阿里云2核8G服务器 Nginx 优化配置

吹落的树叶

已于 2022-03-31 17:00:56 修改

阅读量720

点赞数 1

分类专栏： Nginx PHP 文章标签： nginx php

于 2020-11-18 15:39:01 首次发布

本文链接：https://blog.youkuaiyun.com/zhoulei_csdn/article/details/109775196

版权

PHP 同时被 2 个专栏收录

9 篇文章

订阅专栏

Nginx

2 篇文章

订阅专栏

文章目录

- - 配置文件：nginx.conf
  - 配置文件：/etc/nginx/conf.d/*.conf

配置文件：nginx.conf

user  www;
worker_processes  2; #默认进程数为1，为提高性能官方的建议是修改成cpu的内核数，可以减少机器io带来的影响

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

worker_rlimit_nofile 65535; #配置要和系统的单进程打开文件数一致，可通过 ulimit -n 命令查询

events {
    use epoll;
    
    #根据系统的最大打开文件数来调整，worker_connections进程连接数量要小于等于系统的最大打开文件数
    #worker_connections进程连接数量真实数量 = worker_connections*worker_process
    worker_connections  20480; # 根据本例，理论上单个进程允许的客户端最大连接数（65535/2）
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    client_max_body_size 25m;
    client_header_buffer_size 4k;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    server_tokens off; #隐藏nginx版本号

    access_log off; #关闭请求日志优化性能
    #access_log  /var/log/nginx/access.log  main;

    open_file_cache max=65535 inactive=20s;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  60;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;
}

配置文件：/etc/nginx/conf.d/*.conf

server {
    listen       80;
    server_name  xxx.com;
    return       301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name xxx.com;
    root  /data/unity-pc/public;
    index index.html index.htm index.php;

    ssl_certificate   /var/ssl/4517843_xxx.pem;
    ssl_certificate_key  /var/ssl/4517843_xxxx.key;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 10m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;

    location / {
    	try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
       	fastcgi_pass   127.0.0.1:9000;
     	fastcgi_buffer_size 64k;
        fastcgi_buffers 4 64k;
        fastcgi_busy_buffers_size 128k;
        fastcgi_temp_file_write_size 128k;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        include  fastcgi_params;
    }

    location ~ .*\.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm)$ {
        expires 2d;
    }
 
    location ~ .*\.(?:js|css)$ {
        expires 8h;
    }
}