Nginxperformanceoptimizationtutorial

# configuration工作process数量
worker_processes auto;

# 绑定工作process to specificCPUcore
worker_cpu_affinity auto;

# 工作processpriority
worker_priority 0;

# 每个工作process 最 big connections
worker_connections 10240;

# eventmodelconfiguration
events {
    # usingepolleventmodel (Linuxsystem推荐) 
    use epoll;
    
    # 每个工作process 最 big connections
    worker_connections 10240;
    
    # 允许同时接受 many 个连接
    multi_accept on;
}

# 工作process 最 big 打开file数
worker_rlimit_nofile 65536;

# 连接configuration
http {
    # 开启 long 连接
    keepalive_timeout 65;
    
    # 每个 long 连接最 many processing request数
    keepalive_requests 100;
    
    #  long 连接 最 small 发送间隔
    keepalive_time 1h;
    
    #  long 连接 最 big 空闲时间
    keepalive_timeout 65;
    
    # 限制request体 big  small 
    client_max_body_size 10m;
    
    # 客户端头部超时时间
    client_header_timeout 10s;
    
    # 客户端request体超时时间
    client_body_timeout 10s;
    
    # 发送response超时时间
    send_timeout 10s;
    
    # server名称哈希表 big  small 
    server_names_hash_max_size 512;
    server_names_hash_bucket_size 64;
    
    # otherconfiguration
    ...
}

# 浏览器cacheconfiguration
server {
    listen 80;
    server_name example.com;
    
    root /var/www/example.com;
    index index.html;
    
    #  for 静态file设置cache头
    location ~* \.(css|js|jpg|jpeg|png|gif|ico|svg|pdf|json)$ {
        expires 30d;
        add_header Cache-Control "public, max-age=2592000";
        add_header Last-Modified $date_gmt;
        if_modified_since off;
        etag off;
    }
    
    location / {
        try_files $uri $uri/ =404;
    }
}

# proxycacheconfiguration
http {
    # 定义cachepath
    proxy_cache_path /var/cache/nginx/proxy_cache levels=1:2 keys_zone=proxy_cache:10m max_size=10g inactive=60m use_temp_path=off;
    
    server {
        listen 80;
        server_name example.com;
        
        # 启用proxycache
        location / {
            proxy_pass http://backend;
            proxy_cache proxy_cache;
            proxy_cache_valid 200 30d;
            proxy_cache_valid 404 1m;
            proxy_cache_key "$scheme$request_method$host$request_uri";
            proxy_cache_bypass $http_pragma;
            proxy_cache_bypass $http_cache_control;
            add_header X-Cache-Status $upstream_cache_status;
            
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
    
    upstream backend {
        server localhost:8080;
        server localhost:8081;
    }
}

# FastCGIcacheconfiguration
http {
    # 定义cachepath
    fastcgi_cache_path /var/cache/nginx/fastcgi_cache levels=1:2 keys_zone=fastcgi_cache:10m max_size=10g inactive=60m use_temp_path=off;
    
    server {
        listen 80;
        server_name example.com;
        
        root /var/www/example.com;
        index index.php;
        
        # 启用FastCGIcache
        location ~ \.php$ {
            try_files $uri =404;
            fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
            
            # cacheconfiguration
            fastcgi_cache fastcgi_cache;
            fastcgi_cache_valid 200 30m;
            fastcgi_cache_valid 404 1m;
            fastcgi_cache_key "$scheme$request_method$host$request_uri";
            fastcgi_cache_bypass $http_pragma;
            fastcgi_cache_bypass $http_cache_control;
            add_header X-Cache-Status $upstream_cache_status;
        }
    }
}

# Gzip压缩configuration
http {
    # 启用Gzip压缩
    gzip on;
    
    # 添加 on  under 文头, 告诉cacheserver根据编码返回不同 response
    gzip_vary on;
    
    # 设置最 small 压缩file big  small 
    gzip_min_length 1024;
    
    # 设置压缩级别 (1-9) , 级别越 high 压缩效果越 good , 但CPU消耗也越 big 
    gzip_comp_level 6;
    
    # 设置压缩缓冲区 big  small 
    gzip_buffers 16 8k;
    
    # 设置support HTTPversion
    gzip_http_version 1.1;
    
    # 设置需要压缩 fileclass型
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
    
    # otherconfiguration
    ...
}

# Brotli压缩configuration
http {
    # 启用Brotli压缩
    brotli on;
    
    # 设置压缩级别 (1-11) 
    brotli_comp_level 6;
    
    # 设置最 small 压缩file big  small 
    brotli_min_length 1024;
    
    # 设置压缩缓冲区 big  small 
    brotli_buffers 16 8k;
    
    # 设置需要压缩 fileclass型
    brotli_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
    
    # Gzip压缩configuration (serving as after 备) 
    gzip on;
    gzip_vary on;
    gzip_min_length 1024;
    gzip_comp_level 6;
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
    
    # otherconfiguration
    ...
}

# TCPparameteroptimization
http {
    # 启用TCP_NODELAY, reducingnetworklatency
    tcp_nodelay on;
    
    # 启用TCP_CORK, improvingnetworkthroughput
    tcp_nopush on;
    
    # 设置套接字缓冲区 big  small 
    client_body_buffer_size 16k;
    client_header_buffer_size 1k;
    large_client_header_buffers 4 8k;
    
    # otherconfiguration
    ...
}

#  in system级别optimizationTCPparameter
# /etc/sysctl.conf
net.core.somaxconn = 65535
net.ipv4.tcp_max_syn_backlog = 65535
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 300
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_fastopen = 3
net.core.netdev_max_backlog = 65535

# HTTP/2configuration
server {
    listen 443 ssl http2;
    server_name example.com;
    
    # SSLconfiguration
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    
    # otherconfiguration
    root /var/www/example.com;
    index index.html;
    
    location / {
        try_files $uri $uri/ =404;
    }
}

# filesystemoptimization
http {
    # 启用sendfile, reducingdata拷贝
    sendfile on;
    
    # 启用tcp_nopush,  and sendfile配合using, improvingperformance
    tcp_nopush on;
    
    # 启用directio,  for 于 big file传输, 绕过 in 核缓冲区
    directio 4m;
    
    # otherconfiguration
    ...
}

#  in system级别optimizationfilesystemparameter
# /etc/sysctl.conf
vm.swappiness = 10
vm.dirty_background_ratio = 5
vm.dirty_ratio = 10
vm.dirty_expire_centisecs = 3000
vm.dirty_writeback_centisecs = 500

# optimizationdiskschedulingalgorithms ( for 于SSD) 
# /etc/udev/rules.d/60-scheduler.rules
ACTION=="add|change", KERNEL=="sd*[!0-9]", ATTR{queue/rotational}=="0", ATTR{queue/scheduler}="none"

# configurationNginxstatusmonitor
http {
    # otherconfiguration
    ...
    
    server {
        listen 80;
        server_name example.com;
        
        # otherconfiguration
        ...
        
        # configurationstatusmonitor
        location /nginx_status {
            stub_status on;
            access_log off;
            allow 127.0.0.1;
            allow 192.168.1.0/24;
            deny all;
        }
    }
}