PS: Nginx has been used for two or three years. Now I often encounter new users asking some very basic questions. I don’t have time to answer them one by one. I spent some time this afternoon and combined my own experience to configure the main Nginx. Share the parameter descriptions, and also refer to some network content. This is the most complete Chinese description of Nginx configuration parameters. For more detailed module parameters, please refer to: http://wiki.nginx.org/Main
#Define the user and user group where Nginx runs
user www www;
#nginx process number, it is recommended to set it equal to the total number of CPU cores.
worker_processes 8;
#Global error log definition type, [ debug | info | notice | warn | error | crit ]
error_log ar/loginx/error.log info;
#process file
pid ar/runinx.pid;
#The maximum number of file descriptors opened by an nginx process, the theoretical value should be the maximum number of open files (the system value ulimit -n) divided by the number of nginx processes, but nginx allocates requests unevenly, so it is recommended to use ulimit -n The value remains the same.
worker_rlimit_nofile 65535;
#Working mode and connection limit
events
{
#Refer to the event model, use [ kqueue | rtsig | epoll | /dev/poll | select | poll ]; The epoll model is a high-performance network I/O model in the Linux kernel version 2.6 and above. If running on FreeBSD, use kqueue Model.
use epoll;
#Maximum number of connections for a single process (maximum number of connections = number of connections * number of processes)
worker_connections 65535;
}
#Set up the http server
http
{
include mime.types; #file extension and file type mapping table
default_type application/octet-stream; #default file type
#charset utf-8; #default encoding
server_names_hash_bucket_size 128; #The size of the hash table of the server name
client_header_buffer_size 32k; #Upload file size limit
large_client_header_buffers 4 64k; #Set request buffer
client_max_body_size 8m; #Set the request buffer
sendfile on; #Enable efficient file transfer mode. The sendfile command specifies whether nginx calls the sendfile function to output files. It is set to on for ordinary applications. If it is used for applications such as downloading and other applications with heavy disk IO load, it can be set to off to balance the disk. With the network I/O processing speed, the system load is reduced. Note: If the picture is not displayed properly, change this to off.
autoindex on; #Enable directory list access, suitable for download servers, closed by default.
tcp_nopush on; #Prevent network congestion
tcp_nodelay on; #Prevent network blocking
keepalive_timeout 120; #Long connection timeout, in seconds
#FastCGI related parameters are to improve the performance of the website: reduce resource usage and improve access speed. The following parameters can be understood literally.
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 128k;
#gzip module settings
gzip on; #Enable gzip compression output
gzip_min_length 1k; #Minimum compressed file size
gzip_buffers 4 16k; #Compression buffer
gzip_http_version 1.0; #Compression version (default 1.1, if the front end is squid2.5, please use 1.0)
gzip_comp_level 2; #compression level
gzip_types text/plain application/x-javascript text/css application/xml;
#Compression type, textml is included by default, so there is no need to write it below, and there will be no problem in writing it, but there will be a warn.
gzip_vary on;
#limit_zone crawler $binary_remote_addr 10m; #Need to use when limiting the number of IP connections
upstream blog.ha97.com {
#Upstream load balancing, weight is the weight, which can be defined according to the machine configuration. The weight parameter represents the weight, and the higher the weight, the greater the probability of being assigned.
server 192.168.80.121:80 weight=3;
server 192.168.80.122:80 weight=2;
server 192.168.80.123:80 weight=3;
}
#Configuration of virtual host
server
{
#Listening port
listen 80;
# There can be multiple domain names, separated by spaces
server_name www.ha97.com ha97.com;
index index.html index.htm index.php;
root /data/www/ha97;
location ~ .*.(php|php5)?$
{
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi.conf;
}
#Image cache time setting
location ~ .*.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 10d;
}
#JS and CSS cache time settings
location ~ .*.(js|css)?$
{
expires 1h;
}
# log format settings
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
#Define the access log of this virtual host
access_log ar/loginx/ha97access.log access;
#Enable reverse proxy for "/"
location / {
proxy_pass http://127.0.0.1:88;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
#The back-end web server can obtain the user's real IP through X-Forwarded-For
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#The following are some reverse proxy configurations, optional.
proxy_set_header Host $host;
client_max_body_size 10m; #The maximum number of bytes of a single file requested by the client
client_body_buffer_size 128k; #The buffer proxy buffers the maximum number of bytes requested by the client,
proxy_connect_timeout 90; #nginx connects to the backend server time out (the proxy connection time out)
proxy_send_timeout 90; #Backend server data return time (Proxy send timeout)
proxy_read_timeout 90; #After the connection is successful, the backend server response time (the proxy receives the timeout)
proxy_buffer_size 4k; #Set the buffer size of the proxy server (nginx) to save the user header information
proxy_buffers 4 32k; #proxy_buffers buffer, the average web page is set below 32k
proxy_busy_buffers_size 64k; #Buffer size under high load (proxy_buffers*2)
proxy_temp_file_write_size 64k;
#Set the size of the cache folder, if it is larger than this value, it will be uploaded from the upstream server
}
#Set the address for viewing Nginx status
location /NginxStatus {
stub_status on;
access_log on;
auth_basic "NginxStatus";
auth_basic_user_file confpasswd;
The content of the #htpasswd file can be generated with the htpasswd tool provided by apache.
}
#Local dynamic and static separation reverse proxy configuration
#All jsp pages are handled by tomcat or resin
location ~ .(jsp|jspx|do)?$ {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:8080;
}
#All static files are read directly by nginx without tomcat or resin
location ~ .*.(htm|html|gif|jpg|jpeg|png|bmp|swf|ioc|rar|zip|txt|flv|mid|doc|ppt|pdf|xls|mp3|wma)$
{ expires 15d; }
location ~ .*.(js|css)?$
{ expires 1h; }
}
}
For more detailed module parameters, please refer to: http://wiki.nginx.org/Main