本文共 22360 字，大约阅读时间需要 74 分钟。
Nginx是一款由C语言编写的高性能、轻量级的HTTP和反向代理服务器，同时也是一款IMAP/POP3/SMTP服务器。
/etc/nginx/ # Nginx所用用户和组，window下不指定 user www-data; # 工作的子进程数量（通常等于CPU数量或者2倍于CPU） worker_processes auto; # pid存放文件 pid /run/nginx.pid; # 简化调试 此指令不得用于生产环境 #master_process off;# 简化调试 此指令可以用到生产环境#daemon off; # 最大文件描述符worker_rlimit_nofile 51200;events { # 使用网络IO模型linux建议epoll，FreeBSD建议采用kqueue，window下不指定。 #use epoll; # 允许最大连接数 worker_connections 1024; # 此指令的作用是立即接受所有连接放到监听队列中，使得Nginx Worker能够在获得新连接通知时尽可能多的接受连接 #multi_accept on;} # load modules compiled as Dynamic Shared Object (DSO)##dso {# load ngx_http_fastcgi_module.so;# load ngx_http_rewrite_module.so;#} http { # 反向代理相关配置（自行新建），参考下面的proxy.conf #include /etc/nginx/conf.d/proxy.conf;; # GZIP压缩相关配置（自行新建），参考下面的gzip.conf #include /etc/nginx/conf.d//gzip.conf; ## # Basic Settings ## sendfile on; # 在一个数据包里发送所有头文件，而不是一个接一个的发送 tcp_nopush on; # 不缓存数据，而是一段一段的发送 tcp_nodelay on; # 设置客户端keep-alive超时时间 keepalive_timeout 65; types_hash_max_size 2048; client_header_timeout 10; client_body_timeout 10; send_timeout 10; client_header_buffer_size 1k; large_client_header_buffers 4 4k; # 允许客户端请求的最大单文件字节数 client_max_body_size 10m; client_body_in_single_buffer on; # 缓冲区代理缓冲用户端请求的最大字节数 client_body_buffer_size 128k; # 关闭Nginx的版本号和系统发行版本显示，默认是on # server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; # 设置文件使用的默认的MIME-type include /etc/nginx/mime.types; default_type application/octet-stream; ## # SSL Settings ## ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE ssl_prefer_server_ciphers on; ## # Logging Settings ## # 自定义access_log日志格式和级别 #log_format main '$remote_addr - $remote_user [$time_local] $request "$status" $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for"'; # 关闭日志可配置off # 访问和错误日志存放路径，常见日志级别有[ debug | info | notice | warn | error | crit | alert | emerg ]，级别越高记录的信息越少。 access_log /var/log/nginx/access.log main; error_log /var/log/nginx/error.log notice; # 负载均衡配置 upstream upstream_test{ # 负载策略，常见有轮询（默认）、指定权重(weight 默认为1.weight越大，负载的权重就越大)、IP绑定(ip_hash)、fair（第三方）、url_hash（第三方） #ip_hash; server 127.0.0.1:9090 down; (down 表示当前server暂时不参与负载) server 127.0.0.1:8080 weight=10; server 127.0.0.1:8081 weight=5; server 127.0.0.1:7070 backup; (其它所有的非backup机器down掉或者忙碌时候，请求backup机器) ## Tengine config #check interval=300 rise=10 fall=10 timeout=100 type=http port=80; #check_http_send "GET / HTTP/1.0\r\n\r\n"; #check_http_expect_alive http_2xx http_3xx; ## Tengine config #session_sticky cookie=cookieTest mode=insert; } # server配置，同时支持监听80和443端口 server { listen 80; # https配置 listen 443 ssl http2; #default_server; listen [::]:443 ssl http2; #default_server; ssl_certificate "/etc/nginx/ssh_cert/1_domain.cn_bundle.crt"; ssl_certificate_key "/etc/nginx/ssh_cert/2_domain.cn.key"; ssl_session_cache shared:SSL:1m; ssl_session_timeout 10m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; # 可使用通配符形式配置，如*.domain.com; server_name domain.com www.domain.com;; # 如果访问时没有加www，则跳转至www.domain.com if ($host !~* www.domain.com) { rewrite ^(.*)$ http://www.domain.com/$1 permanent; } location / { # 指定目录位置 root /etc/nginx/; # 开启目录浏览 autoindex on; # 默认为on，显示出文件的确切大小，单位是bytes。改为off后，显示出文件的大概大小，单位是kB或者MB或者GB autoindex_exact_size off; # 默认为off，显示的文件时间为GMT时间。改为on后，显示的文件时间为文件的服务器时间 autoindex_localtime on; # 10m之后下载速度为10k #limit_rate_after 10m; #limit_rate 10k; } # 根据User-Agent过滤网络爬虫 location /spider { if ($http_user_agent ~* "python|curl|java|wget|httpclient|okhttp") { return 503; } } location /proxy { proxy_pass http://upstream_test; # 配置跨域访问 add_header 'Access-Control-Allow-Headers' 'Content-Type'; add_header 'Access-Control-Allow-Origin' '*'; add_header 'Access-Control-Allow-Methods' 'GET'; add_header 'Access-Control-Expose-Headers' 'Access-Control-Allow-Origin,Access-Control-Allow-Credentials'; } # static resources config location ~* ^/static/.*\.(jpg|jpeg|gif|png|html|htm|swf|js|css)$ { root /etc/nginx/static/; access_log off; expires 30d; } # 当页面发生异常时，可以指定跳转到location中，也可以跳转到指定URL error_page 404 http://www.error404.com/; error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } } } ## # Gzip Settings ## gzip on; # IE6或更低版本禁用压缩 gzip_disable "msie6"; # 对数据启用压缩的最少字节数，建议最少大于1000字节 gzip_min_length 1k; gzip_vary on; # 允许或者禁止压缩基于请求和响应的响应流，设置为any意味着将会压缩所有的请求 gzip_proxied any; # 设置数据压缩的等级，范围是1-9之间的任意数值，9是最慢但压缩比最大 gzip_comp_level 6; gzip_buffers 16 8k; gzip_http_version 1.1; #指定压缩的文件类型 gzip_types application/font-woff text/plain application/javascript application/json text/css application/xml text/javascript image/jpg image/jpeg image/png image/gif image/x-icon;
#后端的Web服务器可以通过X-Forwarded-For获取用户真实IPproxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;#nginx跟后端服务器连接超时时间(代理连接超时)proxy_connect_timeout 90;#连接成功后，后端服务器响应时间(代理接收超时)proxy_read_timeout 90;#nginx发送数据到后端服务器超时时间(代理发送超时)proxy_send_timeout 600; #设置代理服务器（nginx）保存用户头信息的缓冲区大小proxy_buffer_size 4k;#proxy_buffers缓冲区，网页平均在32k以下的话，这样设置proxy_buffers 4 32k;#高负荷下缓冲大小（proxy_buffers*2）proxy_busy_buffers_size 64k; #设定缓存文件夹大小，大于这个值，将从upstream服务器传proxy_temp_file_write_size 64k;#为了支持新的upstream keepalive选项proxy_http_version 1.1;proxy_set_header Connection "";
Java EE开发中常用的一款Web应用服务器，也是一个免费开源的Servlet容器，类似的还有Jetty、Undertow、Netty等。
server.xml
关于JVM参数配置和调优可以参考:
Redis是一款使用C语言编写的高性能Key-Value开源数据库，支持存储的value类型包括有string(字符串)、list(链表)、set(集合)、zset(sorted set , 有序集合)和hash（哈希类型）。
: redis核心配置文件
# By default Redis does not run as a daemon. Use 'yes' if you need it.# Note that Redis will write a pid file in /var/run/redis.pid when daemonized.# 设置此选项使得redis以守护进程方式运行daemonize yes# When running daemonized, Redis writes a pid file in /var/run/redis.pid by# default. You can specify a custom pid file location here.# 以守护进程运行时，pid的存放路径pidfile /var/run/redis.pid# Accept connections on the specified port, default is 6379.# If port 0 is specified Redis will not listen on a TCP socket.# 端口port 6379# If you want you can bind a single interface, if the bind option is not# specified all the interfaces will listen for incoming connections.# 指定Redis可接收请求的IP地址,不设置将处理所有请求,建议生产环境中设置# bind 127.0.0.1# Close the connection after a client is idle for N seconds (0 to disable)# 客户端连接的超时时间,单位为秒,超时后会关闭连接timeout 0# Specify the log file name. Also 'stdout' can be used to force# Redis to log on the standard output. Note that if you use standard# output for logging but daemonize, logs will be sent to /dev/null# 配置 log 文件地址,默认打印在命令行终端的窗口上logfile stdout# Set the number of databases. The default database is DB 0, you can select# a different one on a per-connection basis using SELECTwhere# dbid is a number between 0 and 'databases'-1# 设置数据库的个数,可以使用 SELECT 命令来切换数据库。默认使用的数据库是 0databases 16## Save the DB on disk:## save ## Will save the DB if both the given number of seconds and the given# number of write operations against the DB occurred.## In the example below the behaviour will be to save:# after 900 sec (15 min) if at least 1 key changed# after 300 sec (5 min) if at least 10 keys changed# after 60 sec if at least 10000 keys changed## Note: you can disable saving at all commenting all the "save" lines.# RDB备份的频率。# 900秒之内有1个keys发生变化时# 30秒之内有10个keys发生变化时# 60秒之内有10000个keys发生变化时save 900 1save 300 10save 60 10000# Compress string objects using LZF when dump .rdb databases?# For default that's set to 'yes' as it's almost always a win.# If you want to save some CPU in the saving child set it to 'no' but# the dataset will likely be bigger if you have compressible values or keys.# 在进行镜像备份时,是否进行压缩rdbcompression yes# The filename where to dump the DB# 镜像备份文件的文件名dbfilename dump.rdb# The working directory.## The DB will be written inside this directory, with the filename specified# above using the 'dbfilename' configuration directive.# # Also the Append Only File will be created inside this directory.# # Note that you must specify a directory here, not a file name.# 数据库镜像备份的文件放置的路径。这里的路径跟文件名要分开配置是因为 Redis 在进行备份时,先会将当前数据库的状态写入到一个临时文件中,等备份完成时,再把该该临时文件替换为上面所指定的文件,# 而这里的临时文件和上面所配置的备份文件都会放在这个指定的路径当中dir ./# Master-Slave replication. Use slaveof to make a Redis instance a copy of# another Redis server. Note that the configuration is local to the slave# so for example it is possible to configure the slave to save the DB with a# different interval, or to listen to another port, and so on.# 设置该数据库为其他数据库的从数据库# slaveof # If the master is password protected (using the "requirepass" configuration# directive below) it is possible to tell the slave to authenticate before# starting the replication synchronization process, otherwise the master will# refuse the slave request.# 指定与主数据库连接时需要的密码验证# masterauth # Require clients to issue AUTH before processing any other# commands. This might be useful in environments in which you do not trust# others with access to the host running redis-server.## This should stay commented out for backward compatibility and because most# people do not need auth (e.g. they run their own servers).# # Warning: since Redis is pretty fast an outside user can try up to# 150k passwords per second against a good box. This means that you should# use a very strong password otherwise it will be very easy to break.# 设置客户端连接后进行任何其他指定前需要使用的密码。警告:redis速度相当快,一个外部的用户可以在一秒钟进行150K次的密码尝试,你需要指定非常非常强大的密码来防止暴力破解。requirepass foobared# Set the max number of connected clients at the same time. By default there# is no limit, and it's up to the number of file descriptors the Redis process# is able to open. The special value '0' means no limits.# Once the limit is reached Redis will close all the new connections sending# an error 'max number of clients reached'.# 限制同时连接的客户数量。当连接数超过这个值时,redis 将不再接收其他连接请求,客户端尝试连接时将收到 error 信息# maxclients 128# Don't use more memory than the specified amount of bytes.# When the memory limit is reached Redis will try to remove keys# accordingly to the eviction policy selected (see maxmemmory-policy).## If Redis can't remove keys according to the policy, or if the policy is# set to 'noeviction', Redis will start to reply with errors to commands# that would use more memory, like SET, LPUSH, and so on, and will continue# to reply to read-only commands like GET.## This option is usually useful when using Redis as an LRU cache, or to set# an hard memory limit for an instance (using the 'noeviction' policy).# 当内存达到设置上限时，内存的淘汰策略# maxmemmory-policy [volatile-lru or volatile-tt or volatile-randowm or allkeys-lru or allkeys-random] # WARNING: If you have slaves attached to an instance with maxmemory on,# the size of the output buffers needed to feed the slaves are subtracted# from the used memory count, so that network problems / resyncs will# not trigger a loop where keys are evicted, and in turn the output# buffer of slaves is full with DELs of keys evicted triggering the deletion# of more keys, and so forth until the database is completely emptied.## In short… if you have slaves attached it is suggested that you set a lower# limit for maxmemory so that there is some free RAM on the system for slave# output buffers (but this is not needed if the policy is 'noeviction').# 设置redis能够使用的最大内存。当内存满了的时候,如果还接收到set命令,redis将先尝试剔除设置过expire信息的key,而不管该key的过期时间还没有到达。# 在删除时,将按照过期时间进行删除,最早将要被过期的key将最先被删除。如果带有expire信息的key都删光了,那么将返回错误。# 这样,redis将不再接收写请求,只接收get请求。maxmemory的设置比较适合于把redis当作于类似memcached 的缓存来使用# maxmemory # By default Redis asynchronously dumps the dataset on disk. If you can live# with the idea that the latest records will be lost if something like a crash# happens this is the preferred way to run Redis. If instead you care a lot# about your data and don't want to that a single record can get lost you should# enable the append only mode: when this mode is enabled Redis will append# every write operation received in the file appendonly.aof. This file will# be read on startup in order to rebuild the full dataset in memory.## Note that you can have both the async dumps and the append only file if you# like (you have to comment the "save" statements above to disable the dumps).# Still if append only mode is enabled Redis will load the data from the# log file at startup ignoring the dump.rdb file.## IMPORTANT: Check the BGREWRITEAOF to check how to rewrite the append# log file in background when it gets too big.# 默认情况下,redis 会在后台异步的把数据库镜像备份到磁盘,但是该备份是非常耗时的,而且备份也不能很频繁,如果发生诸如拉闸限电、拔插头等状况,那么将造成比较大范围的数据丢失。# 所以redis提供了另外一种更加高效的数据库备份及灾难恢复方式。# 开启appendonly 模式之后,redis 会把所接收到的每一次写操作请求都追加到appendonly.aof 文件中,当redis重新启动时,会从该文件恢复出之前的状态。# 但是这样会造成 appendonly.aof 文件过大,所以redis还支持了BGREWRITEAOF 指令,对appendonly.aof进行重新整理appendonly no# The fsync() call tells the Operating System to actually write data on disk# instead to wait for more data in the output buffer. Some OS will really flush # data on disk, some other OS will just try to do it ASAP.## Redis supports three different modes:## no: don't fsync, just let the OS flush the data when it wants. Faster.# always: fsync after every write to the append only log . Slow, Safest.# everysec: fsync only if one second passed since the last fsync. Compromise.## The default is "everysec" that's usually the right compromise between# speed and data safety. It's up to you to understand if you can relax this to# "no" that will will let the operating system flush the output buffer when# it wants, for better performances (but if you can live with the idea of# some data loss consider the default persistence mode that's snapshotting),# or on the contrary, use "always" that's very slow but a bit safer than# everysec.## If unsure, use "everysec".# 设置对 appendonly.aof 文件进行同步的频率。always 表示每次有写操作都进行同步,everysec 表示对写操作进行累积,每秒同步一次。# appendfsync alwaysappendfsync everysec# appendfsync no# Virtual Memory allows Redis to work with datasets bigger than the actual# amount of RAM needed to hold the whole dataset in memory.# In order to do so very used keys are taken in memory while the other keys# are swapped into a swap file, similarly to what operating systems do# with memory pages.## To enable VM just set 'vm-enabled' to yes, and set the following three# VM parameters accordingly to your needs.# 是否开启虚拟内存支持。因为 redis 是一个内存数据库,而且当内存满的时候,无法接收新的写请求,所以在redis2.0中,提供了虚拟内存的支持。# 但是需要注意的是,redis中,所有的key都会放在内存中,在内存不够时,只会把value 值放入交换区。# 这样保证了虽然使用虚拟内存,但性能基本不受影响,同时,你需要注意的是你要把vm-max-memory设置到足够来放下你的所有的keyvm-enabled no# vm-enabled yes# This is the path of the Redis swap file. As you can guess, swap files# can't be shared by different Redis instances, so make sure to use a swap# file for every redis process you are running. Redis will complain if the# swap file is already in use.## The best kind of storage for the Redis swap file (that's accessed at random) # is a Solid State Disk (SSD).## *** WARNING *** if you are using a shared hosting the default of putting# the swap file under /tmp is not secure. Create a dir with access granted# only to Redis user and configure Redis to create the swap file there.# 设置虚拟内存的交换文件路径vm-swap-file /tmp/redis.swap# vm-max-memory configures the VM to use at max the specified amount of# RAM. Everything that deos not fit will be swapped on disk *if* possible, that# is, if there is still enough contiguous space in the swap file.## With vm-max-memory 0 the system will swap everything it can. Not a good# default, just specify the max amount of RAM you can in bytes, but it's# better to leave some margin. For instance specify an amount of RAM# that's more or less between 60 and 80% of your free RAM.# 这里设置开启虚拟内存之后,redis将使用的最大物理内存的大小。默认为0,redis将把他所有的能放到交换文件的都放到交换文件中,以尽量少的使用物理内存。# 在生产环境下,需要根据实际情况设置该值,最好不要使用默认的 0vm-max-memory 0# Redis swap files is split into pages. An object can be saved using multiple# contiguous pages, but pages can't be shared between different objects.# So if your page is too big, small objects swapped out on disk will waste# a lot of space. If you page is too small, there is less space in the swap# file (assuming you configured the same number of total swap file pages).## If you use a lot of small objects, use a page size of 64 or 32 bytes.# If you use a lot of big objects, use a bigger page size.# If unsure, use the default # 设置虚拟内存的页大小,如果你的 value 值比较大,比如说你要在 value 中放置博客、新闻之类的所有文章内容,就设大一点,如果要放置的都是很小的内容,那就设小一点vm-page-size 32# Number of total memory pages in the swap file.# Given that the page table (a bitmap of free/used pages) is taken in memory,# every 8 pages on disk will consume 1 byte of RAM.## The total swap size is vm-page-size * vm-pages## With the default of 32-bytes memory pages and 134217728 pages Redis will# use a 4 GB swap file, that will use 16 MB of RAM for the page table.## It's better to use the smallest acceptable value for your application,# but the default is large in order to work in most conditions.# 设置交换文件的总的 page 数量,需要注意的是,page table信息会放在物理内存中,每8个page 就会占据RAM中的 1 个 byte。# 总的虚拟内存大小 = vm-page-size * vm-pagesvm-pages 134217728# Max number of VM I/O threads running at the same time.# This threads are used to read/write data from/to swap file, since they# also encode and decode objects from disk to memory or the reverse, a bigger# number of threads can help with big objects even if they can't help with# I/O itself as the physical device may not be able to couple with many# reads/writes operations at the same time.## The special value of 0 turn off threaded I/O and enables the blocking# Virtual Memory implementation.# 设置 VM IO 同时使用的线程数量。vm-max-threads 4# Hashes are encoded in a special way (much more memory efficient) when they# have at max a given numer of elements, and the biggest element does not# exceed a given threshold. You can configure this limits with the following# configuration directives.# redis 2.0 中引入了 hash 数据结构。 # hash 中包含超过指定元素个数并且最大的元素当没有超过临界时,hash 将以zipmap(又称为 small hash大大减少内存使用)来存储,这里可以设置这两个临界值hash-max-zipmap-entries 512(hash-max-ziplist-entries for Redis >= 2.6)hash-max-zipmap-value 64(hash-max-ziplist-value for Redis >= 2.6)# Active rehashing uses 1 millisecond every 100 milliseconds of CPU time in# order to help rehashing the main Redis hash table (the one mapping top-level# keys to values). The hash table implementation redis uses (see dict.c)# performs a lazy rehashing: the more operation you run into an hash table# that is rhashing, the more rehashing "steps" are performed, so if the# server is idle the rehashing is never complete and some more memory is used# by the hash table.# # The default is to use this millisecond 10 times every second in order to# active rehashing the main dictionaries, freeing memory when possible.## If unsure:# use "activerehashing no" if you have hard latency requirements and it is# not a good thing in your environment that Redis can reply form time to time# to queries with 2 milliseconds delay.## use "activerehashing yes" if you don't have such hard requirements but# want to free memory asap when possible.# 开启之后,redis 将在每 100 毫秒时使用 1 毫秒的 CPU 时间来对 redis 的 hash 表进行重新 hash,可以降低内存的使用。# 当你的使用场景中,有非常严格的实时性需要,不能够接受 Redis 时不时的对请求有 2 毫秒的延迟的话,把这项配置为 no。# 如果没有这么严格的实时性要求,可以设置为 yes,以便能够尽可能快的释放内存activerehashing yes
: mysql核心配置文件
[client]port = 3306socket = /var/lib/mysql/mysql.sock [mysqld]datadir=/var/lib/mysqlsocket=/var/lib/mysql/mysql.sockuser = mysqlport = 3306pid-file = /var/lib/mysql/mysql.pid#配置此项可以追踪sql执行记录log=存放日志的路径/mysql-sql.log##以下为开启主从的必要配置server-id = 1binlog-do-db=db_nameA #指定对db_nameA记录二进制日志 binlog-ignore-db=db_namB #指定不对db_namB记录二进制日志binlog_format = MIXED #binlog格式指定character-set-server = utf8mb4 #指定数据默认编码log_bin = /var/lib/mysql/log/mysql-bin.logexpire_logs_days = 30character-set-server = utf8mb4default-storage-engine = InnoDB#thread connectionmax_connections = 1024max_connect_errors = 1024# Try number of CPU's*2 for thread_concurrencythread_concurrency = 8thread_cache_size = 256#*networkskip-name-resolve #跳过dns查询max_allowed_packet = 1M#buffer&cachetable_open_cache = 4096sort_buffer_size = 256Kjoin_buffer_size = 256K#query cachequery_cache_limit = 4Mquery_cache_size = 4Mquery_cache_type = 1#temptabletmp_table_size = 64Mmax_heap_table_size = 64M#自增主键配置auto_increment_offset=1auto_increment_increment=2#MyISAMkey_buffer_size = 8Mread_buffer_size = 1Mread_rnd_buffer_size = 256K#Innodbinnodb_log_file_size = 256Minnodb_log_files_in_group = 2innodb_status_file = 1innodb_additional_mem_pool_size = 32Minnodb_buffer_pool_size = 5Ginnodb_data_file_path = ibdata1:1G:autoextendinnodb_file_per_table = 1innodb_additional_mem_pool_size = 32Minnodb_buffer_pool_size = 5Ginnodb_data_file_path = ibdata1:1G:autoextendinnodb_file_per_table = 1innodb_force_recovery = 0#innodb_table_locksinnodb_thread_concurrency = 8innodb_flush_log_at_trx_commit = 2innodb_force_recovery = 0#innodb_table_locksinnodb_thread_concurrency = 8innodb_flush_log_at_trx_commit = 2#slow logslow_query_log=1long_query_time=1slow_query_log_file=/var/lib/mysql/log/slow.log[mysqld_safe]#error loglog-error = /var/log/mysqld.logpid-file = /var/lib/mysql/mysql.pidopen-files-limit = 40960[mysqldump]quickmax_allowed_packet = 48M[mysql]no-auto-rehash# Remove the next comment character if you are not familiar with SQL#safe-updatesdefault-character-set=utf8[isamchk]key_buffer = 128Msort_buffer_size = 128Mread_buffer = 2Mwrite_buffer = 2M[myisamchk]key_buffer = 128Msort_buffer_size = 128Mread_buffer = 2Mwrite_buffer = 2M
转载地址：http://wtreo.baihongyu.com/