LinuxApacheNginxMySQLPHP前后端部署生产环境.doc

网站的成功与否，与其稳定的性能有很大的关系。高配硬件对于很多草根站长而言，实在是望价止步。就拿一款512M的VPS来说，Apache固然强大又稳定，但动辄200M+的内存，实在不是首选，而Nginx、Lighttpd这类的程序，内存消耗低、速度快，但又不是很稳定，一旦在线人数过多或动态连接数过高，Nginx就歇菜了，直接丢个502错误。不过，程序是人写的，方案也是可以由我们而改进的。既然Nginx处理静态文件强悍，Apache处理动态稳定，那我们干脆可以将Apache替代fcgi与Nginx结合。将Nginx作为前端处理静态，Apache后置处理动态，简称LANMP或LNAMP。网上已经有LNAMP一键安装包了，不过不是很理想，网上很多类似的教程我没一次测试成功过，很纠结。于是我参考了一些资料，做了一个适合大部分新手都可以使用并快速修改的方案，以此来解决502瓶颈！ 此方案的程序要求：Centos 5+PHP 5.2.xMySQL 5.1.xNginx 0.8.x硬件要求：CPU：无，尽可能两核心+内存：256M+ 内存偏小的话，建议直接用Nginx吧，这个方案是以稳定为主，不是用来拼命缩减内存消耗的1，重装Centos系统，并删除不比要的程序：yum -y remove httpd mysql php2，安装相关组件：yum -y install yum-fastestmirroryum -y updateyum -y install patch make gcc gcc-c+ gcc-g77 flex bison taryum -y install libtool libtool-libs kernel-devel autoconf213yum -y install libjpeg libjpeg-devel libpng libpng-develyum -y install libtiff libtiff-devel gettext gettext-develyum -y install freetype freetype-devel libxml2 libxml2-devel zlib zlib-develyum -y install file glib2 glib2-devel bzip2 diff* openldap-develyum -y install bzip2-devel ncurses ncurses-devel curl curl-devel e2fsprogsyum -y install e2fsprogs-devel krb5 krb5-devel libidn libidn-develyum -y install openssl openssl-devel vim-minimal unzipexport PHP_AUTOCONF=/usr/bin/autoconf-2.13export PHP_AUTOHEADER=/usr/bin/autoheader-2.13安装PHP 5.2.x 所需的支持库cd /usr/local/srcwget -c /pub/gnu/libiconv/libiconv-1.13.1.tar.gztar zxvf libiconv-1.13.1.tar.gzcd libiconv-1.13.1/./configure -prefix=/usr/localmakemake installcd ./wget -c /provos/libevent-1.4.14b-stable.tar.gztar zxvf libevent-1.4.14b-stable.tar.gzcd libevent-1.4.14b-stable/./configure -prefix=/usrmakemake installcd ./wget -c /sourceforge/mcrypt/libmcrypt-2.5.8.tar.gztar zxvf libmcrypt-2.5.8.tar.gzcd libmcrypt-2.5.8/./configuremakemake install/sbin/ldconfigcd libltdl/./configure -enable-ltdl-installmakemake installcd ././wget -c /sourceforge/mhash/mhash-.tar.gztar zxvf mhash-.tar.gzcd mhash-/./configuremakemake installcd ./ln -s /usr/local/lib/libmcrypt.la /usr/lib/libmcrypt.laln -s /usr/local/lib/libmcrypt.so /usr/lib/libmcrypt.soln -s /usr/local/lib/libmcrypt.so.4 /usr/lib/libmcrypt.so.4ln -s /usr/local/lib/libmcrypt.so.4.4.8 /usr/lib/libmcrypt.so.4.4.8ln -s /usr/local/lib/libmhash.a /usr/lib/libmhash.aln -s /usr/local/lib/libmhash.la /usr/lib/libmhash.laln -s /usr/local/lib/libmhash.so /usr/lib/libmhash.soln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2ln -s /usr/local/lib/libmhash.so.2.0.1 /usr/lib/libmhash.so.2.0.1ln -s /usr/local/bin/libmcrypt-config /usr/bin/libmcrypt-configwget -c /sourceforge/mcrypt/mcrypt-2.6.8.tar.gztar zxvf mcrypt-2.6.8.tar.gzcd mcrypt-2.6.8/./configuremakemake installcd ./3，安装 Mysql 5.1.x先安装Google的开源TCMalloc库，可以提高MySQL在高并发情况下的性能wget -c /files/google-perftools-1.6.tar.gztar zxvf google-perftools-1.6.tar.gzcd google-perftools-1.6/./configuremake & make installecho /usr/local/lib /etc/ld.so.conf.d/usr_local_lib.conf/sbin/ldconfigcd ./安装之后，开始安装Mysql 5.1.xwget -c serve.nl/Downloads/MySQL-5.1/mysql-5.1.53.tar.gztar -zxvf mysql-5.1.53.tar.gzcd mysql-5.1.53./configure -prefix=/usr/local/mysql -with-extra-charsets=all -enable-thread-safe-client -enable-assembler -with-charset=utf8 -enable-thread-safe-client -with-big-tables -with-readline -with-ssl -with-embedded-server -enable-local-infile -without-debug -with-mysqld-ldflags=-ltcmalloc_minimalmake & make installcd ./groupadd mysqluseradd -g mysql mysqlcp /usr/local/mysql/share/mysql/f /etc/f/usr/local/mysql/bin/mysql_install_db -user=mysqlchown -R mysql /usr/local/mysql/varchgrp -R mysql /usr/local/mysql/.cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqlchmod 755 /etc/init.d/mysqlchkconfig -level 345 mysql onecho /usr/local/mysql/lib/mysql /etc/ld.so.confecho /usr/local/lib /etc/ld.so.confldconfigln -s /usr/local/mysql/lib/mysql /usr/lib/mysqlln -s /usr/local/mysql/include/mysql /usr/include/mysqlservice mysql start/usr/local/mysql/bin/mysqladmin -u root password 11111111 /修改红色部分为你的密码service mysql restart打开“/etc/f”文件，修改以下设置，如果没有，可手动添加。 关闭远程连接，即3306端口。这是MySQL的默认监听端口。由于此处MySQL只服务于本地脚本，所以不需要远程连接。尽管MySQL内建的安全机制很严格，但监听一个TCP端口仍然是危险的行为，因为如果MySQL程序本身有问题，那么未授权的访问完全可以绕过MySQL的内建安全机制。（你必须确定，你是否真的不需要远程连接mysql，一般数据库地址为localhost的，即使本地数据库，不需要外链）skip-networking保存后退出。修改完f后，还需要对mysql的用户名、帐号、及默认数据库进行调整首先先登录mysql，在终端窗口输入/usr/local/mysql/bin/mysql -u root p然后会提示输入密码，输入正确密码后，会出现mysql提示符。输入以下命令：mysqluse mysql;mysqlselect Host,User,Password,Select_priv,Grant_priv from user;mysqldelete from user where user=; （删除user用户）mysqldelete from user where password=; （删除user用户）mysqldelete from user where host=; （删除user用户）mysqldrop database test; (删除默认的test数据库)mysqlflush privileges; （刷新mysql的缓存，让以上设置立即生效）mysqlquit;为了使以上优化和安全设置生效，请重启Mysql服务或Linux。service mysql restart4，安装GD图形支持库：cd /usr/local/srcwget /releases/gd-2.0.35.tar.gztar xzvf gd-2.0.35.tar.gzcd gd-2.0.35./configure -prefix=/usr/local/gd -mandir=/usr/share/man -with-jpeg -with-png -with-freetype -with-zlib -with-fontconfigmake /如果GD报错:configure.ac:64: warning: macro AM_ICONV not found in library 你就make clean一下，然后再makemake install5，安装Apache：cd /usr/local/srcgroupadd wwwuseradd -g www -s /sbin/nologin -M wwwwget /httpd/httpd-2.2.17.tar.gztar zxvf httpd-2.2.17.tar.gzcd httpd-2.2.17Apache默认最大连接数和最大客户端数为40000，如果你的服务器要求更大，可以编译Apache安装文件中的：server/mpm/worker/worker.c找到下面几行，并改成如下的数值，其目的是在源码中修改apache可支持的最大线程数和最大客户端数目。define DEFAULT_SERVER_LIMIT 32define MAX_SERVER_LIMIT 40000define DEFAULT_THREAD_LIMIT 64define MAX_THREAD_LIMIT 40000以上数值据说改小后，能减低服务器消耗。不过柒月修改后，发现没什么实质变化。5.1，依次安装apr和apr-utilcd srclib/apr./configure -prefix=/usr/local/aprmake & make installcd ./apr-util./configure -prefix=/usr/local/apr-util -with-apr=/usr/local/apr/ -with-mysql=/usr/local/mysqlmake & make install5.2，安装Apache 2.2cd /usr/local/src/httpd-2.2.17./configure -prefix=/usr/local/apache2 -with-mysql=/usr/local/mysql -with-apr=/usr/local/apr/ -with-apr-util=/usr/local/apr-util/ -enable-so -enable-rewrite -with-mpm=prefork -disable-cgid -disable-cgimake & make install如果你需要编译apache其他功能，可以自行增加。不过在这里，我们只是用Apache作为后端并处理伪静态，无需添加过多设置来浪费内存注解：./configure /配置源代码树-prefix=/usr/local/apache2 /体系无关文件的顶级安装目录PREFIX ，也就Apache的安装目录。-enable-module=so /打开 so 模块，so 模块是用来提 DSO 支持的 apache 核心模块-enable-mods-shared=all /编译全部的模板，对于不需要我们可以在httpd.conf去掉。-enable-cache /支持缓存-enable-file-cache /支持文件缓存-enable-mem-cache /支持记忆缓存-enable-disk-cache /支持磁盘缓存-enable-static-support /支持静态连接(默认为动态连接)-enable-static-htpasswd /使用静态连接编译 htpasswd - 管理用于基本认证的用户文件-enable-static-htdigest /使用静态连接编译 htdigest - 管理用于摘要认证的用户文件-enable-static-rotatelogs /使用静态连接编译 rotatelogs - 滚动 Apache 日志的管道日志程序-enable-static-logresolve /使用静态连接编译 logresolve - 解析 Apache 日志中的IP地址为主机名-enable-static-htdbm /使用静态连接编译 htdbm - 操作 DBM 密码数据库-enable-static-ab /使用静态连接编译 ab - Apache HTTP 服务器性能测试工具-enable-static-checkgid /使用静态连接编译 checkgid-disable-cgid /禁止用一个外部 CGI 守护进程执行CGI脚本-disable-cgi /禁止编译 CGI 版本的 PHP-with-mpm=worker / 让apache以worker方式运行-enable-ssl / 编译 ssl模块。启动Apache（建议先不要启动，等我们全部设置完毕后，和Nginx启动）/usr/local/apache2/bin/apachectl start查看apache是否启动ps aux|grep httpd将apache设置成开机自启动：echo /usr/local/apache2/bin/apachectl start /etc/rc.local /将 apachectl 的调用加入到你的系统启动文件中。6，安装 PHP5.2.xcd /usr/local/srcwget -c /distributions/php-5.2.14.tar.gzwget /suhosin-patch-5.2.14-0.9.7.patch.gztar zxvf php-5.2.14.tar.gzgunzip suhosin-patch-5.2.14-0.9.7.patch.gzcd php-5.2.14patch -p 1 -i ./suhosin-patch-5.2.14-0.9.7.patch./buildconf -force./configure -prefix=/usr/local/php -with-apxs2=/usr/local/apache2/bin/apxs -with-mysql=/usr/local/mysql -with-mysqli=/usr/local/mysql/bin/mysql_config -with-config-file-path=/etc -with-zlib -with-libxml-dir -with-gd=/usr/local/gd -with-freetype-dir -with-jpeg-dir -with-png-dir -with-ttf -with-iconv -with-openssl -with-mcrypt -enable-sockets -enable-bcmath -enable-calendar -enable-exif -enable-libxml -enable-magic-quotes -enable-mbstring -with-bz2 -with-curl -with-xmlrpc -with-gettext -enable-suhosin -disable-cli -disable-cgi -disable-debugmake ZEND_EXTRA_LIBS=-liconvmake installcp php.ini-dist /etc/php.ini6.1，安装PHP扩展：6.1.1，安装eaccelerator加速软件eaccelerator是php的加速软件，使用后php的执行效率会有很大幅度的提升。cd /usr/local/srcwget /source//eaccelerator-.tar.bz2tar -jxvf eaccelerator-.tar.bz2cd eaccelerator-/usr/local/php/bin/phpize./configure -enable-eaccelerator=shared -with-php-config=/usr/local/php/bin/php-configmake & make install编译安装后我们会看到屏幕提示的eaccelerator.so所在的目录，php5.2.x系列是在 /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/，记住这个路径，待会要用到修改php.ini 文件，将以下内容输入（详细设置）：eacceleratorzend_extension=/usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/eaccelerator.soeaccelerator.shm_size=16eaccelerator.cache_dir=/tmp/eacceleratoreaccelerator.enable=1eaccelerator.optimizer=1eaccelerator.check_mtime=1eaccelerator.debug=0eaccelerator.filter=eaccelerator.shm_max=0eaccelerator.shm_ttl=3600eaccelerator.shm_prune_period=3600eaccelerator.shm_only=0press=1press_level=9注意：这部分内容务必放在zend之前，不然可能会出现不可预期的服务器问题。然后建立文件夹并设置权限：mkdir /tmp/eacceleratorchmod 777 /tmp/eaccelerator6.1.2，安装Zend（如果程序没要求，尽量不要装Zend，容易和eA产生冲突）：cd /usr/local/srcwget /optimizer/3.3.9/ZendOptimizer-3.3.9-linux-glibc23-i386.tar.gztar -zxvf ZendOptimizer-3.3.9-linux-glibc23-i386.tar.gzcp ZendOptimizer-3.3.9-linux-glibc23-i386/data/5_2_x_comp/ZendOptimizer.so /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/修改php.ini 文件：vi /usr/local/php/php.ini将以下代码放入php.ini文件最底部Zend Optimizerzend_optimizer.optimization_level=1zend_optimizer.encoder_loader=0zend_extension=/usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/ZendOptimizer.so6.1.3，安装PDO_MYSQLcd /usr/local/srcwget -c /get/PDO_MYSQL-1.0.2.tgztar zxvf PDO_MYSQL-1.0.2.tgzcd PDO_MYSQL-1.0.2/usr/local/php/bin/phpize./configure -with-php-config=/usr/local/php/bin/php-config -with-pdo-mysql=/usr/local/mysqlmakemake install继续修改 php.ini 文件vi /usr/local/php/php.ini查找代码：extension_dir = ./替换为：extension_dir = /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/extension=pdo_mysql.so7，Apache 整合 PHP 以及相关优化：编辑 httpd.conf ：vi /usr/local/apache2/conf/httpd.conf查找代码：DocumentRoot /usr/local/apache2/htdocs修改为：DocumentRoot /home/www查找代码：修改为：找到以下代码并根据提示修改Options FollowSymLinksAllowOverride AllOrder deny,allowDeny from all /这句改为Allow from all找到这一段并修改，以使Apache支持rewrite（伪静态）：# AllowOverride controls what directives may be placed in .htaccess files.# It can be All, None, or any combination of the keywords:# Options FileInfo AuthConfig Limit#AllowOverride None更改为AllowOverride All将以下代码注释掉，禁止目录列表：Options Indexes FollowSymLinks找到以下代码，修改用户为 wwwUser daemon /改为wwwGroup daemon /改为www设置 ServerAdmin 改为你自己的mail地址查找：Listen 80 改为 Listen 81分别找到以下四段代码，将之前的注释#去除：Include conf/extra/httpd-mpm.confInclude conf/extra/httpd-info.confInclude conf/extra/httpd-vhosts.confInclude conf/extra/httpd-default.conf编辑 Include conf/extra/httpd-mpm.conf 找到如下选项，并改成对应的数值StartServers 5MinSpareServers 5MaxSpareServers 10MaxClients 150MaxRequestsPerChild 1000编辑 conf/extra/httpd-default.confTimeout 60 #与nginx的保持一至KeepAlive OnMaxKeepAliveRequests 1000KeepAliveTimeout 5复制以下文件：cp /usr/local/apache2/bin/apachectl /etc/rc.d/init.d/httpd然后 vi /etc/rc.d/init.d/httpd 添加(#!/bin/sh下面)chkconfig: 2345 10 90description: Activates/Deactivates Apache Web Server最后，运行chkconfig把Apache添加到系统的启动服务组里面：chkconfig -add httpdchkconfig httpd on这样以后Apache 启动、关闭、重启只需要输入以下命令：service httpd start/stop/restart整合Apache与php编辑 /usr/local/apache2/conf/httpd.conf找到AddType application/x-gzip .gz .tgz在其下加以下内容AddType application/x-httpd-php .phpAddType application/x-httpd-php-source .phps查找:(设置WEB默认文件)DirectoryIndex index.html改成：DirectoryIndex index.php index.htm index.html index.html.var保存退出以上设置完毕后，全部保存退出，然后建立一个虚拟主机做测试：编辑 Include conf/extra/httpd-vhosts.confServerAdmin DocumentRoot /home/wwwServerName 你的IP地址或域名ErrorLog logs/IP-error_logCustomLog logs/IP-access_log common保存退出，并重启Apacheservice httpd restart 或 /usr/local/apache2/bin/apachectl restart然后建立一个 index.php文件，放入 /home/www 目录，php文件内容为：然后在浏览器中输入：IP:81 是否成功显示了？8，优化MySQL通过Tcmalloc 优化mysql性能# vi /etc/init.d/mysqld添加一行export LD_PRELOAD=/usr/local/lib/libtcmalloc.so重新启动mysqlservice mysql restart检测是否成功，在SSH中输入：lsof -n|grep tcmalloc出现相关进程即可9，安装Nginx：9.1，安装所需组件：cd /usr/local/srcwget /sourceforge/pcre/pcre-8.10.tar.gztar zxvf pcre-8.10.tar.gzcd pcre-8.10./configuremake & make installcd .rm -rf pcre-8.10rm -rf /usr/bin/pcre-configcp -a /usr/local/bin/pcre-config /usr/bin/rm -rf /usr/lib/libpcre.acp -a /usr/local/lib/libpcre.a /usr/lib/9.2，安装 Nginx 0.8.x：cd /usr/local/srcwget -c /download/nginx-0.8.53.tar.gztar zxvf nginx-0.8.53.tar.gzcd nginx-0.8.53./configure -user=www -group=www -prefix=/usr/local/nginx -pid-path=/usr/local/nginx/logs/nginx.pid -error-log-path=/usr/local/nginx/logs/error.log -http-log-path=/usr/local/nginx/logs/access.log -with-http_stub_status_module -with-http_ssl_module -http-client-body-temp-path=/tmp/nginx_client -http-proxy-temp-path=/tmp/nginx_proxy -http-fastcgi-temp-path=/tmp/nginx_fastcgi -with-http_gzip_static_module -with-google_perftools_module -with-ld-opt=-ltcmalloc_minimalmake & make installcd ./编辑 nginx.conf 文件：vi /usr/local/nginx/conf/nginx.conf输入以下内容：user www;worker_processes 4;pid logs/nginx.pid;google_perftools_profiles /var/tmp/tcmalloc;worker_rlimit_nofile 51200;eventsuse epoll;worker_connections 51200;httpinclude mime.types;default_type application/octet-stream;access_log off;error_log /dev/null;server_names_hash_bucket_size 128;client_header_buffer_size 32k;large_client_header_buffers 4 32k;client_max_body_size 8m;sendfile on;tcp_nopush on;keepalive_timeout 120;#fastcgi_connect_timeout 300;#fastcgi_send_timeout 300;#fastcgi_read_timeout 300;#fastcgi_buffer_size 64k;#fastcgi_buffers 4 64k;#fastcgi_busy_buffers_size 128k;#fastcgi_temp_file_write_size 128k;tcp_nodelay on;gzip on;gzip_min_length 1k;gzip_buffers 4 16k;gzip_http_version 1.0;gzip_comp_level 2;gzip_types text/plain application/x-javascript text/css application/xml;gzip_vary on;include vhost/*.conf;在 /usr/local/nginx/conf 目录 新建proxy.conf 文件，并输入以下内容：proxy_redirect off;proxy_set_header Host $host;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;client_max_body_size 50m;client_body_buffer_size 256k;proxy_connect_timeout 30;proxy_send_timeout 30;proxy_read_timeout 60;proxy_buffer_size 4k;proxy_buffers 4 32k;proxy_busy_buffers_size 64k;proxy_temp_file_write_size 64k;proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;proxy_max_temp_file_size 128m;#Nginx cacheclient_body_temp_path client_body 1 2;proxy_temp_path proxy_temp 1 2;#client_body_temp_path /tmpfs/client_body_temp 1 2;#proxy_temp_path /tmpfs/proxy_temp 1 2;#fastcgi_temp_path /tmpfs/fastcgi_temp 1 2;建立 Nginx虚拟主机目录，把nginx加入到系统服务：mkdir -p /usr/local/nginx/conf/vhostchown www -R /home/www/chown www /usr/local/nginx/conf/chmod 777 /etc/init.d/nginxchkconfig -level 345 nginx onservice mysql start/etc/init.d/nginx start编辑 /etc/rc.d/init.d/nginx 文件，覆盖为以下代码：#! /bin/shulimit -n 65535# Description: Startup script for nginx# chkconfig: 2345 55 25PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/binDESC=nginx daemonNAME=nginxDAEMON=/usr/local/nginx/sbin/$NAMECONFIGFILE=/usr/local/nginx/conf/nginx.confPIDFILE=/usr/local/nginx/logs/$NAME.pidSCRIPTNAME=/etc/init.d/$NAMEset -e -x $DAEMON | exit 0do_start() $DAEMON -c $CONFIGFILE | echo -n nginx already runningdo_stop() kill -QUIT cat $PIDFILE | echo -n nginx not runningdo_reload() kill -HUP cat $PIDFILE | echo -n nginx cant reloadcase $1 instart)echo -n Starting $DESC: $NAMEdo_startecho ./etc/init.d/httpd start;stop)echo -n Stopping $DESC: $NAMEdo_stopecho ./etc/init.d/httpd stop;reload)echo -n Reloading $DESC configuration.do_reloadecho ./etc/init.d/httpd restart;restart)echo -n Restarting $DESC: $NAMEdo_sto