Nginx+Tomcat簡單集群

1.軟件准備
下載Nginx和Tomcat
解壓到一個目錄
2.修改Tomcat的端口
Tomcat1：修改Server.xml
Tomcat2：修改Server.xml
3.測試Tomcat是否正常運行
分別訪問兩個Tomcat
4.配置Nginx
主要配置
5.測試集群訪問
啟動Nginx
訪問測試
6.配置文件
Tomcat1 的Server.xml配置文件
Tomcat2 的Server.xml配置文件
Nginx配置文件
附錄：
參考文檔
（總結）Nginx配置文件nginx.conf中文詳解

1.軟件准備

下載Nginx和Tomcat

Nginx：http://nginx.org/en/download.html 這里需要下載穩定版：Stable version
Tomcat：下載就不說了，這里使用apache-tomcat-6.0.14版本

解壓到一個目錄

2.修改Tomcat的端口

Tomcat1：修改Server.xml

D:\nginx_cluster\apache-tomcat-6.0.14_1\conf\server.xml
共修改3處內容：將以下端口都加1

 
 
 
         

  
  
  
          
<!--第1處-->
  
  
  
          
<Server port="18005" shutdown="SHUTDOWN">
  
  
  
          
<!--第2處-->
  
  
  
          
<Connector port="18080" protocol="HTTP/1.1"
  
  
  
          
 connectionTimeout="20000"
  
  
  
          
 redirectPort="8443" />
  
  
  
          
<!--第3處-->
  
  
  
          
<Connector port="18009" protocol="AJP/1.3" redirectPort="8443" />
 
 
 
         

Tomcat2：修改Server.xml

D:\nginx_cluster\apache-tomcat-6.0.14_2\conf\server.xml
共修改3處內容：將以下端口都加2

 
 
 
         

  
  
  
          
<!--第1處-->
  
  
  
          
<Server port="28005" shutdown="SHUTDOWN">
  
  
  
          
<!--第2處-->
  
  
  
          
<Connector port="28080" protocol="HTTP/1.1"
  
  
  
          
 connectionTimeout="20000"
  
  
  
          
 redirectPort="8443" />
  
  
  
          
<!--第3處-->
  
  
  
          
<Connector port="28009" protocol="AJP/1.3" redirectPort="8443" />
 
 
 
         

3.測試Tomcat是否正常運行

分別訪問兩個Tomcat

http://localhost:18080/
http://localhost:28080/
都出現貓的頁面說明正常，為了區分不同的Tomcat，這里修改${Tmocat_home}\webapps\ROOT\ index.html文件內容，加入內容以便區分

 
 
 
         

  
  
  
          
<h1>This Tomcat1</h1>
 
 
 
         

之后再次訪問兩個Tomcat


至此，兩個Tomcat運行正常。

4.配置Nginx

修改Nginx的主配置文件：
D:\nginx_cluster\nginx-1.10.2\conf\ nginx.conf

 
 
 
         

  
  
  
          
#user nobody;
  
  
  
          
worker_processes 1;
  
  
  
          
#error_log logs/error.log;
  
  
  
          
#error_log logs/error.log notice;
  
  
  
          
#error_log logs/error.log info;
  
  
  
          
#pid logs/nginx.pid;
  
  
  
          
events {
  
  
  
          
 worker_connections 1024;
  
  
  
          
}
  
  
  
          
http {
  
  
  
          
 include mime.types;
  
  
  
          
 default_type application/octet-stream;
  
  
  
          
 #log_format main '$remote_addr - $remote_user [$time_local] "$request" '
  
  
  
          
 # '$status $body_bytes_sent "$http_referer" '
  
  
  
          
 # '"$http_user_agent" "$http_x_forwarded_for"';
  
  
  
          
 #access_log logs/access.log main;
  
  
  
          
 sendfile on;
  
  
  
          
 #tcp_nopush on;
  
  
  
          
 #keepalive_timeout 0;
  
  
  
          
 keepalive_timeout 65;
  
  
  
          
 #gzip on;
  
  
  
          
 #監聽localhost的80端口
  
  
  
          
 server {
  
  
  
          
 listen 80;
  
  
  
          
 server_name localhost; 
  
  
  
          
 location / {
  
  
  
          
 proxy_connect_timeout 3;
  
  
  
          
 proxy_send_timeout 30;
  
  
  
          
 proxy_read_timeout 30;
  
  
  
          
 proxy_pass http://localhost;
  
  
  
          
 }
  
  
  
          
 }
  
  
  
          
 # another virtual host using mix of IP-, name-, and port-based configuration
  
  
  
          
 #
  
  
  
          
 #server {
  
  
  
          
 # listen 8000;
  
  
  
          
 # listen somename:8080;
  
  
  
          
 # server_name somename alias another.alias;
  
  
  
          
 # location / {
  
  
  
          
 # root html;
  
  
  
          
 # index index.html index.htm;
  
  
  
          
 # }
  
  
  
          
 #}
  
  
  
          
 #集群配置：服務器列表
  
  
  
          
 upstream localhost {
  
  
  
          
 server localhost:18080 weight=2;#服務器配置 weight是權重的意思，權重越大，分配的概率越大。
  
  
  
          
 server localhost:28080 weight=1;
  
  
  
          
 }
  
  
  
          
 # HTTPS server
  
  
  
          
 #
  
  
  
          
 #server {
  
  
  
          
 # listen 443 ssl;
  
  
  
          
 # server_name localhost;
  
  
  
          
 # ssl_certificate cert.pem;
  
  
  
          
 # ssl_certificate_key cert.key;
  
  
  
          
 # ssl_session_cache shared:SSL:1m;
  
  
  
          
 # ssl_session_timeout 5m;
  
  
  
          
 # ssl_ciphers HIGH:!aNULL:!MD5;
  
  
  
          
 # ssl_prefer_server_ciphers on;
  
  
  
          
 # location / {
  
  
  
          
 # root html;
  
  
  
          
 # index index.html index.htm;
  
  
  
          
 # }
  
  
  
          
 #}
  
  
  
          
}
 
 
 
         

主要配置

至此，Nginx的簡單配置就完成了。下面開始測試

5.測試集群訪問

啟動Nginx

進入到Nginx目錄
啟動命令為：start nginx
停止命令為：nginx –s stop

訪問測試

訪問：http://localhost/
Nginx內部配置了監聽80端口，默認進行服務器的分發。


隨便刷新測試了10次，共訪問了Tomcat1共8次，Tomcat2共2次。可以看到權重越大，訪問到的概率越大。

6.配置文件

Tomcat1 的Server.xml配置文件

 
 
 
         

  
  
  
          
<!-- Note: A "Server" is not itself a "Container", so you may not
  
  
  
          
 define subcomponents such as "Valves" at this level.
  
  
  
          
 Documentation at /docs/config/server.html
  
  
  
          
 -->
  
  
  
          
<Server port="18005" shutdown="SHUTDOWN">
  
  
  
          

  
  
  
          
 <!--APR library loader. Documentation at /docs/apr.html -->
  
  
  
          
 <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  
  
  
          
 <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
  
  
  
          
 <Listener className="org.apache.catalina.core.JasperListener" />
  
  
  
          
 <!-- JMX Support for the Tomcat server. Documentation at /docs/non-existent.html -->
  
  
  
          
 <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  
  
  
          
 <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  
  
  
          

  
  
  
          
 <!-- Global JNDI resources
  
  
  
          
 Documentation at /docs/jndi-resources-howto.html
  
  
  
          
 -->
  
  
  
          
 <GlobalNamingResources>
  
  
  
          
 <!-- Editable user database that can also be used by
  
  
  
          
 UserDatabaseRealm to authenticate users
  
  
  
          
 -->
  
  
  
          
 <Resource name="UserDatabase" auth="Container"
  
  
  
          
 type="org.apache.catalina.UserDatabase"
  
  
  
          
 description="User database that can be updated and saved"
  
  
  
          
 factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
  
  
  
          
 pathname="conf/tomcat-users.xml" />
  
  
  
          
 </GlobalNamingResources>
  
  
  
          

  
  
  
          
 <!-- A "Service" is a collection of one or more "Connectors" that share
  
  
  
          
 a single "Container" Note: A "Service" is not itself a "Container", 
  
  
  
          
 so you may not define subcomponents such as "Valves" at this level.
  
  
  
          
 Documentation at /docs/config/service.html
  
  
  
          
 -->
  
  
  
          
 <Service name="Catalina">
  
  
  
          

  
  
  
          
 <!--The connectors can use a shared executor, you can define one or more named thread pools-->
  
  
  
          
 <!--
  
  
  
          
 <Executor name="tomcatThreadPool" namePrefix="catalina-exec-" 
  
  
  
          
 maxThreads="150" minSpareThreads="4"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          

  
  
  
          
 <!-- A "Connector" represents an endpoint by which requests are received
  
  
  
          
 and responses are returned. Documentation at :
  
  
  
          
 Java HTTP Connector: /docs/config/http.html (blocking & non-blocking)
  
  
  
          
 Java AJP Connector: /docs/config/ajp.html
  
  
  
          
 APR (HTTP/AJP) Connector: /docs/apr.html
  
  
  
          
 Define a non-SSL HTTP/1.1 Connector on port 8080
  
  
  
          
 -->
  
  
  
          
 <Connector port="18080" protocol="HTTP/1.1" 
  
  
  
          
 connectionTimeout="20000" 
  
  
  
          
 redirectPort="8443" />
  
  
  
          
 <!-- A "Connector" using the shared thread pool-->
  
  
  
          
 <!--
  
  
  
          
 <Connector executor="tomcatThreadPool"
  
  
  
          
 port="8080" protocol="HTTP/1.1" 
  
  
  
          
 connectionTimeout="20000" 
  
  
  
          
 redirectPort="8443" />
  
  
  
          
 --> 
  
  
  
          
 <!-- Define a SSL HTTP/1.1 Connector on port 8443
  
  
  
          
 This connector uses the JSSE configuration, when using APR, the 
  
  
  
          
 connector should be using the OpenSSL style configuration
  
  
  
          
 described in the APR documentation -->
  
  
  
          
 <!--
  
  
  
          
 <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
  
  
  
          
 maxThreads="150" scheme="https" secure="true"
  
  
  
          
 clientAuth="false" sslProtocol="TLS" />
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- Define an AJP 1.3 Connector on port 8009 -->
  
  
  
          
 <Connector port="18009" protocol="AJP/1.3" redirectPort="8443" />
  
  
  
          

  
  
  
          

  
  
  
          
 <!-- An Engine represents the entry point (within Catalina) that processes
  
  
  
          
 every request. The Engine implementation for Tomcat stand alone
  
  
  
          
 analyzes the HTTP headers included with the request, and passes them
  
  
  
          
 on to the appropriate Host (virtual host).
  
  
  
          
 Documentation at /docs/config/engine.html -->
  
  
  
          

  
  
  
          
 <!-- You should set jvmRoute to support load-balancing via AJP ie :
  
  
  
          
 <Engine name="Standalone" defaultHost="localhost" jvmRoute="jvm1"> 
  
  
  
          
 --> 
  
  
  
          
 <Engine name="Catalina" defaultHost="localhost">
  
  
  
          

  
  
  
          
 <!--For clustering, please take a look at documentation at:
  
  
  
          
 /docs/cluster-howto.html (simple how to)
  
  
  
          
 /docs/config/cluster.html (reference documentation) -->
  
  
  
          
 <!--
  
  
  
          
 <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
  
  
  
          
 --> 
  
  
  
          

  
  
  
          
 <!-- The request dumper valve dumps useful debugging information about
  
  
  
          
 the request and response data received and sent by Tomcat.
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.valves.RequestDumperValve"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- This Realm uses the UserDatabase configured in the global JNDI
  
  
  
          
 resources under the key "UserDatabase". Any edits
  
  
  
          
 that are performed against this UserDatabase are immediately
  
  
  
          
 available for use by the Realm. -->
  
  
  
          
 <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
  
  
  
          
 resourceName="UserDatabase"/>
  
  
  
          

  
  
  
          
 <!-- Define the default virtual host
  
  
  
          
 Note: XML Schema validation will not work with Xerces 2.2.
  
  
  
          
 -->
  
  
  
          
 <Host name="localhost" appBase="webapps"
  
  
  
          
 unpackWARs="true" autoDeploy="true"
  
  
  
          
 xmlValidation="false" xmlNamespaceAware="false">
  
  
  
          

  
  
  
          
 <!-- SingleSignOn valve, share authentication between web applications
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- Access log processes all example.
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" 
  
  
  
          
 prefix="localhost_access_log." suffix=".txt" pattern="common" resolveHosts="false"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 </Host>
  
  
  
          
 </Engine>
  
  
  
          
 </Service>
  
  
  
          
</Server>
 
 
 
         

Tomcat2 的Server.xml配置文件

 
 
 
         

  
  
  
          
<!-- Note: A "Server" is not itself a "Container", so you may not
  
  
  
          
 define subcomponents such as "Valves" at this level.
  
  
  
          
 Documentation at /docs/config/server.html
  
  
  
          
 -->
  
  
  
          
<Server port="28005" shutdown="SHUTDOWN">
  
  
  
          

  
  
  
          
 <!--APR library loader. Documentation at /docs/apr.html -->
  
  
  
          
 <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  
  
  
          
 <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
  
  
  
          
 <Listener className="org.apache.catalina.core.JasperListener" />
  
  
  
          
 <!-- JMX Support for the Tomcat server. Documentation at /docs/non-existent.html -->
  
  
  
          
 <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  
  
  
          
 <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  
  
  
          

  
  
  
          
 <!-- Global JNDI resources
  
  
  
          
 Documentation at /docs/jndi-resources-howto.html
  
  
  
          
 -->
  
  
  
          
 <GlobalNamingResources>
  
  
  
          
 <!-- Editable user database that can also be used by
  
  
  
          
 UserDatabaseRealm to authenticate users
  
  
  
          
 -->
  
  
  
          
 <Resource name="UserDatabase" auth="Container"
  
  
  
          
 type="org.apache.catalina.UserDatabase"
  
  
  
          
 description="User database that can be updated and saved"
  
  
  
          
 factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
  
  
  
          
 pathname="conf/tomcat-users.xml" />
  
  
  
          
 </GlobalNamingResources>
  
  
  
          

  
  
  
          
 <!-- A "Service" is a collection of one or more "Connectors" that share
  
  
  
          
 a single "Container" Note: A "Service" is not itself a "Container", 
  
  
  
          
 so you may not define subcomponents such as "Valves" at this level.
  
  
  
          
 Documentation at /docs/config/service.html
  
  
  
          
 -->
  
  
  
          
 <Service name="Catalina">
  
  
  
          

  
  
  
          
 <!--The connectors can use a shared executor, you can define one or more named thread pools-->
  
  
  
          
 <!--
  
  
  
          
 <Executor name="tomcatThreadPool" namePrefix="catalina-exec-" 
  
  
  
          
 maxThreads="150" minSpareThreads="4"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          

  
  
  
          
 <!-- A "Connector" represents an endpoint by which requests are received
  
  
  
          
 and responses are returned. Documentation at :
  
  
  
          
 Java HTTP Connector: /docs/config/http.html (blocking & non-blocking)
  
  
  
          
 Java AJP Connector: /docs/config/ajp.html
  
  
  
          
 APR (HTTP/AJP) Connector: /docs/apr.html
  
  
  
          
 Define a non-SSL HTTP/1.1 Connector on port 8080
  
  
  
          
 -->
  
  
  
          
 <Connector port="28080" protocol="HTTP/1.1" 
  
  
  
          
 connectionTimeout="20000" 
  
  
  
          
 redirectPort="8443" />
  
  
  
          
 <!-- A "Connector" using the shared thread pool-->
  
  
  
          
 <!--
  
  
  
          
 <Connector executor="tomcatThreadPool"
  
  
  
          
 port="8080" protocol="HTTP/1.1" 
  
  
  
          
 connectionTimeout="20000" 
  
  
  
          
 redirectPort="8443" />
  
  
  
          
 --> 
  
  
  
          
 <!-- Define a SSL HTTP/1.1 Connector on port 8443
  
  
  
          
 This connector uses the JSSE configuration, when using APR, the 
  
  
  
          
 connector should be using the OpenSSL style configuration
  
  
  
          
 described in the APR documentation -->
  
  
  
          
 <!--
  
  
  
          
 <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
  
  
  
          
 maxThreads="150" scheme="https" secure="true"
  
  
  
          
 clientAuth="false" sslProtocol="TLS" />
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- Define an AJP 1.3 Connector on port 8009 -->
  
  
  
          
 <Connector port="28009" protocol="AJP/1.3" redirectPort="8443" />
  
  
  
          

  
  
  
          

  
  
  
          
 <!-- An Engine represents the entry point (within Catalina) that processes
  
  
  
          
 every request. The Engine implementation for Tomcat stand alone
  
  
  
          
 analyzes the HTTP headers included with the request, and passes them
  
  
  
          
 on to the appropriate Host (virtual host).
  
  
  
          
 Documentation at /docs/config/engine.html -->
  
  
  
          

  
  
  
          
 <!-- You should set jvmRoute to support load-balancing via AJP ie :
  
  
  
          
 <Engine name="Standalone" defaultHost="localhost" jvmRoute="jvm1"> 
  
  
  
          
 --> 
  
  
  
          
 <Engine name="Catalina" defaultHost="localhost">
  
  
  
          

  
  
  
          
 <!--For clustering, please take a look at documentation at:
  
  
  
          
 /docs/cluster-howto.html (simple how to)
  
  
  
          
 /docs/config/cluster.html (reference documentation) -->
  
  
  
          
 <!--
  
  
  
          
 <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
  
  
  
          
 --> 
  
  
  
          

  
  
  
          
 <!-- The request dumper valve dumps useful debugging information about
  
  
  
          
 the request and response data received and sent by Tomcat.
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.valves.RequestDumperValve"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- This Realm uses the UserDatabase configured in the global JNDI
  
  
  
          
 resources under the key "UserDatabase". Any edits
  
  
  
          
 that are performed against this UserDatabase are immediately
  
  
  
          
 available for use by the Realm. -->
  
  
  
          
 <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
  
  
  
          
 resourceName="UserDatabase"/>
  
  
  
          

  
  
  
          
 <!-- Define the default virtual host
  
  
  
          
 Note: XML Schema validation will not work with Xerces 2.2.
  
  
  
          
 -->
  
  
  
          
 <Host name="localhost" appBase="webapps"
  
  
  
          
 unpackWARs="true" autoDeploy="true"
  
  
  
          
 xmlValidation="false" xmlNamespaceAware="false">
  
  
  
          

  
  
  
          
 <!-- SingleSignOn valve, share authentication between web applications
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 <!-- Access log processes all example.
  
  
  
          
 Documentation at: /docs/config/valve.html -->
  
  
  
          
 <!--
  
  
  
          
 <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" 
  
  
  
          
 prefix="localhost_access_log." suffix=".txt" pattern="common" resolveHosts="false"/>
  
  
  
          
 -->
  
  
  
          

  
  
  
          
 </Host>
  
  
  
          
 </Engine>
  
  
  
          
 </Service>
  
  
  
          
</Server>
 
 
 
         

Nginx配置文件

 
 
 
         

  
  
  
          

  
  
  
          
#user nobody;
  
  
  
          
worker_processes 1;
  
  
  
          

  
  
  
          
#error_log logs/error.log;
  
  
  
          
#error_log logs/error.log notice;
  
  
  
          
#error_log logs/error.log info;
  
  
  
          

  
  
  
          
#pid logs/nginx.pid;
  
  
  
          

  
  
  
          

  
  
  
          
events {
  
  
  
          
 worker_connections 1024;
  
  
  
          
}
  
  
  
          

  
  
  
          

  
  
  
          
http {
  
  
  
          
 include mime.types;
  
  
  
          
 default_type application/octet-stream;
  
  
  
          

  
  
  
          
 #log_format main '$remote_addr - $remote_user [$time_local] "$request" '
  
  
  
          
 # '$status $body_bytes_sent "$http_referer" '
  
  
  
          
 # '"$http_user_agent" "$http_x_forwarded_for"';
  
  
  
          

  
  
  
          
 #access_log logs/access.log main;
  
  
  
          

  
  
  
          
 sendfile on;
  
  
  
          
 #tcp_nopush on;
  
  
  
          

  
  
  
          
 #keepalive_timeout 0;
  
  
  
          
 keepalive_timeout 65;
  
  
  
          

  
  
  
          
 #gzip on;
  
  
  
          

  
  
  
          
 #監聽localhost的80端口
  
  
  
          
 server {
  
  
  
          
 listen 80;
  
  
  
          
 server_name localhost; 
  
  
  
          

  
  
  
          
 location / {
  
  
  
          
 proxy_connect_timeout 3;
  
  
  
          
 proxy_send_timeout 30;
  
  
  
          
 proxy_read_timeout 30;
  
  
  
          
 proxy_pass http://localhost;
  
  
  
          
 }
  
  
  
          
 }
  
  
  
          

  
  
  
          

  
  
  
          
 # another virtual host using mix of IP-, name-, and port-based configuration
  
  
  
          
 #
  
  
  
          
 #server {
  
  
  
          
 # listen 8000;
  
  
  
          
 # listen somename:8080;
  
  
  
          
 # server_name somename alias another.alias;
  
  
  
          

  
  
  
          
 # location / {
  
  
  
          
 # root html;
  
  
  
          
 # index index.html index.htm;
  
  
  
          
 # }
  
  
  
          
 #}
  
  
  
          

  
  
  
          
 #集群配置：服務器列表
  
  
  
          
 upstream localhost { 
  
  
  
          
 server localhost:18080 weight=2;#服務器配置 weight是權重的意思，權重越大，分配的概率越大。 
  
  
  
          
 server localhost:28080 weight=1;
  
  
  
          
 }
  
  
  
          

  
  
  
          
 # HTTPS server
  
  
  
          
 #
  
  
  
          
 #server {
  
  
  
          
 # listen 443 ssl;
  
  
  
          
 # server_name localhost;
  
  
  
          

  
  
  
          
 # ssl_certificate cert.pem;
  
  
  
          
 # ssl_certificate_key cert.key;
  
  
  
          

  
  
  
          
 # ssl_session_cache shared:SSL:1m;
  
  
  
          
 # ssl_session_timeout 5m;
  
  
  
          

  
  
  
          
 # ssl_ciphers HIGH:!aNULL:!MD5;
  
  
  
          
 # ssl_prefer_server_ciphers on;
  
  
  
          

  
  
  
          
 # location / {
  
  
  
          
 # root html;
  
  
  
          
 # index index.html index.htm;
  
  
  
          
 # }
  
  
  
          
 #}
  
  
  
          
}
 
 
 
         

附錄：

參考文檔

http://www.nginx.cn/doc/index.html
http://tengine.taobao.org/nginx_docs/cn/docs/
http://manual.51yip.com/nginx/

（總結）Nginx配置文件nginx.conf中文詳解

 
 
 
         

  
  
  
          
#定義Nginx運行的用戶和用戶組
  
  
  
          
user www www;
  
  
  
          
#nginx進程數，建議設置為等於CPU總核心數。
  
  
  
          
worker_processes 8;
  
  
  
          
#全局錯誤日志定義類型，[ debug | info | notice | warn | error | crit ]
  
  
  
          
error_log /var/log/nginx/error.log info;
  
  
  
          
#進程文件
  
  
  
          
pid /var/run/nginx.pid;
  
  
  
          
#一個nginx進程打開的最多文件描述符數目，理論值應該是最多打開文件數（系統的值ulimit -n）與nginx進程數相除，但是nginx分配請求並不均勻，所以建議與ulimit -n的值保持一致。
  
  
  
          
worker_rlimit_nofile 65535;
  
  
  
          
#工作模式與連接數上限
  
  
  
          
events
  
  
  
          
{
  
  
  
          
 #參考事件模型，use [ kqueue | rtsig | epoll | /dev/poll | select | poll ]; epoll模型是Linux 2.6以上版本內核中的高性能網絡I/O模型，如果跑在FreeBSD上面，就用kqueue模型。
  
  
  
          
 use epoll;
  
  
  
          
 #單個進程最大連接數（最大連接數=連接數*進程數）
  
  
  
          
 worker_connections 65535;
  
  
  
          
}
  
  
  
          
#設定http服務器
  
  
  
          
http
  
  
  
          
{
  
  
  
          
 include mime.types; #文件擴展名與文件類型映射表
  
  
  
          
 default_type application/octet-stream; #默認文件類型
  
  
  
          
 #charset utf-8; #默認編碼
  
  
  
          
 server_names_hash_bucket_size 128; #服務器名字的hash表大小
  
  
  
          
 client_header_buffer_size 32k; #上傳文件大小限制
  
  
  
          
 large_client_header_buffers 4 64k; #設定請求緩
  
  
  
          
 client_max_body_size 8m; #設定請求緩
  
  
  
          
 sendfile on; #開啟高效文件傳輸模式，sendfile指令指定nginx是否調用sendfile函數來輸出文件，對於普通應用設為 on，如果用來進行下載等應用磁盤IO重負載應用，可設置為off，以平衡磁盤與網絡I/O處理速度，降低系統的負載。注意：如果圖片顯示不正常把這個改成off。
  
  
  
          
 autoindex on; #開啟目錄列表訪問，合適下載服務器，默認關閉。
  
  
  
          
 tcp_nopush on; #防止網絡阻塞
  
  
  
          
 tcp_nodelay on; #防止網絡阻塞
  
  
  
          
 keepalive_timeout 120; #長連接超時時間，單位是秒
  
  
  
          
 #FastCGI相關參數是為了改善網站的性能：減少資源占用，提高訪問速度。下面參數看字面意思都能理解。
  
  
  
          
 fastcgi_connect_timeout 300;
  
  
  
          
 fastcgi_send_timeout 300;
  
  
  
          
 fastcgi_read_timeout 300;
  
  
  
          
 fastcgi_buffer_size 64k;
  
  
  
          
 fastcgi_buffers 4 64k;
  
  
  
          
 fastcgi_busy_buffers_size 128k;
  
  
  
          
 fastcgi_temp_file_write_size 128k;
  
  
  
          
 #gzip模塊設置
  
  
  
          
 gzip on; #開啟gzip壓縮輸出
  
  
  
          
 gzip_min_length 1k; #最小壓縮文件大小
  
  
  
          
 gzip_buffers 4 16k; #壓縮緩沖區
  
  
  
          
 gzip_http_version 1.0; #壓縮版本（默認1.1，前端如果是squid2.5請使用1.0）
  
  
  
          
 gzip_comp_level 2; #壓縮等級
  
  
  
          
 gzip_types text/plain application/x-javascript text/css application/xml;
  
  
  
          
 #壓縮類型，默認就已經包含text/html，所以下面就不用再寫了，寫上去也不會有問題，但是會有一個warn。
  
  
  
          
 gzip_vary on;
  
  
  
          
 #limit_zone crawler $binary_remote_addr 10m; #開啟限制IP連接數的時候需要使用
  
  
  
          
 upstream blog.ha97.com {
  
  
  
          
 #upstream的負載均衡，weight是權重，可以根據機器配置定義權重。weigth參數表示權值，權值越高被分配到的幾率越大。
  
  
  
          
 server 192.168.80.121:80 weight=3;
  
  
  
          
 server 192.168.80.122:80 weight=2;
  
  
  
          
 server 192.168.80.123:80 weight=3;
  
  
  
          
 }
  
  
  
          
 #虛擬主機的配置
  
  
  
          
 server {
  
  
  
          
 #監聽端口
  
  
  
          
 listen 80;
  
  
  
          
 #域名可以有多個，用空格隔開
  
  
  
          
 server_name www.ha97.com ha97.com;
  
  
  
          
 index index.html index.htm index.php;
  
  
  
          
 root /data/www/ha97;
  
  
  
          
 location ~ .*\.(php|php5)?$
  
  
  
          
 {
  
  
  
          
 fastcgi_pass 127.0.0.1:9000;
  
  
  
          
 fastcgi_index index.php;
  
  
  
          
 include fastcgi.conf;
  
  
  
          
 }
  
  
  
          
 #圖片緩存時間設置
  
  
  
          
 location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  
  
  
          
 {
  
  
  
          
 expires 10d;
  
  
  
          
 }
  
  
  
          
 #JS和CSS緩存時間設置
  
  
  
          
 location ~ .*\.(js|css)?$
  
  
  
          
 {
  
  
  
          
 expires 1h;
  
  
  
          
 }
  
  
  
          
 #日志格式設定
  
  
  
          
 log_format access '$remote_addr - $remote_user [$time_local] "$request" '
  
  
  
          
 '$status $body_bytes_sent "$http_referer" '
  
  
  
          
 '"$http_user_agent" $http_x_forwarded_for';
  
  
  
          
 #定義本虛擬主機的訪問日志
  
  
  
          
 access_log /var/log/nginx/ha97access.log access;
  
  
  
          
 #對 "/" 啟用反向代理
  
  
  
          
 location / {
  
  
  
          
 proxy_pass http://127.0.0.1:88;
  
  
  
          
 proxy_redirect off;
  
  
  
          
 proxy_set_header X-Real-IP $remote_addr;
  
  
  
          
 #后端的Web服務器可以通過X-Forwarded-For獲取用戶真實IP
  
  
  
          
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  
  
  
          
 #以下是一些反向代理的配置，可選。
  
  
  
          
 proxy_set_header Host $host;
  
  
  
          
 client_max_body_size 10m; #允許客戶端請求的最大單文件字節數
  
  
  
          
 client_body_buffer_size 128k; #緩沖區代理緩沖用戶端請求的最大字節數，
  
  
  
          
 proxy_connect_timeout 90; #nginx跟后端服務器連接超時時間(代理連接超時)
  
  
  
          
 proxy_send_timeout 90; #后端服務器數據回傳時間(代理發送超時)
  
  
  
          
 proxy_read_timeout 90; #連接成功后，后端服務器響應時間(代理接收超時)
  
  
  
          
 proxy_buffer_size 4k; #設置代理服務器（nginx）保存用戶頭信息的緩沖區大小
  
  
  
          
 proxy_buffers 4 32k; #proxy_buffers緩沖區，網頁平均在32k以下的設置
  
  
  
          
 proxy_busy_buffers_size 64k; #高負荷下緩沖大小（proxy_buffers*2）
  
  
  
          
 proxy_temp_file_write_size 64k;
  
  
  
          
 #設定緩存文件夾大小，大於這個值，將從upstream服務器傳
  
  
  
          
 }
  
  
  
          
 #設定查看Nginx狀態的地址
  
  
  
          
 location /NginxStatus {
  
  
  
          
 stub_status on;
  
  
  
          
 access_log on;
  
  
  
          
 auth_basic "NginxStatus";
  
  
  
          
 auth_basic_user_file conf/htpasswd;
  
  
  
          
 #htpasswd文件的內容可以用apache提供的htpasswd工具來產生。
  
  
  
          
 }
  
  
  
          
 #本地動靜分離反向代理配置
  
  
  
          
 #所有jsp的頁面均交由tomcat或resin處理
  
  
  
          
 location ~ .(jsp|jspx|do)?$ {
  
  
  
          
 proxy_set_header Host $host;
  
  
  
          
 proxy_set_header X-Real-IP $remote_addr;
  
  
  
          
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  
  
  
          
 proxy_pass http://127.0.0.1:8080;
  
  
  
          
 }
  
  
  
          
 #所有靜態文件由nginx直接讀取不經過tomcat或resin
  
  
  
          
 location ~ .*.(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$
  
  
  
          
 { expires 15d; }
  
  
  
          
 location ~ .*.(js|css)?$
  
  
  
          
 { expires 1h; }
  
  
  
          
 }
  
  
  
          
}
 
 
 
         

來自為知筆記(Wiz)