date: 2020-09-27title: nginx安装 #标题
tags: nginx安装 #标签
categories: nginx # 分类

记录下nginx安装过程，适用于大多数nginx版本。

安装

  1. wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
  2. yum makecache fast
  3. yum -y install pcre pcre-devel openssl openssl-devel zlib-devel zlib git gcc
  6. wget http://mirrors.sohu.com/nginx/nginx-1.18.0.tar.gz
  7. tar zxf nginx-1.18.0.tar.gz && cd nginx-1.18.0
  9. # 修改源码，隐藏版本信息
  11. $ vim src/core/nginx.h
  12. 源码如下: 
  13. #define nginx_version      1001018
  14. #define NGINX_VERSION      "1.18.0"
  15. #define NGINX_VER          "nginx/" NGINX_VERSION
  16. 改为：
  17. #define nginx_version      1001018
  18. #define NGINX_VERSION      "unknown"
  19. #define NGINX_VER          "unknown/" NGINX_VERSION
  21. $ vim src/http/ngx_http_header_filter_module.c
  22. 源码如下: 
  23. static char ngx_http_server_string[] = "Server: nginx" CRLF;
  24. 改为: 
  25. static char ngx_http_server_string[] = "Server: unknown" CRLF;
  27. $ vim src/http/ngx_http_special_response.c 
  29. 源码如下(有很多相似的字段，千万别改错了，注意！):
  30. static u_char ngx_http_error_tail[] =
  31. "<hr><center>nginx</center>" CRLF
  32. "</body>" CRLF
  33. "</html>" CRLF
  34. ;
  35. 改为：
  36. static u_char ngx_http_error_tail[] =
  37. "<hr><center>unknown</center>" CRLF
  38. "</body>" CRLF
  39. "</html>" CRLF
  40. ;
  43. mkdir /apps/usr -p
  44. # 为了支持sticky调度算法基于cookie会话保持，增加第三方模块sticky
  45. git clone https://bitbucket.org/nginx-goodies/nginx-sticky-module-ng.git
  46. sticky_path=$(readlink -f nginx-sticky-module-ng/)
  47. ./configure --prefix=/apps/usr/nginx-1.18.0 --with-http_ssl_module \
  48.             --with-http_addition_module  --with-pcre \
  49.             --with-http_stub_status_module --with-debug \
  50.             --add-module=${sticky_path} --with-stream --with-http_realip_module
  51. make 
  52. make install

安装后的优化

  1. cd /apps/usr/nginx-1.18.0/conf/
  2. $ vim nginx.conf
  4. # 全局字段配置如下:
  5. worker_processes  auto;   
  6. worker_cpu_affinity auto;
  7. worker_rlimit_nofile 65535;
  10. events {
  11.     worker_connections  65535;
  12. }
  14. # http{ }字段配置如下:
  15. http {
  16.     server_tokens off;
  17.     sendfile        on;
  18.     keepalive_timeout  65;
  19.     proxy_buffer_size  128k;
  20.     proxy_buffers   32 32k;
  21.     proxy_busy_buffers_size 256k;
  22.     server_names_hash_bucket_size  256;
  23.     client_header_buffer_size  256k;
  24.     large_client_header_buffers  4 256k;
  25.     reset_timedout_connection on;
  26.     client_max_body_size        50m;
  27.     client_header_timeout         10;
  28.     client_body_timeout           10;
  29.     send_timeout                  10;
  30.     open_file_cache          max=1000 inactive=20s;
  31.     open_file_cache_errors   on;
  32.     open_file_cache_min_uses 2;
  33.     keepalive_requests  100;
  34.     tcp_nodelay on;
  35.     tcp_nopush on;
  36.     gzip  on;
  37.     gzip_min_length   10k;
  38.     gzip_comp_level   5;
  39.     gzip_buffers      4 16k;
  40.     gzip_types text/plain application/javascript application/x-javascript text/javascript text/xml text/css text/js application/json;
  41.     gzip_http_version 1.1;
  42.     gzip_proxied      any;
  43.     gzip_vary         on;
  44.     gzip_disable "MSIE [1-6].";
  45.     .........
  46.     }
  49. # 若使用反向代理，location字段添加如下，使后端应用获取客户端真实IP
  50.         location / {
  51.             .........
  52.             proxy_set_header Host $host;
  53.             proxy_set_header X-Real-IP $remote_addr;
  54.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  55.         }
  58. # 修改系统最多可打开文件数限制
  59. $ ulimit -n   # 查看当前限制
  60. 1024
  61. cat >> /etc/security/limits.conf << EOF
  62. *       soft    nofile  65535
  63. *       hard    nofile  65535
  64. EOF
  65. # 重新登录后生效

检测配置文件并启动nginx

  1. $ ../sbin/nginx -t
  2. nginx: the configuration file /apps/usr/nginx-1.18.0/conf/nginx.conf syntax is ok
  3. nginx: configuration file /apps/usr/nginx-1.18.0/conf/nginx.conf test is successful
  4. $ ../sbin/nginx
  5. $ curl -I 127.0.0.1      # 访问测试
  6. HTTP/1.1 200 OK
  7. Server: unknown
  8. Date: Tue, 07 Jul 2020 15:13:53 GMT
  9. Content-Type: text/html
  10. Content-Length: 151
  11. Last-Modified: Tue, 07 Jul 2020 14:43:35 GMT
  12. Connection: keep-alive
  13. Accept-Ranges: bytes