/tmp/mysql.sock
basedir = /usr/local/mysql
datadir = /mysql_data/data
log-error = /mysql_data/mysql.error.log
pid-file = /mysql_data/mysql.pid
skip-locking //避免mysql外部锁定
open_files_limit = 10240
back_log = 384 //推荐小于512
max_connections = 5000
max_connect_errors = 6000
table_cache = 614
external-locking = FALSE
max_allowed_packet = 32M
sort_buffer_size = 1M
join_buffer_size = 1M
thread_cache_size = 300
query_cache_size = 512M
query_cache_limit = 2M
query_cache_min_res_unit = 2k
default-storage-engine = MyISAM
thread_stack = 192K
transaction_isolation = READ-COMMITTED
tmp_table_size = 246M
max_heap_table_size = 246M
long_query_time = 3
log-slave-updates
log-bin = /mysql_data/binlog/binlog
binlog_cache_size = 4M
binlog_format = MIXED
max_binlog_cache_size = 8M
max_binlog_size = 1G
relay-log-index = /mysql_data/relaylog/relaylog
relay-log-info-file = /mysql_data/relaylog/relaylog
relay-log = /mysql_data/relaylog/relaylog
expire_logs_days = 30
key_buffer_size = 256M //索引缓冲区为256M 或（4G内存可512M）
read_buffer_size = 1M
read_rnd_buffer_size = 16M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 128M
myisam_max_sort_file_size = 10G
myisam_repair_threads = 1
myisam_recover interactive_timeout = 120
wait_timeout = 120
skip-name-resolve //避免做DNS 解析，提供IP地址连接 slave-skip-errors = 1032,1062,126,1114,1146,1048,1396
server-id = 1 innodb_additional_mem_pool_size = 16M
innodb_buffer_pool_size = 512M
innodb_data_file_path = ibdata1:256M:autoextend
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 16M
innodb_log_file_size = 128M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 0 [mysqldump]
quick
max_allowed_packet = 32M #######################################
2.漫长的等待后启动mysql(SysV格式的脚本见附件）
#/usr/local/webserver/mysql/bin/mysql start
//管理mysql并修改密码和给新用户创建权限
#/usr/local/mysql/bin/mysql -u root -p -S /usr/local/mysql/tmp/mysql.sock
enter password: <Enter> //默认为空
#/usr/local/mysql/bin/mysqladmin -uroot -p paswword 'hanfeng' //创建新密码为hanfeng
--------------------------------------------------
3.编译安装PHP
// 为PHP安装 事件触发网络库
#tar zxvf libevent-2.0.15-stable.tar.gz
#cd libevent-2.0.15-stable
#./configure && make && make install
// 为PHP安装 字符编码转换
#tar zxvf libconv-1.13.1.tar.gz
#cd libconv-1.13.1
#./configure && make && make install
// 安装FastCGIのPHP
// 此处采用
#tar zxvf php-5.3.8.tar.gz
#cd php-5.3.8
#./configure \
--prefix=/usr/local/php \
--with-mysql=/usr/local/mysql \
--with-mysqli==/usr/local/mysql/bin/mysql_config \
--with-openssl \
--enable-fpm \ //一定要有
--with-libevent-dir=/usr/local/lib \
--enable-mbstring \
--disable-debug \ //取消掉debug，为增加性能
--with-freetype-dir \
--with-jpeg-dir \
--with-png-dir \
--with-zlib \
--with-libxml-dir=/usr \
--enable-xml \
--with-iconv-dir=/usr/local
--------------------------------------------------
4.随后将会看到
// Thank you for using PHP
#ln -s /usr/local/lib/libiconv.so.2 /usr/lib/libiconv.so.2 //做个连接防止make时缺少libiconv.so.2
#ln -s /usr/local/lib/libiconv.so.2 /usr/local/libiconv.so.2
#make ZEND_EXTRA_LIBS='-liconv' //iconv库问题
5.漫长时间后将会看到
// Build complete. Don't forget to run 'make test'
#make install
#cp php-5.3.8/php.ini-production /usr/local/php/etc/php.ini
#vi /usr/local/php/etc/php.ini 修改并保存
// 开启以下几项
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
6. 使用nohup在后台启动 php-fpm 为防止tty终端关闭导致php-fpm 挂掉！推荐生产环境使用nohup将命令放于后台运行
#nohup /usr/local/php/sbin/php-fpm &
[1] 18198
nohup: appending output to `nohup.out'
[1]+ Done nohup /usr/local/php/sbin/php-fpm
//将命令加到开始启动
#echo "nohup /usr/local/php/sbin/php-fpm & > /dev/null" >> /ect/rc.local
7.//为nginx增加fastcgi_params 文件
#vi /etc/nginx/fastcgi.conf //修改后保存
// 将里面内容替换为
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
##########################################
8.为nginx 优化linux内核参数
vi /etc/sysctl.conf // 增加一下内容，并是修改生效
net.ipv4.tcp_max_syn_backlog = 65536
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw.reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.ip_local_port_range = 1024 65535
##########################################
#sysctl -p //使其及时生效
--------------------------------------------------
9.编译安装nginx
#useradd -s /sbin/nologin -M nginx //添加nginx用户
#tar zxvf nginx-1.1.6.tar.gz
#cd nginx-1.1.6
#./configure \
--prefix=/usr/local/nginx \ //安装路径
--sbin-path=/usr/sbin/nginx \ //可执行文件路径
--conf-path=/etc/nginx/nginx.conf \ //最好定义到/etc下
--pid-path=/usr/local/nginx/nginx.pid \ //pid文件存放位置，后面管理时将会用到
--lock-path=/var/lock/nginx.lock \
--user=nginx \
--group=nginx \
--with-http_stub_status_module \ //以取得一些网页的运行状态
--with-http_ssl_module \ //支持https加密连接
--with-http_gzip_static_module \ //静态缓存、压缩模块
--with-http_realip_module \ //让nginx透明获取客户端IP
--http-client-body-temp-path=/var/tmp/nginx/client/ \ //指定http客户端请求缓存文件存放目录
--http-proxy-temp-path=/var/tmp/nginx/proxy/ \ //指定http反向代理缓存文件存放目录
--http-fastcgi-temp-path=/var/tmp/nginx/fcgi/ //指定FastCGI缓存文件存放目录
#make && make install //安装nginx
10.编写SystemV风格的启动脚本（可在本文附件下载后直接使用）
//如果需要请参考: 有关nginxd脚本的编写
//使用说明，保存nginxd脚本,赋予执行权限，添加服务和开机启动
#chmod +x /etc/init.d/nginxd
#chkconfig --add nginxd
// 如果不支持，则添加一下2行即可
// # chkconfig: - 85 15 #为必须字符
// # description: nginx is a World Wide Web server. It is used to serve
#chkconfig --level 2345 nginxd on
11.第一次启动nginx
#service nginxd start //没问题的话就显示，也会看到Welcome to nginx!
Starting nginx: [ OK ]
在XP客户端访问一下 //服务器地址
--------------------------------------------------
12.优化配置nginx.conf 文件
user nginx nginx;
worker_processes 8; //我的服务器为双核双线程 pid /usr/local/nginx/nginx.pid; //PID 存在位置，和启用nginx.pid管理 events {
use epoll; //使用的网络IO模型，CeotOs或REAL推荐使用epoll
worker_connections 1024; //允许的连接数
} http {
include mime.types;
default_type application/octet-stream; log_format mylog '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
//mylog为自定义log_format的name,log_format用于定义log的格式
sendfile on;
tcp_nopush on;
keepalive_timeout 60; //连接保持时间 gzip on; //开启gzip压缩，为客户端访问节省更大的带宽，提高访问速度
gzip_min_length 1k;
gzip_buffers 4 8k; //安装原数据8K为单位的4倍申请内存
gzip_http_version 1.1; //http版本信息，目前为1.0和1.1
gzip_comp_level 4; //gzip 压缩比（与CPU处理速度相反）
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
fastcgi_intercept_errors on;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k; server {
listen 80;
server_name ;
access_log logs/abc.access.log mylog; //用到了mylog，将日志定义为log_format格式 location / {
root /usr/local/nginx/html/abc;
index index.php index.html index.htm;
}
error_page 404 = /404.html; //当访问不存在的页面时，提示用户重新访问主页
# redirect server error pages to the static page /50x.html
error_page 500 502 503 504 /usr/local/nginx/50x/50x.html; //各种错误页面
location = /50x.html {
root html;
}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ \.php$ {
root html;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php; //fastcgi 索引页格式
fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
include fastcgi_params;
}
} server {
listen 80;
server_name ;
access_log logs/abcd.access.log mylog;
location / {
root /usr/local/nginx/html/abcd;
index index.php index.html index.htm;
error_page 404 = /404.html;
error_page 500 502 503 504 /usr/local/nginx/50x/50x.html;
location = /50x.html {
root html;
location ~ \.php$ {
root /usr/local/nginx/html/abcd/wb;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
include fastcgi_params;
}
}
}
}
############### This is nginx.conf ###############
--------------------------------------------------
13.使用PID信号来控制管理nginx进程
// pid 存放位置 /usr/local/nginx/nginx.pid
// kill - 信号类型 cat `/usr/local/nginx/nginx.pid`
// 信号类型说明
// TERM,INT 快速关闭nginx ， 如以此kill掉8个进程是不是很悲剧
// OUT 从容关闭
// HUP 平滑重启,重新加载配置文件
// USR1 重新打开日志文件，在自动切割日志时比较使用
// USR2 平滑升级可执行程序
// WINCH 从容关闭进程,对于线上的nginx新旧版本更换 // 针对与上文的nginx.conf 修改此处使用HUP信号来控制
#kill -HUP cat `/usr/local/nginx/nginx.pid` //让修改立即生效
14.访问简单测试测试页面
#vi /usr/local/nginx/html/index.php
<?php
phpinfo();
?> 15.测试访问数据库
<?php
link=mysql_connect("localhost","root","hanfeng");
if(!$link) echo "ERROR!";
else echo "OK!";
phpinfo();
?>
--------------------------------------------------
二、安装“Website Baker”
1.安装部署Website Baker
// 采用nginx的虚拟主机为企业N个域名做网站部署
#unzip WebsiteBaker_2.8*.zip
#mv WebsiteBaker_2.8* /usr/local/nginx/html/abc
#cp -r /usr/local/nginx/html/abc /usr/local/nginx/html/abcd
#cd /usr/local/nginx/html/abc
#cp wb/modules/fckeditor/fckeditor/editor/filemanager/connectors/php/config.php ./
#cp config.php ../abcd/wb/
#chmod 777 /usr/local/nginx/html/abc
#chmod 777 /usr/local/nginx/html/abcd
2.为Website Baker的创建数据库用户
#/usr/local/mysql/bin/mysql -uroot -p
mysql> GRANT ALL PRIVILEGES ON abc.* TO 'abc'@'localhost' IDENTIFIED BY 'hanfeng';
mysql> GRANT ALL PRIVILEGES ON abcd.* TO 'abcd'@'localhost' IDENTIFIED BY 'hanfeng';
mysql>flush privileges;
3.通过浏览器访问并install 和admin IE: 安装 (abc.com同理) //以下仅有图片提供
IE: 管理
//安装完后删除安装文件和upgrade-script.php文件
#rm -rf /usr/local/nginx/html/{abc,abcd}/{upgrade-script.php,install}
// admin进入界面请见文章开始 4.通过访问安装无误，证明基于LNMP下的“Website Baker”安装成功！
// 根据后台admin管理网站即可了！
说明： 1.本文不只是为了构建LNMP安装“Website Baker”网站，而是将最近学习到东西给朋友提供实际生产中的应用！ 2.nignx 日志切割、mysql数据备份已经配置为cron任务，并为编辑人员提供了bat文件自动上传和服务器状态查看！基本不需要专业运维人员管理，直接托付给IDC即可！ 3.LNMP编译安装优化多学自抚琴煮酒《构建高可用linux服务器》和张宴《实战Nginx取代Apache的高性能Web服务器》并借鉴51CTO《运维趋势之服务器优化_13期》； 4.不在于编译安装LNMP，而是优化期架构在生产中的应用，根据最近观察服务运行良好！
