openEuler + Nginx 性能优化实战：性能提升233%的秘密

# 查看系统版本
cat /etc/os-release
uname -r

# 安装 Nginx
sudo dnf makecache
sudo dnf install nginx -y

# 启动服务
sudo systemctl start nginx
sudo systemctl enable nginx

# 配置防火墙
sudo firewall-cmd --permanent --add-service={http,https}
sudo firewall-cmd --reload

# 测试访问
curl -I http://localhost

# 安装性能测试工具
sudo dnf install httpd-tools -y  # ApacheBench
sudo dnf install wrk -y           # wrk 压测工具

# 创建测试文件
echo "Hello openEuler 25.09" | sudo tee /usr/share/nginx/html/test.txt

# 创建不同大小的测试文件
sudo dd if=/dev/zero of=/usr/share/nginx/html/1kb.bin bs=1K count=1
sudo dd if=/dev/zero of=/usr/share/nginx/html/10kb.bin bs=10K count=1
sudo dd if=/dev/zero of=/usr/share/nginx/html/100kb.bin bs=100K count=1
sudo dd if=/dev/zero of=/usr/share/nginx/html/1mb.bin bs=1M count=1
sudo dd if=/dev/zero of=/usr/share/nginx/html/10mb.bin bs=1M count=10

sudo chown -R nginx:nginx /usr/share/nginx/html/

# 测试命令：10万请求，1000并发
ab -n 100000 -c 1000 -k http://localhost/1kb.bin

ab -n 50000 -c 500 -k http://localhost/100kb.bin

ab -n 1000 -c 100 -k http://localhost/10mb.bin

# 使用 wrk 测试高并发场景
wrk -t4 -c2000 -d30s --latency http://localhost/1kb.bin

# CPU 使用率
top -bn1 | grep "Cpu(s)"
# 结果：Cpu(s): 45.2%us, 12.3%sy, 0.0%ni, 38.5%id, 2.1%wa

# 内存使用
free -h
# 结果：used: 2.3GB / 8GB (28.75%)

# 网络连接数
ss -s
# 结果：TCP: 1245 (estab 1089, closed 89, orphaned 12)

# 文件描述符
cat /proc/sys/fs/file-nr
# 结果：2345   0   1048576

# 编辑系统限制
sudo vim /etc/security/limits.conf

# 添加以下内容
* soft nofile 100000
* hard nofile 100000
* soft nproc 100000
* hard nproc 100000

# 编辑 sysctl 配置
sudo vim /etc/sysctl.conf

# 添加
fs.file-max = 1000000

# 应用配置
sudo sysctl -p

# 验证
ulimit -n

# 编辑 sysctl 配置
sudo vim /etc/sysctl.conf

# 添加以下内容
# TCP 优化
net.core.somaxconn = 65535
net.core.netdev_max_backlog = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0

# BBR 拥塞控制
net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr

# 应用配置
sudo sysctl -p

# 验证 BBR
sysctl net.ipv4.tcp_congestion_control
lsmod | grep bbr

user nginx;
worker_processes auto;
worker_cpu_affinity auto;
worker_priority -10;
worker_rlimit_nofile 100000;

error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;

events {
    use epoll;
    worker_connections 65535;
    multi_accept on;
    accept_mutex off;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    # 零拷贝优化
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    # 长连接优化
    keepalive_timeout 65;
    keepalive_requests 10000;

    # 缓冲区优化
    client_header_buffer_size 4k;
    large_client_header_buffers 4 32k;
    client_body_buffer_size 128k;
    client_max_body_size 100m;

    # 文件缓存
    open_file_cache max=10000 inactive=60s;
    open_file_cache_valid 80s;
    open_file_cache_min_uses 2;
    open_file_cache_errors on;

    # Gzip 压缩
    gzip on;
    gzip_comp_level 6;
    gzip_min_length 1024;
    gzip_types text/plain text/css application/json application/javascript;

    # 默认 server 配置
    server {
        listen 80;
        server_name localhost;
        root /usr/share/nginx/html;
        index index.html;

        # 访问日志（压测时关闭以提升性能）
        access_log off;

        location / {
            try_files $uri $uri/ =404;
        }

        # 静态文件缓存
        location ~* \.(jpg|jpeg|png|gif|ico|css|js|bin)$ {
            expires 1y;
            add_header Cache-Control "public, immutable";
        }
    }

    include /etc/nginx/conf.d/*.conf;
}

# 编辑 Nginx 服务文件
sudo vim /usr/lib/systemd/system/nginx.service

# 在 [Service] 段添加
[Service]
LimitNOFILE=100000
LimitNPROC=100000

# 重新加载 systemd
sudo systemctl daemon-reload

# 重启 Nginx
sudo systemctl restart nginx

# 验证配置
sudo nginx -t
sudo systemctl status nginx

ab -n 100000 -c 1000 -k http://localhost/1kb.bin

ab -n 50000 -c 500 -k http://localhost/100kb.bin

ab -n 1000 -c 100 -k http://localhost/10mb.bin

wrk -t4 -c2000 -d30s --latency http://localhost/1kb.bin

wrk -t8 -c10000 -d60s --latency http://localhost/1kb.bin

# CPU 使用率
top -bn1 | grep "Cpu(s)"
# 结果：Cpu(s): 78.5%us, 15.2%sy, 0.0%ni, 4.3%id, 0.8%wa

# 内存使用
free -h
# 结果：used: 3.8GB / 8GB (47.5%)

# 网络连接数
ss -s
# 结果：TCP: 10245 (estab 9989, closed 156, orphaned 3)

# 文件描述符
cat /proc/sys/fs/file-nr
# 结果：15678   0   1000000

# 上下文切换
vmstat 1 5
# 结果：cs: 45678/s (优化前: 78945/s)

QPS 提升对比（1KB 文件）：
优化前: ████████████████ 5,199/s
优化后: ████████████████████████████████████████████████ 16,042/s (+208%)

延迟降低对比（1KB 文件）：
优化前: ████████████████████████████████ 192.34ms
优化后: ██████████ 62.34ms (-67.6%)

吞吐量提升对比（100KB 文件）：
优化前: ████████████████ 314MB/s
优化后: ██████████████████████████████ 578MB/s (+83.9%)

并发能力提升：
优化前: ████ 2000 连接 (有超时)
优化后: ████████████████████████████████ 10000 连接 (稳定运行)

# 混合文件大小测试
wrk -t8 -c5000 -d60s --script=mixed.lua http://localhost/

# 小数据包高频请求
ab -n 100000 -c 2000 -k http://localhost/api/test

# 静态资源混合测试
ab -n 200000 -c 3000 -k http://localhost/static/image.jpg

# 24 小时持续压测
wrk -t8 -c5000 -d24h --latency http://localhost/1kb.bin