中标麒麟7操作系统安装Nginx

一、准备工作

各安装包下载:
1.nginx安装包
2.依赖包:gzip模块需要zlib库、rewrite模块需要pcre库、ssl功能需要openssl库
3.打包下载地址:https://download.csdn.net/download/shanghailuchaochao/11242658
4.依赖库安装确认:
yum install perl 
yum install gcc
yum install gcc-c++
yum -y install net-tools

二、开始安装

将下载下载的包放到 /home/nginx_install
1.安装openssl-1.0.2o.tar.gz

cd /home/nginx_install

tar -zxvf openssl-1.0.2o.tar.gz

cd openssl-1.0.2o

#prefix配置安装路径 

./config --prefix=/opt/ldkjdata/nginx/openssl-1.0.2o 

make

make install

2.安装zlib-1.2.8.tar.gz

cd /home/nginx_install

tar -zxvf zlib-1.2.11.tar.gz 

cd zlib-1.2.11 

./configure --prefix=/opt/ldkjdata/nginx/zlib-1.2.11 

make 

make install

3.安装pcre-8.38.tar.gz

cd /home/nginx_install 

tar -zxvf pcre-8.38.tar.gz 

cd pcre-8.38

./configure --prefix=/opt/ldkjdata/nginx/pcre-8.38 

make 

make install

4.安装nginx

cd /home/nginx_install 

tar -zxvf nginx-1.14.0.tar.gz 

cd nginx-1.14.0

./configure --with-pcre=../pcre-8.38 --with-zlib=../zlib-1.2.11 --with-openssl=../openssl-1.0.2o --with-http_ssl_module --prefix=/opt/ldkjdata/nginx/nginx-1.14.0

make

make install

5.检测是否安装成功

cd /opt/ldkjdata/nginx/nginx-1.14.0/sbin
./nginx -t
#看到如下提示,表示安装成功。
nginx: the configuration file /opt/ldkjdata/nginx/nginx-1.14.0/conf/nginx.conf syntax is ok
nginx: configuration file /opt/ldkjdata/nginx/nginx-1.14.0/conf/nginx.conf test is successful

6.Nginx启动和端口查看

cd /opt/ldkjdata/nginx/nginx-1.14.0/sbin
./nginx 启动
./nginx -s stop 停止
./nginx -s reload 修改配置后重新加载配置
netstat -ntlp 查看tcp是否正常监听

三、配置转发例子

配置文件:/opt/ldkjdata/nginx/nginx-1.14.0/conf/nginx.conf

1.简单实例

1.需求
短信服务器列表三台,提供服务的地址如下:

http://192.168.88.21:8091/smsserver/services/sendSms?wsdl
http://192.168.88.22:8091/smsserver/services/sendSms?wsdl
http://192.168.88.23:8091/smsserver/services/sendSms?wsdl
彩信服务器列表三台,提供服务的地址如下:

http://192.168.88.21:8092/msserver/services/sendMms?wsdl
http://192.168.88.22:8092/mmsserver/services/sendMms?wsdl
http://192.168.88.23:8092/mmsserver/services/sendMms?wsdl 

Nginx安装在另外一台单独机器上(公网IP为public_ip),对外提供服务地址如下:
http://public_ip:8090/smsserver/services/sendSms?wsdl 短信发送服务
http://public_ip:8090/mmsserver/services/sendMms?wsdl 彩信发送服务

2.对于以上需求,配置/opt/nginx-1.8.0/conf/nginx.conf如下:
#user nobody; 
worker_processes 1; 

#error_log logs/error.log; 
#error_log logs/error.log notice; 
#error_log logs/error.log info; 

#pid logs/nginx.pid; 

events { 
worker_connections 1024; 
} 

http { 
include mime.types; 
default_type application/octet-stream; 

#log_format main '$remote_addr - $remote_user [$time_local] "$request" ' 
# '$status $body_bytes_sent "$http_referer" ' 
# '"$http_user_agent" "$http_x_forwarded_for"'; 

#access_log logs/access.log main; 

sendfile on; 
#tcp_nopush on; 

#keepalive_timeout 0; 
keepalive_timeout 65; 
#设定请求缓冲, start 
client_header_buffer_size 1k; 
large_client_header_buffers 4 4k; 
#设定请求缓冲, end 

#设定提供服务的服务器,start 
#短信发送服务器 
upstream smsserver{ 
#weigth 表示权重,权值越大,分配几率越大 
#max_fails 当有max_fails个请求失败,就表示后端的服务器不可用,默认为1,将其设置为0可以关闭检查 
#fail_timeout 在以后的fail_timeout时间内nginx不会再把请求发往已检查出标记为不可用的服务器 
server 192.168.88.21:8091 weight=5 max_fails=5 fail_timeout=600s; 
server 192.168.88.22:8091 weight=5 max_fails=5 fail_timeout=600s; 
server 192.168.88.23:8091 weight=5 max_fails=5 fail_timeout=600s; 
} 
#彩信发送服务器 
upstream mmsserver{ 
#weigth 表示权重,权值越大,分配几率越大 
#max_fails 当有max_fails个请求失败,就表示后端的服务器不可用,默认为1,将其设置为0可以关闭检查 
#fail_timeout 在以后的fail_timeout时间内nginx不会再把请求发往已检查出标记为不可用的服务器 
server 192.168.88.21:8092 weight=5 max_fails=5 fail_timeout=600s; 
server 192.168.88.22:8092 weight=5 max_fails=5 fail_timeout=600s; 
server 192.168.88.23:8092 weight=5 max_fails=5 fail_timeout=600s; 
} 
#设定提供服务的服务器,end 

#gzip on; 

server { 
listen 8090; 
server_name localhost; 
#设定请求转发规则, start 
#规则采用最长匹配,/smsserver/*优先匹配/smsserver,/mmsserver/*优先匹配/mmsserver,/aaaaaaaa/*因为没有任何匹配,最后匹配到/ 
#规则一 
location / { 
proxy_pass http://localhost:80; 
} 
#规则二 
location /smsserver { 
proxy_pass http://smsserver; 
} 
#规则三 
location /mmsserver { 
proxy_pass http://mmsserver; 
} 
#设定请求转发规则, end 
error_page 500 502 503 504 /50x.html; 
location = /50x.html { 
root html; 
} 
} 

server { 
listen 80; 
server_name localhost; 
#设定请求转发规则, start 
location / { 
#定义服务器的默认网站根目录位置 
root /home/work/statichtml/index.html; 
#定义首页索引文件的名称 
#index index.php index.html index.htm; 
#请求转向orderServer定义的服务器列表 
# proxy_pass http://server; 

#以下是一些反向代理的配置可删除. 
# proxy_redirect off; 
# proxy_set_header Host $host; 
# proxy_set_header X-Real-IP $remote_addr; 
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
#允许客户端请求的最大单文件字节数 
# client_max_body_size 10m; 
#缓冲区代理缓冲用户端请求的最大字节数, 
# client_body_buffer_size 128k; 
#nginx跟后端服务器连接超时时间(代理连接超时) 
# proxy_connect_timeout 90; 
#后端服务器数据回传时间(代理发送超时) 
# proxy_send_timeout 90; 
#连接成功后,后端服务器响应时间(代理接收超时) 
# proxy_read_timeout 90; 
#设置代理服务器(nginx)保存用户头信息的缓冲区大小 
# proxy_buffer_size 4k; 
#proxy_buffers缓冲区,网页平均在32k以下的话,这样设置 
# proxy_buffers 4 32k; 
#高负荷下缓冲大小(proxy_buffers*2) 
# proxy_busy_buffers_size 64k; 
#设定缓存文件夹大小,大于这个值,将从upstream服务器传 
# proxy_temp_file_write_size 64k; 
} 
#设定请求转发规则, end 
error_page 500 502 503 504 /50x.html; 
location = /50x.html { 
root html; 
} 
} 
} 

2.暴露接口,但隐藏web项目的根目录

上面例子有个问题是,直接将我整个web根目录smsserver和mmsserver暴露到公网了,其实我的目的只是想暴露两个接口地址,所以6有待优化,举个例子如下:
1.需求
接口服务器列表两台台,提供服务的地址如下:
接口一:
http://192.168.88.21:8082/myweb/interface/getData
http://192.168.88.22:8082/myweb/interface/getData
接口二:
http://192.168.88.21:8082/myweb/interface/sendData
http://192.168.88.22:8082/myweb/interface/sendData

Nginx安装在另外一台单独机器上(公网IP为public_ip),对外提供服务地址如下: 
http://public_ip:8081/myweb/interface/getData 接口一 
http://public_ip:8081/myweb/interface/sendData 接口二
2.对于以上需求,配置/opt/nginx-1.8.0/conf/nginx.conf如下:

#user nobody; 
worker_processes 1; 
#error_log logs/error.log; 
#error_log logs/error.log notice; 
#error_log logs/error.log info; 
#pid logs/nginx.pid; 
events { 
worker_connections 1024; 
} 
http { 
include mime.types; 
default_type application/octet-stream; 

#log_format main '$remote_addr - $remote_user [$time_local] "$request" ' 
# '$status $body_bytes_sent "$http_referer" ' 
# '"$http_user_agent" "$http_x_forwarded_for"'; 

#access_log logs/access.log main; 

sendfile on; 
#tcp_nopush on; 

#keepalive_timeout 0; 
keepalive_timeout 65; 
#设定请求缓冲, start 
client_header_buffer_size 1k; 
large_client_header_buffers 4 4k; 
#设定请求缓冲, end 

#设定提供服务的服务器,start 
#我的接口服务器,两台 
upstream myweb{ 
#weigth 表示权重,权值越大,分配几率越大 
#max_fails 当有max_fails个请求失败,就表示后端的服务器不可用,默认为1,将其设置为0可以关闭检查 
#fail_timeout 在以后的fail_timeout时间内nginx不会再把请求发往已检查出标记为不可用的服务器 
server 192.168.88.21:8082 weight=5 max_fails=5 fail_timeout=600s; 
server 192.168.88.22:8082 weight=5 max_fails=5 fail_timeout=600s; 
} 
#设定提供服务的服务器,end 

#gzip on; 

server { 
listen 80; 
server_name localhost; 
#设定请求转发规则, start 
#规则采用最长匹配,即长度最长优先匹配,最后不匹配的走/进行匹配 
#规则一 
location / { 
root html; 
index index.html index.htm; 
} 
#设定请求转发规则, end 
error_page 500 502 503 504 /50x.html; 
location = /50x.html { 
root html; 
} 
} 

server { 
listen 8081; 
server_name localhost; 
#设定请求转发规则, start 
#规则采用最长匹配,即长度最长优先匹配,最后不匹配的走/进行匹配 
#规则一 
location / { 
root html; 
index index.html index.htm; 
} 
#规则二,查询接口一 
location /myweb/interface/getData { 
proxy_pass http://myweb; 
#转发请求的原IP地址,程序中通过request.getHeader("Proxy-Client-IP")获得ip 
proxy_set_header Host $host; 
#如果是有涉及redirect的服务,一定要加上端口8081,否则默认tomcat在redirect时候默认找80端口 
#proxy_set_header Host $host:8081; 
proxy_set_header Proxy-Client-IP $remote_addr; 
} 
#规则三,查询接口二 
location /myweb/interface/sendData { 
proxy_pass http://myweb; 
#转发请求的原IP地址,程序中通过request.getHeader("Proxy-Client-IP")获得ip 
proxy_set_header Host $host; 
#如果是有涉及redirect的服务,一定要加上端口8081,否则默认tomcat在redirect时候默认找80端口 
#proxy_set_header Host $host:8081; 
proxy_set_header Proxy-Client-IP $remote_addr; 
} 
#设定请求转发规则, end 
error_page 500 502 503 504 /50x.html; 
location = /50x.html { 
root html; 
} 
} 
} 

3.文件映射

/conf/nginx.conf中第一行的运行用户改为
user root;
location /uploadfile {
root /opt/staticdata/;
access_log /opt/nginx/logs/upload_access.log;
proxy_store_access user:rw group:rw all:rw;
}

当访问http://ip:port/uploadfile/aa/bb/cc.jpg
相当于访问 /opt/staticdata/uploadfile/aa/bb/cc.jpg
发布了6 篇原创文章 · 获赞 0 · 访问量 2671

猜你喜欢

转载自blog.csdn.net/shanghailuchaochao/article/details/92083251