[root@localhost conf]# cat nginx.conf #运行用户 user root; #启动进程,通常设置成和cpu的数量相等 worker_processes 8; #全局错误日志及PID文件 error_log /home/logonuser/www/logs/error.nginx.log; pid /var/run/nginx.pid; #工作模式及连接数上限 events { #epoll是多路复用IO(I/O Multiplexing)中的一种方式,但是仅用于linux2.6以上内核,可以大大提高nginx的性能 use epoll; #单个后台worker process进程的最大并发链接数 worker_connections 65535; multi_accept on; } #设定http服务器,利用它的反向代理功能提供负载均衡支持 http { #设定mime类型,类型由mime.type文件定义 include /usr/local/nginx/conf/mime.types; default_type application/octet-stream; #include /etc/nginx/conf.d/*.conf; #sendfile 指令指定 nginx 是否调用 sendfile 函数(zero copy 方式)来输出文件,对于普通应用, #必须设为 on,如果用来进行下载等应用磁盘IO重负载应用,可设置为 off,以平衡磁盘与网络I/O处理速度,降低系统的uptime. sendfile on; #tcp_nopush on; #连接超时时间 #keepalive_timeout 0; keepalive_timeout 60; tcp_nodelay on; #开启gzip压缩 gzip on; gzip_disable "MSIE [1-6]\.(?!.*SV1)"; #设定请求缓冲 client_header_buffer_size 256k; large_client_header_buffers 32 512k; open_file_cache max=65535 inactive=60s; open_file_cache_valid 80s; open_file_cache_min_uses 1; upstream guangjie { server 172.0.25.21:7002; server 172.0.25.22:7002; ip_hash; } server { listen 443; server_name test.com; ssl on; ssl_certificate test.com_bundle.crt; ssl_certificate_key test.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AES128-SHA:AES256-SHA:DES-CBC3-SHA:AES256-SHA256:AES128-SHA256; ssl_prefer_server_ciphers on; access_log /home/logonuser/www/logs/access.log; error_log /home/logonuser/www/logs/error.log; root html; index index.html index.htm index.php; location / { #proxy_pass http://localhost:7002/; proxy_pass http://guangjie; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; client_max_body_size 100m; client_body_buffer_size 256k; proxy_connect_timeout 500; proxy_send_timeout 2000; proxy_read_timeout 2000; proxy_ignore_client_abort on; proxy_buffer_size 128k; proxy_buffers 4 256k; proxy_busy_buffers_size 256k; proxy_temp_file_write_size 256k; } } server { listen 80; server_name test.com; access_log /home/logonuser/www/logs/access.log; error_log /home/logonuser/www/logs/error.log; root html; index index.html index.htm index.php; location / { #proxy_pass http://localhost:7002/; proxy_pass http://guangjie; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; client_max_body_size 100m; client_body_buffer_size 256k; proxy_connect_timeout 500; proxy_send_timeout 2000; proxy_read_timeout 2000; proxy_ignore_client_abort on; proxy_buffer_size 128k; proxy_buffers 4 256k; proxy_busy_buffers_size 256k; proxy_temp_file_write_size 256k; } } }