<b>Linux下配置Nginx + 双Tomcat负载均衡</b>[服务器安全]

引言
Nginx简介
Nginx ("engine x") 是一个高性能的 HTTP 和 反向代理 服务器,也是一个 IMAP/POP3/SMTP 代理服务器 . Nginx 是由 Igor Sysoev 为俄罗斯拜候量第二的Rambler.ru 站点开辟的,它已经在该站点运行超越四年多了.Igor 将源代码以类BSD答应证的情势公布.自Nginx 公布四年来,Nginx 已经因为它的安定性、丰富的功效集、 示例配置文件和低系统资源的损耗而闻名了.目前国内各大门户网站已经布置了Nginx,如新浪、网易、腾讯等;国内几个重要的视频分享网站也布置了Nginx,如六房间、酷6等. 新近发现Nginx 技术在国内日益炽热,越来越多的网站开始布置Nginx.
一.JDK的安装
#tar zxvf jdk-7-linux-i586.tar.gz
#mkdir /usr/java
#mv jdk1.7.0 /usr/java
设置环境变量
#vi /etc/profile
export JAVA_HOME=/usr/local/jdk1.7.0
export CLASSPATH=.:$JAVA_HOME/lib/tools.jar:$JAVA_HOME/lib/dt.jar
export PATH=$JAVA_HOME/bin:$PATH
保存退出
:wq
使环境变量见效
#source /etc/profile
测试JDK
#java -version
二.TOMCAT的安装
将TOMCAT安装在/usr/local/tomcat6
设置环境变量
#vi /etc/profile
export TOMCAT_HOME=/usr/local/tomcat6
export CATALINA_HOME=/usr/local/tomcat6
export CATALINA_BASE=/usr/local/tomcat6
在CLASSPATH背面增添$TOMCAT_HOME/common/lib/servlet.jar
在PATH背面增添:$CATALINA_HOME/lib
保存退出
:wq
使环境变量见效
#source /etc/profile
改正TOMCAT配置文件/usr/local/tomcat6/conf/server.xml
将以下内容
<Host name="localhost" appBase="webapps"
.../>
改正成
<Host name="localhost" appBase="/usr/local/www/web"
.../>
启动TOMCAT
/usr/local/tomcat6/bin/startup.sh
关闭TOMCAT
/usr/local/tomcat6/bin/shutdown.sh

三.同一linux系统下安装多个TOMCAT
将TOMCAT安装在/usr/local/tomcat6_2
设置环境变量
#vi /etc/profile
export TOMCAT_2_HOME=/usr/local/tomcat6_2
export CATALINA_2_HOME=/usr/local/tomcat6_2
export CATALINA_2_BASE=/usr/local/tomcat6_2
在CLASSPATH背面增添$TOMCAT_2_HOME/common/lib/servlet.jar
在PATH背面增添:$CATALINA_2_HOME/lib
保存退出
:wq
使环境变量见效
#source /etc/profile
改正TOMCAT配置文件/usr/local/tomcat6_2/conf/server.xml
将以下内容
<Server port="8005" shutdown="SHUTDOWN">...
<Connector port="8080" protocol="HTTP/1.1" ...
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
<Host name="localhost" appBase="webapps"
.../>
改正成
<Server port="9005" shutdown="SHUTDOWN">...
<Connector port="9090" protocol="HTTP/1.1" ...
<Connector port="9009" protocol="AJP/1.3" redirectPort="8443" />
<Host name="localhost" appBase="/usr/local/www/web"
.../>

改正TOMCAT配置启动文件/usr/local/tomcat6_2/bin/startup.sh
在exec上增添以下内容
export JAVA_HOME=/usr/java/jdk1.7.0
export CLASSPATH=$JAVA_HOME/lib
export PATH=$JAVA_HOME/bin
export CATALINA_HOME=$CATALINA_2_HOME
export CATALINA_BASE=$CATALINA_2_BASE
改正TOMCAT配置启动文件/usr/local/tomcat6_2/bin/shutdown.sh
在exec上增添以下内容
export JAVA_HOME=/usr/java/jdk1.7.0
export CLASSPATH=$JAVA_HOME/lib
export PATH=$JAVA_HOME/bin
export CATALINA_HOME=$CATALINA_2_HOME
export CATALINA_BASE=$CATALINA_2_BASE
启动TOMCAT
/usr/local/tomcat6_2/bin/startup.sh
关闭TOMCAT
/usr/local/tomcat6_2/bin/shutdown.sh
四.NGINX的安装
查抄安装nginx的依靠性,nginx的模块需求第三方的支持,查抄能否安装下列库:zlib zlib-devel openssl openssl-devel pcre pcre-devel gcc
增添用户和组
#groupadd nginx
#useradd -g nginx nginx将文件解压后安装
#tar zxvf nginx-1.0.5.tar.gz
#wget http://www.linuxidc.com/system/systemfiles/2011/08/ngx_cache_purge-1.3.tar.gz
#tar zxvf ngx_cache_purge-1.3.tar.gz
#cd nginx-1.0.5
#./configure --user=nginx --group=nginx --prefix=/usr/local/nginx --with-http_ssl_module --with-http_sub_module --with-http_stub_status_module --add-module=../ngx_cache_purge-1.3
#make
#make install
改正/usr/local/nginx/conf/nginx.conf
user nginx nginx;
worker_processes 2;
error_log /usr/local/nginx/logs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 65535;
events
{
use epoll;
worker_connections 65535;
}
http
{
include mime.types;
default_type application/octet-stream;
charset utf-8;

server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 300m;

sendfile on;
tcp_nopush on;
keepalive_timeout 60;
tcp_nodelay on;
client_body_buffer_size 512k;
proxy_connect_timeout 5;
proxy_read_timeout 60;
proxy_send_timeout 5;
proxy_buffer_size 16k;
proxy_buffers 4 64k;
proxy_busy_buffers_size 128k;
proxy_temp_file_write_size 128k;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.1;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
#注:proxy_temp_path和proxy_cache_path指定的途径必须在同一分区
proxy_temp_path /usr/local/www/proxy_temp_dir;
#设置Web缓存区名称为cache_one,内存缓存空间大小为200MB,1天没有被拜候的内容自动排除,硬盘缓存空间大小为30GB.
proxy_cache_path /usr/local/www/proxy_cache_dir levels=1:2 keys_zone=cache_one:200m inactive=1d max_size=30g;

upstream backend_server {
server 127.0.0.1:8080 weight=1 max_fails=2 fail_timeout=30s;
server 127.0.0.1:9090 weight=1 max_fails=2 fail_timeout=30s;
ip_hash;
}
server
{
listen 80;
server_name localhost;
index index.html index.htm;
root /usr/local/www/web/ROOT;
location /
{
#假如后端的服务器返回502、504、履行超时等错误,自动将恳求转发到upstream负载均衡池中的另一台服务器,实现弊端转移.
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_cache cache_one;
#对差别的HTTP状况码设置差别的缓存时间
proxy_cache_valid 200 304 12h;
#以域名、URI、参数组合成Web缓存的Key值,Nginx按照Key值哈希,存储缓存内容到二级缓存目录内
proxy_cache_key $host$uri$is_args$args;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_pass http://backend_server;
expires 1d;
}

#用于排除缓存,假定一个URL为http://192.168.8.42/test.txt,通过拜候http://192.168.8.42/purge/test.txt便可以排除该URL的缓存.
location ~ /purge(/.*)
{
#设置只答应指定的IP或IP段才可以排除URL缓存.
allow 127.0.0.1;
allow 192.168.0.0/16;
deny all;
proxy_cache_purge cache_one $host$1$is_args$args;
}
#扩大名以.php、.jsp、.cgi末尾的动态利用程序不缓存.
location ~ .*\.(php|jsp|cgi)?$
{
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_pass http://backend_server;
}
access_log off;
}
}
成立缓存文件夹
#mkdir /usr/local/www/proxy_temp_dir
#mkdir /usr/local/www/proxy_cache_dir
启动NGINX
/usr/local/nginx/sbin/nginx
关闭NGINX
/usr/local/nginx/sbin/nginx -s stop
重启NGINX
/usr/local/nginx/sbin/nginx -s relo 　　以上是“<b>Linux下配置Nginx + 双Tomcat负载均衡</b>[服务器安全]”的内容，如果你对以上该文章内容感兴趣，你可以看看七道奇为您推荐以下文章：