Nginx 대형 클 러 스 터 배치 절차 및 개선

[nginx]
nginx[1:2]
[web]
web[1:8]
[web-php]
web[1:4]
[web-nginx]
web[5:8]

192.168.0.1 nginx1
192.168.0.2 nginx2
192.168.0.10 web1
192.168.0.11 web2
192.168.0.12 web3
192.168.0.13 web4
192.168.0.14 web5
192.168.0.15 web6
192.168.0.16 web7
192.168.0.17 web8

RSAAuthentication yes
PubkeyAuthentication yes

PasswordAuthentication no

host_key_checking = False  

ansible all -m copy -a 'src=**.repo dest=/etc/yum.repo.d/'

ansible nginx -m copy -a '/usr/local/nginx/conf/'

http {
.. ..
#  upstream         ，      ( webserver)
#  server              
upstream webserver {
#  ip_hash       ：            
#ip_hash;
#server 192.168.0.10:weight=1 max_fails=1 fail_timeout=30;
                server 192.168.0.10:80;
                server 192.168.0.11:80;
                server 192.168.0.12:80;
                server 192.168.0.13:80;
                server 192.168.0.14:80;
                server 192.168.0.15:80;
                server 192.168.0.16:80;
                server 192.168.0.17:80;
                
#weight        ，    1
#max_fails        
#fail_timeout        ，    
#down        ，       
        }
.. ..
server {
        listen        80;
        server_name  localhost;
            location / {
#  proxy_pass         webserver  
            proxy_pass http://webserver;
        }
}

/usr/local/nginx/sbin/nginx -s reload

location / {
            root   html;
            index  index.php  index.html   index.htm;
#       index.php，                IP，         ，         index.php     
        }
 location  ~  \.php$  {
            root           html;
            fastcgi_pass   127.0.0.1:9000;    #        9000  ，PHP   
            fastcgi_index  index.php;
            #fastcgi_param   SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi.conf;
        }

http {
client_header_buffer_size    1k;        //               
large_client_header_buffers  4 4k;        //                
gzip on;                            //    
gzip_min_length 1000;                //      
gzip_comp_level 4;                //    
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
                                    //       ，    mime.types
 open_file_cache          max=2000  inactive=20s;
 open_file_cache_valid    60s;
 open_file_cache_min_uses 5;
 open_file_cache_errors   off;
//         2000     ，  20          
//          60 ，60    
//        5     
.. ..
}

worker_processes  2;                  ## CPU      
events {
worker_connections 65535;        ##  worker       
use epoll;
}

server {
        listen       80;
        server_name  localhost;
        location / {
            root   html;
            index  index.html index.htm;
        }
        
location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ {
expires        30d;            //          30 
}
error_page   404  /40x.html;    //       

          soft    nofile            100000

          hard    nofile            100000

#!/bin/bash
date=`date +%Y%m%d`
logpath=/usr/local/nginx/logs
mv $logpath/access.log $logpath/access-$date.log
mv $logpath/error.log $logpath/error-$date.log
kill -USR1 $(cat $logpath/nginx.pid)

… …
location /status {
                stub_status on;
                 #allow IP  ;
                 #deny IP  ;
        }
… …

server {
        listen       80;
        server_name  localhost;
#rewrite /a.html  /b.html;            
#  a.html    b.html
 
#rewrite /a.html  /b.html  redirect;            
#  a.html    b.html（     ）
  
#  192.168.0.5       www.ccc.cn
#rewrite ^/ http://www.ccc.cn/;
 
#rewrite ^/(.*)$ http://www.dd.cn/$1;
#      (  192.168.0.5/     ，    www.dd.cn/      )
location / {
    root   html;
index  index.html index.htm;
}
#  ，~        ，*          
if ($http_user_agent ~* firefox) {            //     firefox   
rewrite ^(.*)$ /firefox/$1;
#  curl                
}